Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/6F602C5807EE11EB80D69580C4F9AE02.roa
File: 6F602C5807EE11EB80D69580C4F9AE02.roa (raw, json)
Hash identifier: VApZnHzzFUCTuyav0XrJexn58RLHTxEIPpWnXKTcjzg=
Subject key identifier: 02:BC:D9:67:CE:FF:D2:7D:E3:34:67:04:5A:F5:8A:44:1E:7C:2E:1A
Certificate issuer: /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial: 335E
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/6F602C5807EE11EB80D69580C4F9AE02.roa
Signing time: Wed 06 Sep 2023 14:40:29 +0000
ROA not before: Wed 06 Sep 2023 14:40:29 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 23923
IP address blocks: 116.68.192.0/20 maxlen: 24
119.148.0.0/18 maxlen: 23
119.148.0.0/20 maxlen: 24
119.148.16.0/22 maxlen: 24
119.148.20.0/24 maxlen: 24
119.148.23.0/24 maxlen: 24
119.148.24.0/21 maxlen: 24
119.148.32.0/19 maxlen: 24
182.252.64.0/18 maxlen: 24
202.53.160.0/20 maxlen: 24
2401:9c00::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 03 Jan 2024 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13150 (0x335e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Validity
Not Before: Sep 6 14:40:29 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64f88f5d-6301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:3d:5b:f1:0e:3a:05:d2:4d:a5:6f:c9:61:
ad:1b:c9:7b:bf:72:7f:ec:97:0a:a0:74:0f:eb:64:
37:f6:42:58:02:81:aa:2c:b8:a3:09:8a:5a:21:37:
8e:29:5a:d6:0a:85:c8:a4:c9:3c:3a:f6:0a:d5:8f:
f0:c3:b4:42:e5:92:20:4a:fb:a1:18:54:91:44:87:
d1:ab:7c:c7:40:60:19:62:3f:b9:f3:ce:0b:5c:1f:
7c:f5:94:c3:28:4f:fd:23:5d:bc:44:f9:a4:36:13:
47:d9:00:83:82:9c:1a:22:12:ac:9c:c5:91:ce:aa:
0a:38:65:3f:34:2a:ae:36:13:b7:e6:68:1c:33:ea:
07:90:e2:c5:c6:ac:60:e4:ef:4d:f6:3a:f6:ef:51:
07:33:4a:b8:4f:ab:f3:60:7a:0f:e8:e7:7b:a9:d6:
c6:d9:37:3f:41:c4:9b:10:7e:75:20:0e:91:af:2e:
0f:02:9c:f5:0f:e3:c3:eb:ec:fa:a5:f3:91:d2:29:
74:fd:0a:00:69:ce:36:cd:33:0b:53:ae:06:7c:14:
62:f8:87:92:5b:c0:19:ca:f6:4c:5a:3c:e8:10:fc:
c2:33:c1:9f:a5:8a:a2:b3:ad:9d:e5:86:59:76:3f:
03:51:f5:a7:89:d4:0d:b6:af:55:cf:05:f6:7d:6a:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BC:D9:67:CE:FF:D2:7D:E3:34:67:04:5A:F5:8A:44:1E:7C:2E:1A
X509v3 Authority Key Identifier:
keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/6F602C5807EE11EB80D69580C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.68.192.0/20
119.148.0.0/18
182.252.64.0/18
202.53.160.0/20
IPv6:
2401:9c00::/32
Signature Algorithm: sha256WithRSAEncryption
9f:57:2f:b0:18:60:ab:7e:7d:ca:e1:05:cc:89:58:a8:2c:89:
dd:cc:15:69:21:a0:d5:54:98:ef:61:cc:b9:41:ff:5a:01:be:
84:5c:66:0f:49:e5:7f:7d:d9:26:b7:72:64:00:2f:68:4e:4e:
ef:7e:71:b4:b2:59:7d:0f:f3:7d:ba:e5:6a:55:fc:96:3c:bf:
e3:41:c7:3e:a1:b6:fa:ec:80:15:99:9f:ae:3b:49:4c:a2:4f:
0e:e9:79:fc:71:48:c3:15:e2:86:85:5b:51:f2:5f:d1:83:61:
1e:3a:92:48:43:aa:d4:9a:c6:f9:6b:55:2f:80:b6:2e:82:dc:
ab:70:b0:79:4c:19:d5:b0:7c:97:e9:93:21:5d:98:db:6e:5f:
02:cc:b8:73:85:67:eb:ab:b4:a6:e5:94:6d:14:7d:dc:a3:52:
98:c8:f4:a6:b3:50:92:de:cb:33:54:bf:33:95:66:af:8d:14:
eb:30:e4:76:a1:f7:d8:df:93:99:37:fd:43:49:91:6d:98:ce:
3a:ce:8a:43:2d:9b:8f:99:02:0c:c6:b1:dc:1a:fa:95:bd:f4:
ea:ae:71:63:3f:ba:cd:25:69:81:b9:db:f2:2c:1d:f8:67:b4:
0c:79:f7:5e:73:2e:bb:14:5e:47:6b:f3:26:ad:96:e8:43:54:
4d:2e:11:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org