Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/1C55C4A860AD11EE8E255631C4F9AE02.roa
File: 1C55C4A860AD11EE8E255631C4F9AE02.roa (raw, json)
Hash identifier: VLrl7aJtEzAuHDZDUAQ9DOZ5vR31mkRrkSBYbMxAEKQ=
Subject key identifier: 01:BE:87:56:2B:F2:71:57:75:B9:6F:6A:AC:09:6C:30:41:1B:64:B0
Certificate issuer: /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Certificate serial: 11
Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/1C55C4A860AD11EE8E255631C4F9AE02.roa
Signing time: Sun 01 Oct 2023 22:51:52 +0000
ROA not before: Sun 01 Oct 2023 22:51:52 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 134090
IP address blocks: 45.249.116.0/22 maxlen: 24
103.51.112.0/22 maxlen: 24
103.85.36.0/22 maxlen: 24
103.95.112.0/22 maxlen: 24
103.106.88.0/22 maxlen: 24
123.253.188.0/22 maxlen: 24
202.128.112.0/20 maxlen: 20
202.128.112.0/21 maxlen: 24
202.128.120.0/21 maxlen: 24
202.179.128.0/22 maxlen: 24
2400:a840::/32 maxlen: 34
2400:a842::/31 maxlen: 32
2400:a844::/31 maxlen: 32
2402:2c80::/32 maxlen: 33
2402:3fc0::/32 maxlen: 33
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Validity
Not Before: Oct 1 22:51:52 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=6519f807-fe3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:04:9f:d2:79:86:13:14:ef:c6:17:f2:6d:
cd:3a:16:ac:f6:f1:f7:d6:6a:fd:de:fb:fd:a1:c8:
1c:d3:83:8c:14:22:37:a6:1d:b9:36:45:ae:ab:c4:
9d:8d:a9:58:82:74:2f:64:4d:cc:43:db:c1:d0:b8:
2a:96:93:ac:d0:17:26:aa:d4:e1:39:b7:f7:40:cd:
68:83:4b:fd:78:49:e7:95:bc:2d:35:c8:22:cd:fd:
3c:24:65:0a:4e:a2:0c:1c:f0:d0:ef:9d:ce:fe:ba:
a4:b3:a4:e8:eb:47:5d:72:0c:a7:e4:d8:0d:39:17:
fc:45:fe:0f:a7:22:2f:c2:fb:9f:e9:64:da:19:61:
c4:2b:c2:d0:d5:50:3a:59:5e:63:7f:5a:93:1f:e1:
a0:5f:ef:49:e6:e8:a6:c4:0f:ed:c3:10:a0:8f:e1:
74:4d:66:b6:2d:98:09:d8:0f:a3:2d:b3:e5:0f:a3:
80:4b:19:0c:1e:70:0c:89:3a:5a:e0:5d:79:77:9c:
06:cb:f7:fd:3b:d3:c2:e4:4c:4d:19:5b:ab:df:e9:
95:5d:e0:8f:5f:5e:6a:6b:da:b8:27:ce:a0:e5:1f:
49:6c:36:9e:7d:9f:4b:75:80:1b:bd:48:36:10:c5:
31:e3:2f:bb:40:41:6a:3a:04:8f:25:f9:ed:dc:3c:
d7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BE:87:56:2B:F2:71:57:75:B9:6F:6A:AC:09:6C:30:41:1B:64:B0
X509v3 Authority Key Identifier:
keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/1C55C4A860AD11EE8E255631C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.249.116.0/22
103.51.112.0/22
103.85.36.0/22
103.95.112.0/22
103.106.88.0/22
123.253.188.0/22
202.128.112.0/20
202.179.128.0/22
IPv6:
2400:a840::/32
2400:a842::-2400:a845:ffff:ffff:ffff:ffff:ffff:ffff
2402:2c80::/32
2402:3fc0::/32
Signature Algorithm: sha256WithRSAEncryption
ba:a2:cd:ad:62:23:b3:15:69:b2:3f:49:cb:4a:42:c5:96:cc:
39:1d:13:3c:a7:da:ab:d4:a3:e5:71:21:90:84:00:a8:91:4b:
19:7a:08:2e:2c:b7:4d:07:15:f1:fc:b5:3b:61:b0:9e:f7:77:
87:88:16:99:11:cb:32:99:b7:a2:02:e9:1f:d8:b0:ba:ff:ba:
0c:c7:58:3c:7b:95:72:1c:a5:78:4d:18:00:04:83:89:c2:0d:
86:36:65:15:8f:52:12:25:29:f3:38:9c:43:5e:ed:0a:b4:9c:
9a:19:eb:df:6b:96:2d:33:2f:ee:60:1e:d4:69:d6:ae:ad:db:
cf:a6:0e:fe:4b:4e:de:72:bf:12:6d:76:20:b7:bc:8b:e6:16:
e9:b8:c9:c9:5e:40:1a:bc:49:bb:6d:e0:85:20:57:0a:16:74:
22:e1:3d:c0:6a:b9:c2:13:35:2f:2c:63:dc:a7:00:27:fa:8a:
f9:c2:1a:d0:4d:42:eb:a0:39:55:8d:b6:2a:ac:95:b2:47:49:
00:ad:e6:a9:56:e3:97:1a:fc:a4:f3:5c:8c:1f:e1:3a:7f:b2:
f0:22:9c:94:bb:95:33:02:68:4d:9c:73:01:85:0b:7d:5d:23:
48:80:20:e1:82:cd:2b:40:6f:82:fc:c0:6a:90:df:85:06:55:
b6:54:5f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 00:05:56 2023 by rpki-client on console-fra.rpki-client.org