Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/214E2D3EF21011EEA73C1F6AC4F9AE02.roa
File: 214E2D3EF21011EEA73C1F6AC4F9AE02.roa (raw, json)
Hash identifier: Fk7Qecg3icX2UvHCTKq4sSUgs7e4/+RVIcm06tsrCfs=
Subject key identifier: CE:1A:79:1E:57:4E:79:F0:EB:25:88:F9:11:6B:43:2A:29:57:60:2F
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 0741
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/214E2D3EF21011EEA73C1F6AC4F9AE02.roa
Signing time: Wed 03 Apr 2024 23:15:59 +0000
ROA not before: Wed 03 Apr 2024 23:15:59 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 5065
IP address blocks: 202.139.244.0/22 maxlen: 24
203.147.232.0/23 maxlen: 24
203.147.234.0/23 maxlen: 24
203.147.238.0/23 maxlen: 24
210.247.128.0/21 maxlen: 24
210.247.160.0/21 maxlen: 24
210.247.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 06:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1857 (0x741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Validity
Not Before: Apr 3 23:15:59 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=660de32e-fade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:d9:4d:41:00:e5:61:23:17:78:5a:84:db:
13:02:07:c6:7d:46:d8:5e:20:31:b1:aa:6f:c2:fc:
43:00:b3:b5:bd:40:8f:6f:46:be:f5:8c:32:09:09:
43:bd:75:48:9f:8c:25:94:73:7a:89:8d:2b:b1:f9:
35:e8:91:06:a2:ae:5a:6b:c9:63:07:69:ab:35:5c:
f6:d4:b6:ee:88:95:8a:fd:9d:c0:b6:b9:29:9c:ca:
d6:48:5b:16:65:fc:21:c3:a7:c9:35:d1:5d:a1:a3:
4c:83:59:8a:da:e8:ae:f1:36:76:f5:c5:4d:aa:92:
e3:54:be:c0:74:fd:39:31:96:84:ec:d5:b7:8c:4a:
18:28:9f:05:c0:73:ea:e5:ca:10:99:bf:67:68:00:
73:d2:9e:df:1c:e0:c7:b3:fd:7c:29:94:c0:47:4c:
41:05:5a:6d:29:b6:9d:bd:b0:4c:20:f1:39:50:2c:
61:4c:8c:ab:57:e8:af:cc:99:74:83:6a:65:ff:31:
83:78:2a:c4:ff:3c:ae:49:f5:b8:c4:04:16:ca:1c:
40:57:ba:0b:c6:65:73:9c:33:a6:83:3c:b0:9e:1e:
fa:ff:02:ec:d7:2b:7a:f5:cb:4b:b9:6a:67:24:75:
03:85:3a:15:01:d9:72:95:fa:f2:ce:a5:d4:30:cc:
00:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1A:79:1E:57:4E:79:F0:EB:25:88:F9:11:6B:43:2A:29:57:60:2F
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/214E2D3EF21011EEA73C1F6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.139.244.0/22
203.147.232.0/22
203.147.238.0/23
210.247.128.0/21
210.247.160.0/21
210.247.208.0/22
Signature Algorithm: sha256WithRSAEncryption
83:de:57:25:98:50:0f:a2:89:6c:42:61:08:54:47:78:ec:df:
71:e1:9a:b5:3a:4b:db:a9:93:06:93:f9:36:51:3f:ee:b8:26:
d5:75:45:c0:96:20:45:f9:9c:5e:ae:0a:6a:b5:a4:33:a1:56:
7e:ff:74:4f:c6:e2:a4:bc:94:4a:ef:d7:d6:c9:f4:c0:4b:44:
ea:16:18:4e:c7:d5:27:6d:e9:06:5f:f9:dd:20:a0:d9:a4:55:
b2:16:19:25:a7:5a:3d:91:cf:3e:a7:dd:f3:ad:31:b7:a3:2a:
d5:86:91:55:f4:d1:75:fe:f0:c0:f2:39:cc:ec:80:54:1e:c0:
2c:a6:aa:ac:33:bd:e6:e2:97:c6:be:08:e2:d6:09:a4:f5:da:
d7:d9:c3:1d:36:98:1a:86:e7:30:2e:0e:00:f8:2f:c4:c9:9d:
da:72:d9:d8:bb:94:b2:02:4d:75:33:5d:e8:38:76:37:51:57:
e6:8d:1b:a2:20:62:67:ce:4c:53:b6:07:2a:fe:03:2c:84:ae:
db:16:4f:50:d9:29:b0:51:35:25:0e:94:ab:c9:e7:b2:2c:38:
7d:85:0b:de:e8:81:c6:37:58:06:b4:cb:0c:65:68:20:4e:c3:
ad:ce:aa:71:d6:1d:e1:26:81:43:c0:bb:00:51:21:ee:1d:28:
92:fe:bd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 10:11:08 2024 by rpki-client on console-ams.rpki-client.org