Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/3ADA5704D67A11ECBFC6CB7BC4F9AE02.roa
File: 3ADA5704D67A11ECBFC6CB7BC4F9AE02.roa (raw, json)
Hash identifier: KLc69iJxk7Q4y+d34f6riR+EQ0Y9+e5KNqzpxDZ1Sbw=
Subject key identifier: B8:8D:D7:30:31:4B:60:EB:9A:54:B6:DE:2C:87:18:E0:78:0B:2E:AD
Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial: 0719
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/3ADA5704D67A11ECBFC6CB7BC4F9AE02.roa
Signing time: Fri 16 Jun 2023 22:54:53 +0000
ROA not before: Fri 16 Jun 2023 22:54:53 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 21859
IP address blocks: 164.90.70.0/24 maxlen: 24
164.90.71.0/24 maxlen: 24
164.90.73.0/24 maxlen: 24
164.90.75.0/24 maxlen: 24
164.90.97.0/24 maxlen: 24
164.90.102.0/24 maxlen: 24
164.90.103.0/24 maxlen: 24
164.90.104.0/24 maxlen: 24
164.90.112.0/24 maxlen: 24
164.90.123.0/24 maxlen: 24
164.90.124.0/24 maxlen: 24
164.90.127.0/24 maxlen: 24
202.63.36.0/24 maxlen: 24
202.63.39.0/24 maxlen: 24
202.63.40.0/24 maxlen: 24
202.168.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Sep 2023 08:52:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1817 (0x719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Validity
Not Before: Jun 16 22:54:53 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=648ce83d-1a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:3e:89:3c:ee:05:09:8e:d0:00:3c:87:fa:
1b:3e:b1:61:c8:7f:b5:f6:a6:59:cc:b1:57:d3:39:
f4:f2:94:fe:29:01:fb:bc:22:f2:4c:40:2c:b8:b8:
dd:51:1d:43:9f:7a:9a:13:5c:e5:8b:fd:ce:ad:72:
3d:df:0a:4f:e3:07:14:91:85:64:e9:9e:f3:e7:5e:
51:38:c1:67:5f:af:f9:6d:9f:c7:3a:77:3f:b0:9f:
96:6a:f6:f6:0f:da:5e:74:69:82:cb:0d:2d:7e:5d:
88:3a:53:c7:02:14:df:79:5e:9e:7e:d0:43:41:cf:
d5:6f:2d:6a:37:f1:a1:ac:a5:76:a6:b7:9f:e9:68:
0c:22:1d:54:ff:4e:d9:da:87:93:c8:c4:15:ef:6c:
bd:91:b5:14:14:6a:28:c9:71:57:a0:0a:e5:ca:f0:
09:86:f3:7e:8d:29:c4:2d:1e:e1:84:d1:de:d7:71:
1a:5b:b0:1b:3b:81:d6:ca:f6:d9:a2:29:9f:42:9a:
e5:27:e1:a8:df:c4:ec:e5:c4:78:2b:f5:fe:d2:18:
d6:85:eb:47:f8:05:f4:a4:db:83:6f:97:5b:73:d3:
22:ad:ae:e7:96:69:26:82:46:6d:0e:c0:dd:17:28:
df:9c:6f:fc:bb:1c:09:e1:0d:eb:d9:87:62:af:1e:
fe:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8D:D7:30:31:4B:60:EB:9A:54:B6:DE:2C:87:18:E0:78:0B:2E:AD
X509v3 Authority Key Identifier:
keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/3ADA5704D67A11ECBFC6CB7BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
164.90.70.0/23
164.90.73.0/24
164.90.75.0/24
164.90.97.0/24
164.90.102.0-164.90.104.255
164.90.112.0/24
164.90.123.0-164.90.124.255
164.90.127.0/24
202.63.36.0/24
202.63.39.0-202.63.40.255
202.168.111.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:34:14:95:e0:a9:41:e1:1f:b6:ae:d2:34:38:69:3a:5e:cd:
1b:02:24:79:f3:7e:c5:0a:0b:7b:a8:f0:19:b6:25:d4:89:b1:
4b:7f:77:80:e6:79:3a:c0:05:39:c2:53:ae:c4:98:b7:1b:08:
9e:df:2c:5d:d8:8e:1c:75:ab:bd:3f:56:5a:e2:7b:01:6c:f7:
9b:cb:27:2f:de:46:fb:a4:1e:96:d1:5c:2f:a8:ee:92:f3:a9:
09:75:b3:cb:0a:ed:7e:00:66:b4:44:2d:42:45:d6:a1:d4:ae:
93:8e:48:1f:1f:8a:6c:7c:07:14:25:b2:0a:b6:33:f4:c5:37:
fd:b0:20:d2:97:72:07:62:59:2b:a4:a9:0d:65:d2:ea:1a:32:
a7:80:3f:ac:fc:2e:7b:bc:da:7a:77:57:2d:78:d2:63:33:70:
68:40:e9:01:89:64:c0:eb:bb:96:8e:4c:4f:4d:36:b1:51:85:
c6:91:2c:76:46:d3:b8:4f:9c:c7:bd:c5:e6:d5:0c:1c:d1:1f:
6c:cc:14:8a:b7:b5:d6:52:e5:88:5c:e3:55:9f:1f:74:f5:bd:
58:3e:a2:57:84:db:c6:2e:fc:23:8d:04:a1:41:96:3d:8e:a4:
d2:08:a4:b9:91:fe:af:f1:be:3c:81:a6:3c:fb:51:ba:3a:23:
35:d6:8f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:31 2024 by rpki-client on console-ams.rpki-client.org