Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F95693897E811EE9BB61F55C4F9AE02.roa
File: 8F95693897E811EE9BB61F55C4F9AE02.roa (raw, json)
Hash identifier: 2qJ4rxdg/yr90sdidiutYylthRZVsY/yRz4jTBE6gJE=
Subject key identifier: 15:69:46:D9:71:CA:A1:81:28:C4:71:AA:1B:E7:21:27:B8:8D:AC:0A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 84A8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F95693897E811EE9BB61F55C4F9AE02.roa
Signing time: Wed 13 Mar 2024 04:53:11 +0000
ROA not before: Wed 13 Mar 2024 04:53:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149240
IP address blocks: 36.50.118.0/23 maxlen: 24
103.3.234.0/23 maxlen: 24
103.67.92.0/23 maxlen: 24
103.88.56.0/24 maxlen: 24
103.88.57.0/24 maxlen: 24
103.124.172.0/24 maxlen: 24
103.139.191.0/24 maxlen: 24
103.148.119.0/24 maxlen: 24
103.152.158.0/24 maxlen: 24
103.159.99.0/24 maxlen: 24
103.162.196.0/23 maxlen: 24
103.163.166.0/23 maxlen: 24
103.167.172.0/24 maxlen: 24
103.170.1.0/24 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.108.0/23 maxlen: 24
103.178.176.0/23 maxlen: 24
103.184.40.0/24 maxlen: 24
103.184.236.0/23 maxlen: 24
103.191.203.0/24 maxlen: 24
2001:df0:3bc0::/48 maxlen: 48
2001:df0:8640::/48 maxlen: 48
2001:df0:9340::/48 maxlen: 48
2001:df1:9c40::/48 maxlen: 48
2001:df2:c3c0::/48 maxlen: 48
2001:df3:2940::/48 maxlen: 48
2001:df3:4940::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 08 Apr 2024 09:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33960 (0x84a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 13 04:53:11 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65f13137-bb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:e8:a0:a8:b4:a2:4a:f5:5c:a0:8e:4d:1b:
63:21:45:a2:d7:e6:b1:e9:bd:81:29:df:8d:4a:bf:
18:95:81:3c:94:15:09:87:69:2c:af:22:6c:bc:07:
9a:02:12:70:83:c0:b2:18:17:3c:d3:b1:0c:6f:e7:
4b:ae:5d:70:2c:f6:48:63:34:98:26:0b:7a:83:20:
74:b9:7e:bd:c9:ea:87:35:93:63:a4:b7:0d:4c:ab:
27:67:50:9b:77:af:72:c9:a2:96:69:74:20:96:d8:
a0:fd:0d:af:17:94:cd:3d:a7:b8:0b:c1:7a:50:a5:
56:a2:b7:6c:c9:54:dd:b3:81:c3:82:c0:d7:d2:bd:
55:f3:9d:bb:8b:0d:91:43:c8:fa:3e:4f:33:9e:2a:
4b:0b:6f:03:64:b1:48:03:75:6a:5a:4a:30:98:3e:
c3:1d:6d:e0:c6:6a:04:c2:da:38:ef:14:18:c3:c9:
58:77:0c:af:4d:c4:2a:d4:e0:99:a7:bb:3d:7a:d1:
2e:56:15:98:88:6c:12:17:84:9e:b8:23:ee:02:f5:
cd:23:04:75:55:a6:26:91:91:7f:f0:c9:1a:fd:0c:
e0:45:61:47:c8:3f:43:91:8b:8b:ea:4c:9d:f8:bb:
d2:2e:ff:68:38:29:11:94:6a:5a:59:87:ad:e8:72:
2d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:69:46:D9:71:CA:A1:81:28:C4:71:AA:1B:E7:21:27:B8:8D:AC:0A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F95693897E811EE9BB61F55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.118.0/23
103.3.234.0/23
103.67.92.0/23
103.88.56.0/23
103.124.172.0/24
103.139.191.0/24
103.148.119.0/24
103.152.158.0/24
103.159.99.0/24
103.162.196.0/23
103.163.166.0/23
103.167.172.0/24
103.170.1.0/24
103.173.41.0/24
103.174.108.0/23
103.178.176.0/23
103.184.40.0/24
103.184.236.0/23
103.191.203.0/24
IPv6:
2001:df0:3bc0::/48
2001:df0:8640::/48
2001:df0:9340::/48
2001:df1:9c40::/48
2001:df2:c3c0::/48
2001:df3:2940::/48
2001:df3:4940::/48
Signature Algorithm: sha256WithRSAEncryption
ae:67:3c:c8:7e:21:03:c8:27:c1:cc:ed:10:4f:a4:64:19:07:
00:6d:8c:e9:61:4a:ac:54:62:d7:2f:83:43:a7:72:d6:23:e3:
29:7d:4d:68:7f:10:8d:fc:1b:25:16:e4:50:12:53:ec:b9:0b:
80:8b:3a:89:e5:17:91:c8:33:6c:5c:63:8d:74:6a:83:67:b3:
f5:11:c4:06:ed:f3:9f:19:5b:3e:5c:04:d2:bd:1e:21:a7:8a:
78:f7:75:5b:6f:79:44:90:45:b9:10:45:6c:a4:bc:93:71:e6:
93:32:b3:06:e6:52:07:2f:1f:62:16:50:93:c5:b5:8d:7e:db:
32:4a:57:de:ce:f7:5a:e1:c7:13:f5:f3:d6:eb:37:ef:5c:36:
69:78:05:54:eb:2d:f7:98:c9:68:d4:4e:6f:6a:42:ee:eb:1a:
a1:5c:c7:5b:ce:1d:fc:c5:9f:41:8c:40:ae:c9:73:c6:87:d4:
61:82:0a:cd:bd:ac:ef:b2:b4:04:b3:a6:52:e2:e5:9c:16:95:
94:aa:ab:48:4a:ba:8d:f7:25:65:02:1f:40:f1:34:a9:52:7d:
80:9f:57:97:78:87:74:58:0e:26:d5:9c:41:ca:ad:ff:c8:20:
e8:6a:a0:24:84:1e:58:7e:c4:b5:d6:43:58:24:53:16:2b:b8:
97:87:93:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 14:03:07 2024 by rpki-client on console-ams.rpki-client.org