Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/F034B7E6AE7111ED8B44D95CC4F9AE02.roa
File: F034B7E6AE7111ED8B44D95CC4F9AE02.roa (raw, json)
Hash identifier: D5zOPKJIkgVJgc6pKxzbHE1hslqp9fTSyWSSA59AZv0=
Subject key identifier: 04:BA:16:94:8C:5E:6E:0D:12:35:16:45:BF:FB:3B:DB:F5:99:0C:D7
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 0706
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/F034B7E6AE7111ED8B44D95CC4F9AE02.roa
Signing time: Mon 03 Jul 2023 10:29:45 +0000
ROA not before: Mon 03 Jul 2023 10:29:45 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 10122
IP address blocks: 169.136.68.0/24 maxlen: 24
169.136.71.0/24 maxlen: 24
169.136.73.0/24 maxlen: 24
169.136.74.0/24 maxlen: 24
169.136.75.0/24 maxlen: 24
169.136.76.0/24 maxlen: 24
169.136.77.0/24 maxlen: 24
169.136.78.0/24 maxlen: 24
169.136.79.0/24 maxlen: 24
169.136.80.0/24 maxlen: 24
169.136.81.0/24 maxlen: 24
169.136.82.0/24 maxlen: 24
169.136.83.0/24 maxlen: 24
169.136.84.0/24 maxlen: 24
169.136.85.0/24 maxlen: 24
169.136.86.0/24 maxlen: 24
169.136.87.0/24 maxlen: 24
169.136.88.0/23 maxlen: 23
169.136.88.0/24 maxlen: 24
169.136.89.0/24 maxlen: 24
169.136.90.0/24 maxlen: 24
169.136.91.0/24 maxlen: 24
169.136.92.0/24 maxlen: 24
169.136.93.0/24 maxlen: 24
169.136.94.0/24 maxlen: 24
169.136.95.0/24 maxlen: 24
169.136.96.0/24 maxlen: 24
169.136.97.0/24 maxlen: 24
169.136.98.0/24 maxlen: 24
169.136.99.0/24 maxlen: 24
169.136.100.0/24 maxlen: 24
169.136.101.0/24 maxlen: 24
169.136.102.0/24 maxlen: 24
169.136.103.0/24 maxlen: 24
169.136.104.0/24 maxlen: 24
169.136.105.0/24 maxlen: 24
169.136.106.0/24 maxlen: 24
169.136.107.0/24 maxlen: 24
169.136.108.0/24 maxlen: 24
169.136.110.0/24 maxlen: 24
169.136.111.0/24 maxlen: 24
169.136.112.0/24 maxlen: 24
169.136.113.0/24 maxlen: 24
169.136.114.0/24 maxlen: 24
169.136.115.0/24 maxlen: 24
169.136.116.0/24 maxlen: 24
169.136.117.0/24 maxlen: 24
169.136.118.0/24 maxlen: 24
169.136.119.0/24 maxlen: 24
169.136.121.0/24 maxlen: 24
169.136.123.0/24 maxlen: 24
169.136.124.0/24 maxlen: 24
169.136.125.0/24 maxlen: 24
169.136.126.0/24 maxlen: 24
169.136.127.0/24 maxlen: 24
169.136.128.0/24 maxlen: 24
169.136.129.0/24 maxlen: 24
169.136.130.0/24 maxlen: 24
169.136.131.0/24 maxlen: 24
169.136.136.0/24 maxlen: 24
169.136.140.0/24 maxlen: 24
169.136.144.0/24 maxlen: 24
169.136.155.0/24 maxlen: 24
169.136.156.0/24 maxlen: 24
169.136.157.0/24 maxlen: 24
169.136.158.0/24 maxlen: 24
169.136.159.0/24 maxlen: 24
169.136.160.0/24 maxlen: 24
169.136.161.0/24 maxlen: 24
169.136.162.0/24 maxlen: 24
169.136.163.0/24 maxlen: 24
169.136.164.0/24 maxlen: 24
169.136.165.0/24 maxlen: 24
169.136.166.0/24 maxlen: 24
169.136.167.0/24 maxlen: 24
169.136.169.0/24 maxlen: 24
169.136.170.0/24 maxlen: 24
169.136.171.0/24 maxlen: 24
169.136.172.0/24 maxlen: 24
169.136.173.0/24 maxlen: 24
169.136.174.0/24 maxlen: 24
169.136.175.0/24 maxlen: 24
169.136.176.0/24 maxlen: 24
169.136.177.0/24 maxlen: 24
169.136.178.0/24 maxlen: 24
169.136.179.0/24 maxlen: 24
169.136.180.0/24 maxlen: 24
169.136.181.0/24 maxlen: 24
169.136.182.0/24 maxlen: 24
169.136.183.0/24 maxlen: 24
169.136.184.0/24 maxlen: 24
169.136.185.0/24 maxlen: 24
169.136.186.0/24 maxlen: 24
169.136.187.0/24 maxlen: 24
169.136.188.0/24 maxlen: 24
169.136.189.0/24 maxlen: 24
169.136.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Aug 2023 07:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1798 (0x706)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Jul 3 10:29:45 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64a2a319-223d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ea:75:ca:b4:80:e6:38:8e:4f:51:0e:fc:8d:
43:e0:ac:1a:10:25:66:a4:74:ff:86:d2:e1:bb:c3:
98:26:58:32:65:65:a2:42:a3:4a:5f:3b:7b:91:06:
f0:aa:55:33:ae:df:51:f7:62:0d:68:74:fb:e7:d0:
14:0d:e7:15:52:a3:19:b3:ff:61:3b:a8:6e:bb:ac:
61:8a:73:09:54:82:3f:10:91:14:8e:2e:21:62:c8:
35:56:94:71:b6:c6:f5:2c:38:c4:ad:8f:49:33:19:
fe:68:82:1b:77:07:0f:37:58:e2:b8:01:2f:c3:a7:
12:e7:3f:6b:d2:39:28:94:d9:27:bc:c6:49:16:5c:
0a:d2:6d:53:74:cd:2c:a1:47:0d:73:de:9e:3a:e4:
5b:c6:44:0e:0d:e9:4b:7d:2b:5b:92:00:7b:bf:3b:
06:41:96:7c:d1:95:e3:74:5a:21:0d:1c:61:13:fe:
e4:f7:7d:e4:1c:6e:20:e9:72:4e:c1:42:62:d1:d9:
86:22:27:b6:c4:33:03:5c:72:5a:5b:ae:0a:27:26:
3c:01:c8:3a:4d:21:96:62:57:b0:43:e0:cb:8f:c9:
13:f5:cc:07:b9:60:90:2b:20:53:65:fa:29:1f:fa:
46:0b:69:cb:44:df:55:1d:4a:49:58:e1:c7:1d:f1:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BA:16:94:8C:5E:6E:0D:12:35:16:45:BF:FB:3B:DB:F5:99:0C:D7
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/F034B7E6AE7111ED8B44D95CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.136.68.0/24
169.136.71.0/24
169.136.73.0-169.136.108.255
169.136.110.0-169.136.119.255
169.136.121.0/24
169.136.123.0-169.136.131.255
169.136.136.0/24
169.136.140.0/24
169.136.144.0/24
169.136.155.0-169.136.167.255
169.136.169.0-169.136.190.255
Signature Algorithm: sha256WithRSAEncryption
23:94:f5:ed:af:9b:23:e9:a6:bf:71:bc:05:89:04:5c:f4:5b:
66:fd:82:cd:ed:01:2d:10:d0:00:1a:3e:2e:ae:8d:af:37:21:
c2:20:0f:d5:a5:a8:87:38:46:d4:32:94:da:de:6e:86:fd:0a:
f5:a2:b0:c7:2f:08:04:24:9d:de:6d:fa:99:e9:84:38:8b:6a:
e7:8f:52:fb:d0:e7:d2:f5:2e:02:0e:f6:97:9e:e5:ae:3a:4a:
71:7d:9b:85:8c:9c:aa:32:56:69:da:0c:fd:c6:28:e2:8c:9c:
3b:49:40:ee:30:45:c4:a7:34:0e:fe:68:21:18:9c:71:f3:d9:
7c:ba:8b:ee:0c:99:d5:41:00:7c:7d:13:52:52:f5:77:3c:c7:
3c:79:a8:59:59:99:70:95:59:bb:4f:5e:78:d3:dd:6a:f1:b9:
42:2d:93:73:49:f6:d1:12:25:ed:60:f7:c2:86:b6:0a:4b:63:
49:3d:3d:ee:c2:6c:7d:28:a0:6d:e8:eb:28:3a:b4:1b:c5:f6:
6b:1e:78:14:ef:34:8a:03:c6:9f:ab:74:a4:2b:fd:d6:3d:82:
4c:77:5c:76:70:a9:7c:60:86:70:f0:aa:5f:b0:04:5f:74:b3:
d2:fb:ba:9f:85:1e:21:bb:c9:5f:fa:33:57:30:92:fb:0f:3c:
b5:6f:62:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:43 2024 by rpki-client on console-fra.rpki-client.org