Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/AC1CE002F7A911ED98852E0BC4F9AE02.roa
File: AC1CE002F7A911ED98852E0BC4F9AE02.roa (raw, json)
Hash identifier: KQzOeH8apq5hLm8xKtkrQ7MtF39kVrWXL5XRYQtKF1g=
Subject key identifier: FC:31:A2:D4:D0:52:28:5A:99:4A:18:16:D6:D8:36:70:60:64:41:6E
Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial: 2B4A
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/AC1CE002F7A911ED98852E0BC4F9AE02.roa
Signing time: Mon 17 Jul 2023 09:40:32 +0000
ROA not before: Mon 17 Jul 2023 09:40:32 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 58717
IP address blocks: 43.245.140.0/22 maxlen: 22
43.245.140.0/22 maxlen: 24
43.245.140.0/23 maxlen: 23
43.245.140.0/24 maxlen: 24
43.245.141.0/24 maxlen: 24
43.245.142.0/23 maxlen: 23
43.245.142.0/24 maxlen: 24
43.245.143.0/24 maxlen: 24
103.15.244.0/22 maxlen: 24
103.15.246.64/26 maxlen: 26
103.75.238.0/23 maxlen: 24
103.96.70.0/23 maxlen: 24
103.102.42.0/24 maxlen: 24
103.199.84.0/22 maxlen: 24
103.242.216.0/24 maxlen: 24
103.242.217.0/24 maxlen: 24
103.242.218.0/23 maxlen: 24
144.48.148.0/23 maxlen: 23
144.48.148.0/24 maxlen: 24
144.48.149.0/24 maxlen: 24
2405:1500::/32 maxlen: 32
2405:1500::/32 maxlen: 48
2405:1500::/48 maxlen: 48
2405:1500:30::/48 maxlen: 48
2405:1500:40::/48 maxlen: 48
2405:1500:60::/48 maxlen: 48
2405:1500:70::/48 maxlen: 48
2405:1500:80::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11082 (0x2b4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Validity
Not Before: Jul 17 09:40:32 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64b50c90-e9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:3b:7b:47:e3:77:e0:3c:2a:e3:89:ef:fe:
6a:f5:5d:24:df:e5:e4:c2:8f:f5:2a:29:b1:01:55:
2c:59:6e:c2:33:6d:3d:c4:98:9d:09:62:e7:d1:31:
fe:b5:3e:aa:c1:dc:72:68:8a:1c:fa:be:3b:f9:72:
7d:e1:65:c9:11:16:72:14:fc:cb:44:18:6e:3a:75:
24:98:aa:9d:71:9a:61:65:9a:f2:cf:7e:7c:ec:63:
c2:00:df:40:07:0f:29:fd:e5:22:c2:57:08:c6:f8:
aa:83:e9:70:93:14:d5:95:c4:34:c8:37:60:0d:ec:
35:06:f2:b9:33:0d:4e:da:a2:a7:9b:ce:d8:42:81:
19:5a:c1:f9:19:62:61:b6:b5:fa:04:83:58:e3:0e:
b3:82:7b:0e:eb:c5:bf:d5:a5:9f:33:64:0b:8b:40:
cf:37:e1:52:73:f3:00:91:7a:9d:d2:17:88:9b:75:
6c:cb:e0:8a:9c:7c:ac:ee:53:34:df:da:a2:a7:00:
e2:5d:0a:a3:fe:fb:b9:a7:b2:13:cf:99:45:c7:23:
c9:cd:10:d7:4d:81:13:66:51:1a:ef:f8:61:80:c4:
c2:79:5a:1c:7f:5f:f9:11:9e:b8:97:5b:b6:d5:92:
50:ad:e8:d4:5a:4e:2e:fd:99:e8:37:60:d4:3d:ce:
68:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:31:A2:D4:D0:52:28:5A:99:4A:18:16:D6:D8:36:70:60:64:41:6E
X509v3 Authority Key Identifier:
keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/AC1CE002F7A911ED98852E0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.140.0/22
103.15.244.0/22
103.75.238.0/23
103.96.70.0/23
103.102.42.0/24
103.199.84.0/22
103.242.216.0/22
144.48.148.0/23
IPv6:
2405:1500::/32
Signature Algorithm: sha256WithRSAEncryption
92:4d:69:e1:13:62:bc:ff:3a:78:f7:f9:5e:a0:25:c5:8d:9b:
9a:96:0a:de:4a:e3:cc:88:8c:01:95:7a:e9:c1:19:37:c4:89:
6e:54:75:53:ca:81:eb:a5:4f:b6:00:64:c2:1e:6d:e7:20:a9:
1d:27:e9:46:9c:78:ab:98:e8:cf:6d:d6:71:f2:88:27:ac:4b:
9f:b3:2d:aa:6c:54:72:06:65:af:6f:69:92:b7:1d:5b:ff:11:
73:ac:e8:2c:81:c1:e6:ad:50:80:9c:cc:aa:2b:fb:50:72:d9:
0c:0a:d1:0e:8a:fb:65:c5:5f:66:4f:c7:e4:1d:99:45:c0:79:
1a:d5:d8:d9:fa:30:d8:23:df:a1:a7:a8:0a:24:e3:0f:64:86:
04:89:a3:a0:94:20:c3:21:10:6f:da:06:29:e6:77:de:a7:1b:
e8:f4:f8:b8:4e:12:fb:62:ce:c7:9a:12:e2:9b:12:f5:f6:2d:
28:d8:8e:be:ce:77:31:f9:83:b9:9a:8c:5b:f9:4b:e3:34:7d:
41:a4:c5:03:4d:8a:eb:5c:0b:ce:c5:eb:52:30:c5:68:08:11:
1d:52:3a:f8:cb:02:fc:10:07:c6:25:27:e2:e0:55:fe:78:78:
82:7a:30:e7:44:aa:1e:2a:33:d3:81:0d:70:e1:5c:d6:54:12:
e6:fe:42:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:07 2023 by rpki-client on console-ams.rpki-client.org