Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/2EBE44409F4011EEBD51806DC4F9AE02.roa
File: 2EBE44409F4011EEBD51806DC4F9AE02.roa (raw, json)
Hash identifier: xHkE/hPSmRwm4EKpAhqKjN+qi4Zk9L1xCp1lptuceB0=
Subject key identifier: EA:7A:CD:19:32:2A:0D:4A:08:58:53:2C:67:0E:17:9E:80:D6:6D:3D
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 3452
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/2EBE44409F4011EEBD51806DC4F9AE02.roa
Signing time: Wed 20 Dec 2023 14:00:51 +0000
ROA not before: Wed 20 Dec 2023 14:00:51 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 23750
IP address blocks: 103.207.84.0/24 maxlen: 24
103.207.86.0/24 maxlen: 24
103.207.87.0/24 maxlen: 24
116.90.106.0/24 maxlen: 24
116.90.107.0/24 maxlen: 24
116.90.108.0/24 maxlen: 24
116.90.109.0/24 maxlen: 24
116.90.110.0/24 maxlen: 24
116.90.111.0/24 maxlen: 24
116.90.115.0/24 maxlen: 24
116.90.116.0/24 maxlen: 24
116.90.117.0/24 maxlen: 24
116.90.119.0/24 maxlen: 24
116.90.120.0/24 maxlen: 24
116.90.123.0/24 maxlen: 24
116.90.124.0/24 maxlen: 24
116.90.125.0/24 maxlen: 24
116.90.126.0/24 maxlen: 24
116.90.127.0/24 maxlen: 24
121.46.64.0/24 maxlen: 24
202.69.32.0/24 maxlen: 24
202.69.33.0/24 maxlen: 24
202.69.34.0/24 maxlen: 24
202.69.35.0/24 maxlen: 24
202.69.36.0/24 maxlen: 24
202.69.37.0/24 maxlen: 24
202.69.38.0/24 maxlen: 24
202.69.39.0/24 maxlen: 24
202.69.40.0/24 maxlen: 24
202.69.41.0/24 maxlen: 24
202.69.42.0/24 maxlen: 24
202.69.43.0/24 maxlen: 24
202.69.44.0/24 maxlen: 24
202.69.45.0/24 maxlen: 24
202.69.46.0/24 maxlen: 24
202.69.47.0/24 maxlen: 24
202.69.48.0/24 maxlen: 24
202.69.49.0/24 maxlen: 24
202.69.50.0/24 maxlen: 24
202.69.51.0/24 maxlen: 24
202.69.52.0/24 maxlen: 24
202.69.53.0/24 maxlen: 24
202.69.54.0/24 maxlen: 24
202.69.55.0/24 maxlen: 24
202.69.56.0/24 maxlen: 24
202.69.57.0/24 maxlen: 24
202.69.58.0/24 maxlen: 24
202.69.59.0/24 maxlen: 24
202.69.60.0/24 maxlen: 24
202.69.61.0/24 maxlen: 24
202.69.62.0/24 maxlen: 24
202.69.63.0/24 maxlen: 24
202.142.144.0/24 maxlen: 24
202.142.145.0/24 maxlen: 24
202.142.146.0/24 maxlen: 24
202.142.147.0/24 maxlen: 24
202.142.148.0/24 maxlen: 24
202.142.149.0/24 maxlen: 24
202.142.150.0/24 maxlen: 24
202.142.152.0/24 maxlen: 24
202.142.153.0/24 maxlen: 24
202.142.154.0/24 maxlen: 24
202.142.155.0/24 maxlen: 24
202.142.156.0/24 maxlen: 24
202.142.157.0/24 maxlen: 24
202.142.158.0/24 maxlen: 24
202.142.159.0/24 maxlen: 24
2406:ac00:1::/48 maxlen: 48
2406:ac00:2::/48 maxlen: 48
2406:ac00:203::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13394 (0x3452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Dec 20 14:00:51 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=6582f392-1b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2b:c1:7e:9f:96:22:73:79:01:c8:03:f0:c0:
9e:6c:5f:60:60:11:b1:ca:d3:ad:e7:7d:89:ad:70:
31:fb:40:b7:a9:0f:ee:10:44:a8:32:dc:b7:58:95:
cb:6a:9d:61:33:c9:be:70:d4:8f:4f:38:f4:45:d6:
ba:3c:23:74:f7:a2:a5:c4:13:f4:23:9a:23:a5:6b:
35:0d:58:18:96:7f:25:49:e4:0b:ca:14:1a:63:93:
93:4f:fe:6d:99:4c:01:63:c5:bc:b8:01:b4:03:08:
cf:3e:41:b4:4e:21:26:8c:33:3d:a9:78:70:3a:fa:
24:7e:19:c5:91:83:6a:0a:c7:60:b4:ba:36:78:55:
12:a4:3f:5d:b5:e8:ab:01:9b:bf:a8:c4:f3:e7:4d:
84:07:02:92:c1:1c:d2:0c:01:dd:bf:ba:b2:15:77:
98:c9:27:dd:30:72:db:7c:7b:bf:50:87:56:b1:06:
0a:4a:73:30:31:81:c8:60:3d:b7:77:bd:85:12:06:
55:94:e3:9d:81:83:0f:58:2b:06:ed:e2:c2:4c:73:
ec:9b:e2:cd:99:4d:e4:4b:32:b7:cc:00:d1:3a:a2:
8d:ff:a7:db:eb:b6:14:b2:e0:b6:f2:c5:47:21:1c:
fd:fa:03:78:a3:99:fb:ed:4e:37:e2:33:22:ac:77:
f2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7A:CD:19:32:2A:0D:4A:08:58:53:2C:67:0E:17:9E:80:D6:6D:3D
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/2EBE44409F4011EEBD51806DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.84.0/24
103.207.86.0/23
116.90.106.0-116.90.111.255
116.90.115.0-116.90.117.255
116.90.119.0-116.90.120.255
116.90.123.0-116.90.127.255
121.46.64.0/24
202.69.32.0/19
202.142.144.0-202.142.150.255
202.142.152.0/21
IPv6:
2406:ac00:1::-2406:ac00:2:ffff:ffff:ffff:ffff:ffff
2406:ac00:203::/48
Signature Algorithm: sha256WithRSAEncryption
11:87:09:06:92:fd:dc:ee:07:2e:71:6f:49:bf:74:21:e3:23:
58:46:9a:d0:39:42:90:8e:f1:07:61:52:71:40:db:ec:78:5d:
02:95:36:f4:50:0e:54:bc:ef:de:66:f6:dd:61:41:d1:5c:a2:
de:52:10:6f:70:de:bd:a8:1d:09:fa:bd:5a:8e:6e:78:f5:b8:
47:63:eb:4c:0b:1a:fe:06:da:a2:56:bc:69:ce:94:47:9a:fd:
c9:f7:57:99:43:81:a6:a8:37:0b:d5:64:d4:f5:50:81:9a:63:
0c:b2:92:e1:7a:f6:72:fa:37:60:35:c0:5d:82:a2:43:9a:07:
8c:d6:79:59:7c:35:71:0f:63:26:5e:a1:50:95:a7:79:c7:f7:
6d:c4:ec:ab:7d:ab:59:02:09:01:27:00:66:04:14:a7:32:de:
c2:1d:b1:4f:fe:4f:78:98:38:f6:1d:42:2b:02:de:eb:dc:12:
a6:87:bd:5c:78:82:df:a7:7c:b5:a1:3b:90:43:99:7f:d4:72:
c8:84:b3:9a:bc:16:57:33:c7:0b:fa:0e:6b:d6:6c:e2:f2:6b:
58:40:82:d2:24:7f:d4:07:2f:0f:1d:7f:e1:ab:d5:1f:06:04:
2a:c8:c4:ef:ce:2e:59:6a:5f:e5:32:e4:15:95:2b:7a:c2:59:
d1:14:ba:3c
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgICNFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx
NkQxNTdCMzQwHhcNMjMxMjIwMTQwMDUxWhcNMjQwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTgyZjM5Mi0xYjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2SvBfp+WInN5AcgD8MCebF9gYBGxytOt532JrXAx+0C3qQ/uEESoMty3WJXL
ap1hM8m+cNSPTzj0Rda6PCN096KlxBP0I5ojpWs1DVgYln8lSeQLyhQaY5OTT/5t
mUwBY8W8uAG0AwjPPkG0TiEmjDM9qXhwOvokfhnFkYNqCsdgtLo2eFUSpD9dteir
AZu/qMTz502EBwKSwRzSDAHdv7qyFXeYySfdMHLbfHu/UIdWsQYKSnMwMYHIYD23
d72FEgZVlOOdgYMPWCsG7eLCTHPsm+LNmU3kSzK3zADROqKN/6fb67YUsuC28sVH
IRz9+gN4o5n77U434jMirHfyYQIDAQABo4IDGzCCAxcwHQYDVR0OBBYEFOp6zRky
Kg1KCFhTLGcOF56A1m09MB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE
ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvMkVCRTQ0NDA5
RjQwMTFFRUJENTE4MDZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgaQGCCsGAQUFBwEHAQH/
BIGUMIGRMGoEAgABMGQDBABnz1QDBAFnz1YwDAMEAXRaagMEBHRaYDAMAwQAdFpz
AwQBdFp0MAwDBAB0WncDBAB0WngwDAMEAHRaewMEB3RaAAMEAHkuQAMEBcpFIDAM
AwQEyo6QAwQAyo6WAwQDyo6YMCMEAgACMB0wEgMHACQGrAAAAQMHACQGrAAAAgMH
ACQGrAACAzANBgkqhkiG9w0BAQsFAAOCAQEAEYcJBpL93O4HLnFvSb90IeMjWEaa
0DlCkI7xB2FScUDb7HhdApU29FAOVLzv3mb23WFB0Vyi3lIQb3DevagdCfq9Wo5u
ePW4R2PrTAsa/gbaola8ac6UR5r9yfdXmUOBpqg3C9Vk1PVQgZpjDLKS4Xr2cvo3
YDXAXYKiQ5oHjNZ5WXw1cQ9jJl6hUJWnecf3bcTsq32rWQIJAScAZgQUpzLewh2x
T/5PeJg49h1CKwLe69wSpoe9XHiC36d8taE7kEOZf9RyyISzmrwWVzPHC/oOa9Zs
4vJrWECC0iR/1AcvDx1/4avVHwYEKsjE784uWWpf5TLkFZUresJZ0RS6PA==
-----END CERTIFICATE-----
Generated at Fri Dec 22 08:24:55 2023 by rpki-client on console-fra.rpki-client.org