Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/27C8DA26773411EE8BB6A22DC4F9AE02.roa
File: 27C8DA26773411EE8BB6A22DC4F9AE02.roa (raw, json)
Hash identifier: 3Enkc+xjMkvrZO+a2ib48C9Cb1TRBXebiWnDUdLofLw=
Subject key identifier: 92:51:6D:F5:6F:13:61:6E:02:7A:B1:7B:9E:F4:49:3B:DB:6E:34:14
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 403B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/27C8DA26773411EE8BB6A22DC4F9AE02.roa
Signing time: Mon 30 Oct 2023 14:53:58 +0000
ROA not before: Mon 30 Oct 2023 14:53:58 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 135967
IP address blocks: 42.96.4.0/23 maxlen: 23
42.96.12.0/22 maxlen: 22
45.124.84.0/24 maxlen: 24
103.3.244.0/22 maxlen: 22
103.3.244.0/24 maxlen: 24
103.3.245.0/24 maxlen: 24
103.3.246.0/24 maxlen: 24
103.3.247.0/24 maxlen: 24
103.74.120.0/23 maxlen: 23
103.74.122.0/23 maxlen: 23
103.79.140.0/23 maxlen: 23
103.79.142.0/23 maxlen: 23
103.121.88.0/23 maxlen: 23
103.121.90.0/23 maxlen: 23
103.147.126.0/23 maxlen: 23
103.161.16.0/23 maxlen: 23
103.161.170.0/23 maxlen: 24
103.162.30.0/23 maxlen: 23
103.163.216.0/23 maxlen: 23
103.176.22.0/23 maxlen: 23
103.176.24.0/23 maxlen: 24
103.176.250.0/23 maxlen: 23
103.179.174.0/23 maxlen: 23
103.180.138.0/23 maxlen: 23
103.187.168.0/23 maxlen: 23
103.188.242.0/23 maxlen: 23
2403:6a40::/48 maxlen: 48
2403:6a40:2::/48 maxlen: 48
2403:6a40:1000::/36 maxlen: 36
2403:6a40:2000::/36 maxlen: 36
2403:6a40:3000::/36 maxlen: 36
2403:6a40:4000::/36 maxlen: 36
2403:6a40:5000::/36 maxlen: 36
2407:2ec0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 12 Dec 2023 14:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16443 (0x403b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 30 14:53:58 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=653fc386-a73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:19:85:a5:26:bb:f6:78:f0:c3:8f:35:93:53:
33:3d:e4:2e:74:1d:b9:d9:64:53:7c:b4:8b:09:1b:
6c:1b:c6:fa:0f:c0:77:18:55:fa:f7:5c:95:c8:4a:
04:80:3c:06:bc:4b:7d:76:8f:76:e6:fd:09:92:26:
f7:fd:20:e1:88:3a:f4:23:70:8f:ea:61:43:3a:33:
f1:4d:e9:14:02:4b:f0:26:eb:f4:da:a6:47:69:b9:
49:49:a5:6e:e5:9b:a3:37:c6:b0:da:ec:8c:74:1f:
94:27:3b:f2:22:e6:a0:fc:c9:e4:51:1a:ed:f6:bd:
94:35:e6:20:7d:e6:56:d9:49:b1:b5:0c:fc:0f:d6:
06:a4:38:4c:10:cb:ed:a1:e5:6b:13:fb:5f:04:98:
07:e8:dc:5f:4c:02:05:d0:ee:82:55:d7:ac:5b:9d:
c5:e3:2f:14:29:fe:56:d0:42:73:15:85:ca:ed:8f:
ed:45:11:eb:fa:5c:bc:00:09:3b:4c:18:d8:27:cc:
fc:7f:98:50:ce:a1:31:5c:30:28:b1:7b:09:be:92:
49:cf:df:67:e0:0b:03:d1:3f:e9:25:76:b4:f4:b3:
5a:6c:30:97:12:35:34:f8:86:52:28:fe:f5:76:c3:
fb:2c:63:cc:f7:23:a8:c3:e2:8b:51:ff:c8:ee:dc:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:51:6D:F5:6F:13:61:6E:02:7A:B1:7B:9E:F4:49:3B:DB:6E:34:14
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/27C8DA26773411EE8BB6A22DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.96.4.0/23
42.96.12.0/22
45.124.84.0/24
103.3.244.0/22
103.74.120.0/22
103.79.140.0/22
103.121.88.0/22
103.147.126.0/23
103.161.16.0/23
103.161.170.0/23
103.162.30.0/23
103.163.216.0/23
103.176.22.0-103.176.25.255
103.176.250.0/23
103.179.174.0/23
103.180.138.0/23
103.187.168.0/23
103.188.242.0/23
IPv6:
2403:6a40::/48
2403:6a40:2::/48
2403:6a40:1000::-2403:6a40:5fff:ffff:ffff:ffff:ffff:ffff
2407:2ec0::/48
Signature Algorithm: sha256WithRSAEncryption
0f:54:71:99:f6:26:a6:07:cf:8f:7d:26:11:82:a9:f7:49:30:
05:0a:17:b2:f5:51:9e:eb:17:41:ea:5a:71:f4:09:8a:24:41:
56:e6:77:3e:3b:bc:67:67:c0:96:89:95:89:60:a0:83:ec:86:
57:1f:8c:26:85:08:a3:38:a1:62:80:72:ae:e7:35:65:a2:92:
54:f2:69:ac:d9:21:9b:cf:a3:9c:01:b3:e8:2f:c7:8a:22:38:
6f:65:e7:ac:e6:d0:98:f4:9c:5f:4b:d3:6f:11:8d:1f:95:45:
4f:85:24:93:93:e1:0c:a4:3d:4f:bd:2b:6c:5c:07:cc:ed:c6:
23:3f:fb:90:07:25:09:b2:e1:03:f2:52:53:9c:00:bf:14:d6:
69:6e:14:ad:09:6c:cf:3b:31:b6:65:0f:8b:e8:3b:03:8d:38:
6a:89:df:3b:69:49:15:98:ff:ba:93:ec:d8:ab:40:b2:d5:3d:
ec:4d:3d:7c:b6:40:42:d5:d0:f2:e7:9d:2e:d2:48:2f:06:ff:
6a:8a:96:11:7d:49:5e:00:38:31:e8:95:e0:fb:36:d2:f7:41:
59:e5:e9:e4:f9:c6:5c:2b:01:87:0e:bb:e1:94:fc:cf:b6:0e:
a2:2a:2e:95:40:0b:91:c0:41:9f:1e:c5:5d:29:39:06:c9:da:
35:e0:c3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org