Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/3BD007B630B811EC974C3830C4F9AE02.roa
File: 3BD007B630B811EC974C3830C4F9AE02.roa (raw, json)
Hash identifier: qbHeUzfQiZnkeCWfwO/vl8saKXOqh9+jL6xtenoaUsU=
Subject key identifier: 60:55:77:BD:09:3F:93:4F:43:07:7E:1F:48:D8:2B:F0:B3:D7:94:9A
Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Certificate serial: 33A9
Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/3BD007B630B811EC974C3830C4F9AE02.roa
Signing time: Thu 14 Dec 2023 07:46:20 +0000
ROA not before: Thu 14 Dec 2023 07:46:20 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 38235
IP address blocks: 103.120.132.0/22 maxlen: 24
116.212.128.0/19 maxlen: 24
202.57.208.0/24 maxlen: 24
202.57.209.0/24 maxlen: 24
202.57.210.0/23 maxlen: 23
202.57.210.0/24 maxlen: 24
202.57.211.0/24 maxlen: 24
203.176.128.0/21 maxlen: 22
203.176.128.0/23 maxlen: 24
203.176.130.0/24 maxlen: 24
203.176.131.0/24 maxlen: 24
203.176.132.0/24 maxlen: 24
203.176.133.0/24 maxlen: 24
203.176.134.0/24 maxlen: 24
203.176.135.0/24 maxlen: 24
203.176.136.0/21 maxlen: 22
203.176.136.0/24 maxlen: 24
203.176.137.0/24 maxlen: 24
203.176.138.0/23 maxlen: 24
203.176.140.0/22 maxlen: 24
2405:da00::/32 maxlen: 36
2405:da00::/40 maxlen: 40
2405:da00::/48 maxlen: 48
2405:da00:1::/48 maxlen: 48
2405:da00:10::/44 maxlen: 44
2405:da00:99::/48 maxlen: 48
2405:da00:100::/40 maxlen: 40
2405:da00:200::/40 maxlen: 40
2405:da00:300::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 29 Dec 2023 09:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13225 (0x33a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Validity
Not Before: Dec 14 07:46:20 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=657ab2cc-05c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:b1:c0:d8:67:3a:57:4c:98:e4:76:ea:40:
15:96:df:7d:32:27:a5:71:7e:31:bc:5c:1f:85:38:
e6:b5:f2:9b:3e:e6:a4:01:79:91:0b:e6:06:39:36:
f0:2f:54:82:3f:4c:bf:18:a7:f1:0a:ec:38:eb:61:
e8:ec:2e:62:eb:0a:0c:99:08:cb:dd:1b:91:8e:19:
26:85:ff:ed:5f:c3:2b:a1:8c:6c:0c:73:b1:d0:ed:
ed:2b:b0:73:f3:2b:75:41:dc:55:67:31:4e:49:c7:
54:60:e5:5c:97:f2:1a:ec:97:82:78:f4:48:39:b1:
ca:bf:59:04:af:35:6b:5b:f1:00:ec:3a:db:ce:15:
4b:f5:53:3d:b9:7d:6b:a7:8f:3a:0b:a9:2e:52:7c:
4c:3e:f2:de:fb:20:c8:b2:bc:a5:f6:3e:f0:d9:45:
e7:55:4b:0b:4a:44:d6:9b:f5:d9:92:a1:db:ef:f1:
c8:62:e9:af:50:f0:2a:cd:48:10:17:b8:b3:3f:a1:
e0:cf:8e:fc:3b:a7:35:5d:f7:53:ab:1d:44:e3:21:
f5:a0:26:5c:f6:33:dc:c4:19:92:3f:59:d3:63:02:
33:c1:d5:71:93:ee:d0:f8:72:15:9f:10:e5:af:1b:
93:1a:8e:62:03:d8:2e:cf:35:b1:2e:73:74:6b:ec:
95:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:55:77:BD:09:3F:93:4F:43:07:7E:1F:48:D8:2B:F0:B3:D7:94:9A
X509v3 Authority Key Identifier:
keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/3BD007B630B811EC974C3830C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.132.0/22
116.212.128.0/19
202.57.208.0/22
203.176.128.0/20
IPv6:
2405:da00::/32
Signature Algorithm: sha256WithRSAEncryption
9a:28:ab:94:99:a3:9f:7a:b8:92:b7:1c:d7:2d:04:c0:24:d8:
bc:2b:e2:8f:af:75:94:09:2f:a4:f6:87:90:48:8e:81:40:3a:
51:e4:cd:f3:cc:6f:13:e2:46:f3:b9:39:c4:9a:97:15:30:4a:
ea:69:aa:a0:57:78:f4:ce:3d:67:65:2e:bb:7e:bb:0b:c3:ed:
b9:55:6b:cd:81:8c:4c:fe:c1:83:be:b7:b5:21:22:8c:eb:ae:
bc:92:18:fd:ff:bb:dc:3a:22:06:cc:13:2f:0d:67:ed:46:1d:
83:de:30:e8:df:3b:b6:d1:a7:71:2d:92:16:07:80:09:10:27:
48:fe:dd:9c:31:c8:7b:86:ec:3a:b7:ab:bd:13:7e:2c:ee:59:
db:fd:a0:c9:c3:f0:90:2e:53:31:db:9a:bd:c6:23:72:dc:0d:
2b:94:84:e2:df:e1:74:af:c6:97:56:b7:ae:58:37:e4:68:a3:
fe:b9:7b:88:40:73:65:08:7e:9c:04:51:10:09:c5:45:ff:fd:
e0:e1:61:64:cc:78:cb:3a:13:26:64:53:34:d4:81:5e:87:71:
c5:44:f3:65:08:9c:0c:85:1c:4d:42:11:63:26:81:b7:9b:7c:
0f:30:c3:1b:3a:6c:10:6f:6a:a8:29:97:3a:a0:df:e7:cb:ea:
f2:62:19:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:30 2024 by rpki-client on console-ams.rpki-client.org