Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/4751138E802F11EC8D428341C4F9AE02.roa
File: 4751138E802F11EC8D428341C4F9AE02.roa (raw, json)
Hash identifier: 2iJKO+VQbxL/8Orx/SATu+avlg7a7/AwY5ce04wwRsk=
Subject key identifier: 1F:67:34:30:64:8F:21:03:B9:F6:DB:18:95:52:1E:A9:E5:43:63:69
Certificate issuer: /CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221
Certificate serial: 0252
Authority key identifier: 73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/4751138E802F11EC8D428341C4F9AE02.roa
Signing time: Tue 09 Aug 2022 03:12:13 +0000
ROA not before: Tue 09 Aug 2022 03:12:13 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 38224
IP address blocks: 112.109.96.0/19 maxlen: 19
114.31.224.0/20 maxlen: 20
114.31.224.0/23 maxlen: 23
114.31.226.0/23 maxlen: 23
114.31.228.0/23 maxlen: 23
114.31.230.0/23 maxlen: 23
119.252.144.0/20 maxlen: 20
119.252.144.0/21 maxlen: 21
119.252.144.0/24 maxlen: 24
119.252.145.0/24 maxlen: 24
119.252.147.0/24 maxlen: 24
119.252.148.0/24 maxlen: 24
119.252.152.0/24 maxlen: 24
119.252.153.0/24 maxlen: 24
119.252.154.0/23 maxlen: 24
119.252.156.0/22 maxlen: 22
119.252.156.0/24 maxlen: 24
119.252.159.0/24 maxlen: 24
202.137.232.0/21 maxlen: 21
2405:e200::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221
Validity
Not Before: Aug 9 03:12:13 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62f1d08d-22cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:2f:9c:94:3c:f5:f6:84:c4:c3:97:31:4a:
8a:fd:b7:97:03:f8:20:46:e9:8f:b1:3a:34:9a:37:
4c:9a:71:8d:59:b8:a3:91:5f:85:3a:ee:df:b9:e9:
04:00:72:8a:19:02:c2:a6:d1:3b:26:69:f9:00:34:
22:93:35:4f:92:32:60:f3:b4:48:e9:8e:83:48:2f:
7e:7d:62:b0:17:c7:35:15:4b:e1:30:be:fb:db:af:
6b:07:83:e6:81:49:86:f8:68:d6:8d:2e:03:ae:21:
25:4b:b4:75:c6:ea:2c:22:d8:dd:5f:bb:96:35:0b:
de:a7:46:7b:87:70:5b:bc:4e:08:79:1e:bd:1e:5e:
cf:69:0e:53:05:74:09:05:a5:4a:a6:42:9b:f5:8c:
58:90:c7:95:90:e3:51:63:29:cb:bf:f3:99:c0:f4:
5b:a6:88:57:b6:8a:59:26:8a:b9:a0:13:b7:92:d6:
b0:2d:03:54:7e:12:00:ae:a0:f0:3f:b2:66:4d:b7:
ee:c7:4e:cb:b5:ed:7a:83:58:dc:a2:44:8f:8b:ee:
22:dd:41:30:1c:ef:9c:ec:c9:e7:f8:10:45:44:00:
47:7b:fd:98:96:14:f8:27:d5:07:b9:f3:e9:a8:a1:
06:58:aa:5b:ed:6d:37:30:9d:90:0c:fd:2c:9e:da:
85:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:67:34:30:64:8F:21:03:B9:F6:DB:18:95:52:1E:A9:E5:43:63:69
X509v3 Authority Key Identifier:
keyid:73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/4751138E802F11EC8D428341C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
112.109.96.0/19
114.31.224.0/20
119.252.144.0/20
202.137.232.0/21
IPv6:
2405:e200::/32
Signature Algorithm: sha256WithRSAEncryption
07:a0:65:bf:e8:5f:ee:ce:70:f4:15:63:8c:ff:38:d9:48:a1:
ee:fc:e3:5b:43:27:b5:af:78:6a:53:64:4f:fb:e7:ad:58:24:
84:a8:fe:69:11:e2:d4:4f:67:78:89:c3:97:82:98:1c:ff:81:
67:44:12:6b:57:15:82:60:d6:ef:76:20:8f:0e:8a:f9:35:d5:
2f:66:c6:d0:b1:32:ad:6a:72:0d:88:f4:d0:fb:c4:2a:d1:4f:
6e:64:48:82:bc:bb:d9:23:69:eb:36:b1:e9:61:82:96:a4:b9:
a5:71:38:a0:04:a8:43:92:fa:e7:45:7e:7e:0d:e7:94:8a:27:
76:1f:44:7d:d9:1b:1a:a6:01:76:9d:dd:ec:38:0c:04:47:f8:
49:00:40:f6:28:67:79:46:24:d8:44:ec:cf:f5:3c:0e:8e:dd:
67:89:1e:9c:d9:3a:cc:b9:82:38:62:25:52:27:96:2c:dd:11:
78:d9:49:1d:7d:29:ed:ea:37:9e:52:de:d1:d9:15:25:bf:ed:
7a:11:a8:97:d5:da:13:3f:b5:b8:8b:55:77:fd:d6:47:1f:ba:
21:07:5b:ea:e7:06:64:ed:93:5c:93:a3:19:f1:1d:5c:fc:24:
98:c7:7b:ba:3b:a7:81:67:ff:e2:4e:6b:b0:4b:87:1f:1d:cb:
61:58:c0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:06 2023 by rpki-client on console-ams.rpki-client.org