Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/C34BDD12681B11EA917C3F2AC4F9AE02.roa
File: C34BDD12681B11EA917C3F2AC4F9AE02.roa (raw, json)
Hash identifier: 41z0N4cJ2vSf5VGxSVglT9GDTWRLzx0C+ls5nMHQHcY=
Subject key identifier: 99:6B:5F:7D:C3:6E:BA:5B:8A:CA:08:3D:A7:BE:58:0C:FF:46:44:3A
Certificate issuer: /CN=A919DAF2/serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
Certificate serial: 203D
Authority key identifier: 13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/C34BDD12681B11EA917C3F2AC4F9AE02.roa
Signing time: Tue 02 May 2023 16:53:04 +0000
ROA not before: Tue 02 May 2023 16:53:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 18196
IP address blocks: 45.117.128.0/22 maxlen: 22
45.117.128.0/24 maxlen: 24
45.117.129.0/24 maxlen: 24
45.117.130.0/24 maxlen: 24
45.117.131.0/24 maxlen: 24
103.255.112.0/24 maxlen: 24
103.255.113.0/24 maxlen: 24
103.255.114.0/24 maxlen: 24
202.134.144.0/24 maxlen: 24
202.134.146.0/24 maxlen: 24
202.134.151.0/24 maxlen: 24
202.134.153.0/24 maxlen: 24
202.134.154.0/24 maxlen: 24
202.134.155.0/24 maxlen: 24
202.134.156.0/24 maxlen: 24
202.134.157.0/24 maxlen: 24
202.134.160.0/24 maxlen: 24
202.134.161.0/24 maxlen: 24
202.134.162.0/24 maxlen: 24
202.134.163.0/24 maxlen: 24
202.134.164.0/24 maxlen: 24
202.134.165.0/24 maxlen: 24
202.134.166.0/24 maxlen: 24
202.134.167.0/24 maxlen: 24
202.134.168.0/24 maxlen: 24
202.134.169.0/24 maxlen: 24
202.134.170.0/24 maxlen: 24
202.134.171.0/24 maxlen: 24
202.134.172.0/24 maxlen: 24
202.134.173.0/24 maxlen: 24
202.134.174.0/24 maxlen: 24
202.134.175.0/24 maxlen: 24
202.134.176.0/24 maxlen: 24
202.134.177.0/24 maxlen: 24
202.134.178.0/24 maxlen: 24
202.134.179.0/24 maxlen: 24
202.134.180.0/24 maxlen: 24
202.134.181.0/24 maxlen: 24
202.134.182.0/24 maxlen: 24
202.134.183.0/24 maxlen: 24
202.134.184.0/24 maxlen: 24
202.134.185.0/24 maxlen: 24
202.134.186.0/24 maxlen: 24
202.134.187.0/24 maxlen: 24
202.134.188.0/24 maxlen: 24
202.134.189.0/24 maxlen: 24
202.134.190.0/24 maxlen: 24
202.134.191.0/24 maxlen: 24
2402:f200::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 04 Feb 2024 17:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8253 (0x203d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DAF2/serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
Validity
Not Before: May 2 16:53:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64513ff0-0a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:d6:86:35:5e:d3:78:01:e5:ac:11:20:49:
ec:87:82:d0:d2:24:24:f0:20:66:fc:7e:11:f9:49:
5e:fd:2f:35:af:53:45:83:3c:45:ef:db:11:f9:8e:
98:9b:de:fd:dd:d0:d9:f8:e3:e7:df:6d:df:2c:fd:
64:34:bc:bb:72:01:be:cb:b6:b4:5f:f2:2a:f6:88:
a8:2b:5a:83:75:21:34:c5:3f:57:6c:77:1e:be:4c:
56:98:3a:f8:16:45:c1:0f:fb:99:dc:c2:f5:d9:44:
d1:da:4b:f4:88:3c:01:fa:d7:40:10:57:98:61:1d:
a4:2f:b3:ac:e4:01:bd:e0:5f:6d:d4:35:6f:2a:90:
9c:b7:d5:44:e5:01:c3:f2:8d:61:74:6a:b6:de:ca:
f8:79:c9:f6:7c:87:b5:74:95:99:a4:86:57:c7:20:
9d:25:7b:cc:ed:2e:b1:44:33:f5:40:42:73:94:15:
fe:cc:90:1c:a8:63:69:4e:22:19:c8:6f:af:6a:30:
99:e6:33:ca:6e:de:6e:38:71:3d:5e:7c:3f:73:ad:
d4:72:83:39:ba:46:0a:58:c4:fb:09:42:22:d1:2f:
ed:a6:e4:ba:da:3d:66:6d:81:c8:39:72:bb:d4:f7:
3e:ac:79:5f:88:61:0b:0f:27:b2:7b:db:ab:37:ab:
b5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6B:5F:7D:C3:6E:BA:5B:8A:CA:08:3D:A7:BE:58:0C:FF:46:44:3A
X509v3 Authority Key Identifier:
keyid:13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/C34BDD12681B11EA917C3F2AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.128.0/22
103.255.112.0-103.255.114.255
202.134.144.0/24
202.134.146.0/24
202.134.151.0/24
202.134.153.0-202.134.157.255
202.134.160.0/19
IPv6:
2402:f200::/32
Signature Algorithm: sha256WithRSAEncryption
bb:2c:19:3f:ad:65:ac:06:25:80:27:6c:de:ba:17:65:05:01:
a1:82:9d:d7:fd:e2:80:60:4a:23:65:79:d3:45:24:8b:67:f6:
d4:69:39:55:45:57:3f:5e:7e:26:2d:1d:03:ae:cd:3d:16:c5:
74:05:03:4b:c2:af:12:73:23:4c:74:96:a6:9b:08:98:18:49:
83:23:c6:5e:85:7e:00:4c:3a:50:a6:b7:97:b8:29:36:4f:65:
f1:52:85:d1:dc:11:22:e0:16:65:ff:70:58:90:41:d2:5e:fe:
b2:aa:88:5e:fd:e0:b8:3c:40:48:79:c0:ff:80:13:23:30:48:
99:77:55:8b:5c:84:ce:be:a3:d2:b6:5d:11:df:70:0b:ec:22:
73:29:39:44:df:e2:c6:a8:69:d9:33:b1:dd:7b:f4:67:48:27:
24:a3:0f:e4:84:15:70:89:3e:9f:38:ce:66:1d:ed:ce:1c:ac:
b8:41:b4:c9:18:36:96:41:37:d8:5b:d7:10:5e:22:03:5f:a5:
01:7a:83:e6:3b:41:a5:2a:33:fd:b5:d3:24:9a:ae:64:86:11:
ec:ff:7d:23:f4:9a:f6:ef:24:ec:5f:30:47:1f:30:d0:a5:04:
f3:e5:05:9c:0d:7b:2f:28:58:70:8c:af:88:42:a7:a5:f7:98:
ec:55:55:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 4 20:18:57 2024 by rpki-client on console-ams.rpki-client.org