Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74282672D90C11EDBA00DC2EC4F9AE02.roa
File: 74282672D90C11EDBA00DC2EC4F9AE02.roa (raw, json)
Hash identifier: hRlGJTc16WOGxhIqgh3H3zqsLG4nY5Th8B4PwsVTHqk=
Subject key identifier: 02:20:64:4D:A7:9A:04:32:E7:7E:D8:65:B6:CD:74:58:17:2C:F9:DD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7320
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74282672D90C11EDBA00DC2EC4F9AE02.roa
Signing time: Thu 01 Jun 2023 09:12:13 +0000
ROA not before: Thu 01 Jun 2023 09:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137085
IP address blocks: 27.123.240.0/23 maxlen: 24
43.225.248.0/22 maxlen: 24
103.37.98.0/23 maxlen: 24
103.52.32.0/24 maxlen: 24
103.68.140.0/23 maxlen: 24
103.72.196.0/24 maxlen: 24
103.79.167.0/24 maxlen: 24
103.91.72.0/24 maxlen: 24
103.91.73.0/24 maxlen: 24
103.91.74.0/24 maxlen: 24
103.91.75.0/24 maxlen: 24
103.91.76.0/22 maxlen: 24
103.93.39.0/24 maxlen: 24
103.101.112.0/22 maxlen: 24
103.113.110.0/23 maxlen: 24
103.120.152.0/24 maxlen: 24
103.120.153.0/24 maxlen: 24
103.138.9.0/24 maxlen: 24
103.154.8.0/23 maxlen: 24
103.158.41.0/24 maxlen: 24
103.160.25.0/24 maxlen: 24
103.160.222.0/24 maxlen: 24
103.173.238.0/23 maxlen: 24
103.174.28.0/24 maxlen: 24
103.174.29.0/24 maxlen: 24
103.175.77.0/24 maxlen: 24
103.178.117.0/24 maxlen: 24
103.181.119.0/24 maxlen: 24
103.184.41.0/24 maxlen: 24
103.204.70.0/24 maxlen: 24
103.206.51.0/24 maxlen: 24
103.206.96.0/23 maxlen: 24
103.232.232.0/22 maxlen: 24
202.4.169.0/24 maxlen: 24
2001:df1:d240::/48 maxlen: 48
2001:df2:3ac0::/48 maxlen: 48
2001:df2:3f40::/48 maxlen: 48
2400:d660::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29472 (0x7320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 1 09:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=647860ec-40dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:5f:b4:16:7d:cc:84:00:7b:7d:4f:ed:e2:
62:36:2e:22:c7:3d:e2:f9:1a:fc:6b:c9:6c:90:b0:
36:c1:b0:59:cf:08:8a:5d:f2:2e:c1:f9:71:cd:04:
bf:6d:b9:ea:78:27:ca:ff:e3:71:eb:54:17:4f:e9:
fa:d6:f3:8f:39:07:d5:f6:9c:5e:72:8a:95:cc:c2:
7f:f6:38:01:c3:0e:11:f5:d0:f2:dc:af:01:e2:02:
c0:ab:b2:8c:0d:9d:2a:7d:ed:06:b8:e6:4e:55:85:
99:c7:78:77:a5:92:4f:93:69:13:d7:ec:78:5f:45:
de:23:8b:8b:83:5b:10:a4:2c:b5:2b:32:d8:00:0f:
ab:63:48:a2:25:77:16:9e:11:c0:31:e5:8e:78:54:
b5:30:ce:8c:3d:74:41:9f:a6:b2:10:4e:55:19:de:
92:3e:02:7d:af:da:7c:6c:97:ae:94:f4:e8:d6:66:
2e:a1:a2:e0:9d:a0:6a:89:6e:50:9a:c4:b2:a6:95:
60:0e:a5:51:50:81:37:6a:99:24:c5:2e:17:a8:50:
0e:17:5c:b0:1a:dd:b4:7e:59:2e:84:1d:f5:cd:57:
57:7b:a0:52:53:d1:8d:5c:12:92:bc:01:c5:13:7a:
e9:32:dd:c3:1e:dc:ba:ba:8a:84:e8:13:2c:c2:a1:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:20:64:4D:A7:9A:04:32:E7:7E:D8:65:B6:CD:74:58:17:2C:F9:DD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74282672D90C11EDBA00DC2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/23
43.225.248.0/22
103.37.98.0/23
103.52.32.0/24
103.68.140.0/23
103.72.196.0/24
103.79.167.0/24
103.91.72.0/21
103.93.39.0/24
103.101.112.0/22
103.113.110.0/23
103.120.152.0/23
103.138.9.0/24
103.154.8.0/23
103.158.41.0/24
103.160.25.0/24
103.160.222.0/24
103.173.238.0/23
103.174.28.0/23
103.175.77.0/24
103.178.117.0/24
103.181.119.0/24
103.184.41.0/24
103.204.70.0/24
103.206.51.0/24
103.206.96.0/23
103.232.232.0/22
202.4.169.0/24
IPv6:
2001:df1:d240::/48
2001:df2:3ac0::/48
2001:df2:3f40::/48
2400:d660::/32
Signature Algorithm: sha256WithRSAEncryption
88:61:ea:c2:95:19:f5:e5:83:25:5f:83:53:f7:9c:d4:d0:e3:
18:11:47:91:4b:a7:5f:84:5e:2c:47:c2:83:f8:4b:04:6b:84:
fe:5b:f7:4e:ea:45:73:3d:a8:81:c4:30:2e:c3:71:f9:ac:64:
cd:4a:9b:f2:a7:49:ed:9d:ca:a7:30:dd:9b:bc:ac:83:2f:fa:
d3:db:6a:e1:9d:8d:bc:e0:43:2b:a8:51:81:f5:90:49:b2:2c:
42:f4:81:cb:5c:ab:36:33:56:59:37:5b:bf:58:36:8b:07:1e:
56:74:7d:5c:c3:7c:b0:72:6d:85:01:53:ef:17:31:10:66:f6:
2d:3e:dc:ce:a1:d0:9c:57:98:ed:2e:c5:4a:a5:86:54:4e:71:
f6:a7:d3:f7:43:c2:24:b5:20:4b:5f:8d:63:45:6d:7a:a9:5a:
09:3b:30:ed:bf:18:b0:6c:93:43:42:f9:a1:29:11:f0:a9:53:
5a:fe:b8:f5:8c:82:a4:a5:8f:d3:f0:6c:66:2f:0c:85:ec:fe:
5f:3a:e9:b6:39:38:42:9e:a5:59:ec:72:91:cf:4d:40:a2:64:
3e:d9:34:4e:2a:ea:55:b9:c7:9f:83:d0:06:67:b4:3a:d0:a4:
14:69:03:d4:a0:2f:81:95:c9:db:c6:72:9d:90:ae:5f:0d:43:
0f:e5:d8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-fra.rpki-client.org