Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/393792A6262211EEBB59EC51C4F9AE02.roa
File: 393792A6262211EEBB59EC51C4F9AE02.roa (raw, json)
Hash identifier: f04m1DgpZQ1pVKmtU0in5b5Xod1GzzLObkDxp930KXQ=
Subject key identifier: 78:B9:8E:8C:AE:37:95:98:70:8B:8A:48:89:05:A2:FE:95:87:9D:33
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 75CE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/393792A6262211EEBB59EC51C4F9AE02.roa
Signing time: Wed 19 Jul 2023 11:18:35 +0000
ROA not before: Wed 19 Jul 2023 11:18:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133647
IP address blocks: 14.102.17.0/24 maxlen: 24
14.102.18.0/24 maxlen: 24
14.102.19.0/24 maxlen: 24
14.102.20.0/24 maxlen: 24
14.102.21.0/24 maxlen: 24
14.102.46.0/24 maxlen: 24
14.102.47.0/24 maxlen: 24
14.102.49.0/24 maxlen: 24
14.102.51.0/24 maxlen: 24
14.102.58.0/24 maxlen: 24
14.102.61.0/24 maxlen: 24
14.102.94.0/24 maxlen: 24
14.102.102.0/24 maxlen: 24
43.230.156.0/22 maxlen: 24
45.115.252.0/22 maxlen: 24
45.116.68.0/24 maxlen: 24
45.116.106.0/24 maxlen: 24
45.116.107.0/24 maxlen: 24
103.38.70.0/24 maxlen: 24
103.43.4.0/22 maxlen: 24
103.50.4.0/22 maxlen: 24
103.55.6.0/23 maxlen: 23
103.55.7.0/24 maxlen: 24
103.61.101.0/24 maxlen: 24
103.61.102.0/24 maxlen: 24
103.61.103.0/24 maxlen: 24
103.61.242.0/23 maxlen: 24
103.69.216.0/22 maxlen: 24
103.70.144.0/22 maxlen: 24
103.70.176.0/23 maxlen: 24
103.79.112.0/22 maxlen: 24
103.87.48.0/24 maxlen: 24
103.87.49.0/24 maxlen: 24
103.91.68.0/22 maxlen: 24
103.93.176.0/22 maxlen: 24
103.122.85.0/24 maxlen: 24
103.156.168.0/23 maxlen: 24
103.157.160.0/23 maxlen: 24
103.159.154.0/23 maxlen: 24
103.161.230.0/23 maxlen: 24
103.161.232.0/24 maxlen: 24
103.161.233.0/24 maxlen: 24
103.174.105.0/24 maxlen: 24
103.175.76.0/24 maxlen: 24
103.175.77.0/24 maxlen: 24
103.220.28.0/24 maxlen: 24
103.220.29.0/24 maxlen: 24
103.220.30.0/24 maxlen: 24
103.220.31.0/24 maxlen: 24
103.237.172.0/24 maxlen: 24
103.237.173.0/24 maxlen: 24
103.237.174.0/24 maxlen: 24
103.237.175.0/24 maxlen: 24
110.172.137.0/24 maxlen: 24
110.172.141.0/24 maxlen: 24
110.172.142.0/24 maxlen: 24
110.172.144.0/24 maxlen: 24
110.172.163.0/24 maxlen: 24
110.172.172.0/24 maxlen: 24
110.172.188.0/24 maxlen: 24
118.91.184.0/24 maxlen: 24
118.91.190.0/24 maxlen: 24
175.111.180.0/24 maxlen: 24
175.111.182.0/24 maxlen: 24
175.111.183.0/24 maxlen: 24
202.89.73.0/24 maxlen: 24
202.89.79.0/24 maxlen: 24
2001:df1:b280::/48 maxlen: 48
2001:df1:f440::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30158 (0x75ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 19 11:18:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64b7c68b-62d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:75:b2:13:bd:a7:1d:78:b7:10:9e:94:07:
cd:c7:13:7d:cc:81:b5:22:88:52:82:9d:05:26:df:
32:a5:ae:e6:af:e8:09:a2:ad:33:46:d5:7c:15:ca:
20:e6:27:3e:8d:7f:0d:94:e1:b3:10:09:35:6b:28:
75:48:ce:62:28:b2:83:98:ca:0f:f6:50:be:77:28:
f1:33:ed:e5:72:2f:ec:1b:1f:b2:78:41:7e:68:fb:
9e:cb:65:c3:e7:06:da:4d:aa:53:fb:38:61:c5:d1:
8e:39:9c:46:19:8d:77:2c:ab:60:8a:d3:df:5d:90:
b3:26:a6:1f:6c:01:83:b3:3b:9e:5d:b3:26:e2:bd:
b4:4b:42:57:96:16:8b:ec:be:a4:df:40:7d:a3:4b:
f2:20:0f:ab:90:fd:70:ba:4f:6f:d5:cc:cf:36:46:
10:d9:b2:21:c0:16:a4:ed:f2:b2:bc:22:3b:db:23:
e0:0d:9f:11:e9:79:32:8a:a1:d1:92:4d:7e:28:fd:
96:3c:60:7a:89:07:28:6d:82:6c:b8:23:00:15:42:
68:c3:bb:a6:c7:be:3d:31:48:ea:82:85:c3:88:ed:
6f:77:41:8a:84:d8:94:c8:3f:12:5f:34:5a:63:a3:
2e:ee:8c:66:03:77:05:05:18:80:70:c4:16:1e:8b:
cb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B9:8E:8C:AE:37:95:98:70:8B:8A:48:89:05:A2:FE:95:87:9D:33
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/393792A6262211EEBB59EC51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.102.17.0-14.102.21.255
14.102.46.0/23
14.102.49.0/24
14.102.51.0/24
14.102.58.0/24
14.102.61.0/24
14.102.94.0/24
14.102.102.0/24
43.230.156.0/22
45.115.252.0/22
45.116.68.0/24
45.116.106.0/23
103.38.70.0/24
103.43.4.0/22
103.50.4.0/22
103.55.6.0/23
103.61.101.0-103.61.103.255
103.61.242.0/23
103.69.216.0/22
103.70.144.0/22
103.70.176.0/23
103.79.112.0/22
103.87.48.0/23
103.91.68.0/22
103.93.176.0/22
103.122.85.0/24
103.156.168.0/23
103.157.160.0/23
103.159.154.0/23
103.161.230.0-103.161.233.255
103.174.105.0/24
103.175.76.0/23
103.220.28.0/22
103.237.172.0/22
110.172.137.0/24
110.172.141.0-110.172.142.255
110.172.144.0/24
110.172.163.0/24
110.172.172.0/24
110.172.188.0/24
118.91.184.0/24
118.91.190.0/24
175.111.180.0/24
175.111.182.0/23
202.89.73.0/24
202.89.79.0/24
IPv6:
2001:df1:b280::/48
2001:df1:f440::/48
Signature Algorithm: sha256WithRSAEncryption
5a:f6:1c:1f:b4:35:7a:f8:e6:6d:b8:6c:bc:9d:78:89:f4:4d:
b8:50:03:18:e3:7d:23:b3:54:42:b6:db:1d:7e:f1:0b:00:27:
c7:d6:af:a6:42:3a:31:62:1c:12:af:51:6a:d2:7d:91:ca:07:
87:55:33:5c:9b:df:de:56:17:f0:5c:b1:0a:6d:9d:45:98:1d:
34:bb:c3:74:ad:80:93:0b:3e:c4:7f:09:92:6a:9e:1b:95:01:
5e:89:f3:fe:38:cd:26:4e:9e:1f:42:18:61:3a:19:9d:eb:d1:
d9:4f:03:48:05:e8:c3:b2:22:a2:8a:d4:59:75:e1:3d:fa:ca:
99:0a:ca:4b:ab:69:1b:55:79:72:45:41:59:66:7b:78:8b:f8:
71:b3:48:f7:80:1a:f4:df:17:44:01:93:d0:b5:bf:83:fd:9d:
82:97:85:42:07:cb:a9:d5:eb:53:71:8d:81:ed:a2:c0:50:cf:
a1:8e:ae:2a:45:72:a5:8f:41:fe:69:7b:62:7e:ea:19:38:3c:
e2:d0:a9:3b:86:39:6d:9a:c5:57:f0:3a:90:46:ce:37:48:87:
9d:e4:d7:4b:6e:4f:41:5f:32:cd:e2:9c:2b:74:c1:77:54:e7:
38:9c:e1:bb:a5:81:be:36:31:e3:19:53:af:1d:0f:10:f5:63:
c2:37:19:2c
-----BEGIN CERTIFICATE-----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Generated at Thu Jul 20 01:58:38 2023 by rpki-client on console-fra.rpki-client.org