Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/4A136E9EFC5511ECB16BAE39C4F9AE02.roa
File: 4A136E9EFC5511ECB16BAE39C4F9AE02.roa (raw, json)
Hash identifier: KqtRYlnLXnXWaSCXeXs6E4ZOtJqi7vhGQr6mc76UJuU=
Subject key identifier: 75:16:71:44:CF:4F:AD:02:DA:59:A4:B6:BB:24:52:08:FA:67:75:5A
Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Certificate serial: 098A
Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/4A136E9EFC5511ECB16BAE39C4F9AE02.roa
Signing time: Tue 05 Jul 2022 11:26:19 +0000
ROA not before: Tue 05 Jul 2022 11:26:19 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 55492
IP address blocks: 27.131.12.0/22 maxlen: 22
27.131.12.0/24 maxlen: 24
27.131.13.0/24 maxlen: 24
27.131.14.0/24 maxlen: 24
27.131.15.0/24 maxlen: 24
45.127.244.0/22 maxlen: 22
45.127.244.0/24 maxlen: 24
45.127.245.0/24 maxlen: 24
45.127.246.0/24 maxlen: 24
45.127.247.0/24 maxlen: 24
103.196.232.0/23 maxlen: 23
103.196.232.0/24 maxlen: 24
103.196.234.0/24 maxlen: 24
103.196.235.0/24 maxlen: 24
2401:c5c0::/32 maxlen: 32
2401:c5c0::/48 maxlen: 48
2401:c5c0:1::/48 maxlen: 48
2401:c5c0:2::/48 maxlen: 48
2401:c5c0:3::/48 maxlen: 48
2401:c5c0:4::/48 maxlen: 48
2401:c5c0:5::/48 maxlen: 48
2401:c5c0:6::/48 maxlen: 48
2401:c5c0:7::/48 maxlen: 48
2401:c5c0:11::/48 maxlen: 48
2401:c5c0:12::/48 maxlen: 48
2401:c5c0:13::/48 maxlen: 48
2401:c5c0:14::/48 maxlen: 48
2401:c5c0:15::/48 maxlen: 48
2401:c5c0:16::/48 maxlen: 48
2401:c5c0:50::/48 maxlen: 48
2401:c5c0:60::/48 maxlen: 48
2401:c5c0:100::/48 maxlen: 48
2401:c5c0:200::/48 maxlen: 48
2401:c5c0:400::/42 maxlen: 42
2401:c5c0:440::/42 maxlen: 42
2401:c5c0:dfa::/48 maxlen: 48
2401:c5c0:dfb::/48 maxlen: 48
2401:c5c0:dfc::/48 maxlen: 48
2401:c5c0:dfd::/48 maxlen: 48
2401:c5c0:dfe::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2442 (0x98a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Validity
Not Before: Jul 5 11:26:19 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62c41fda-7003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:13:c2:c8:56:31:8c:76:ca:0d:a4:ba:40:
1f:b0:60:8c:3c:ae:b9:37:54:55:1a:66:ec:ee:c7:
59:bf:ac:cf:30:d6:19:cb:e5:62:0c:f6:a4:ed:3f:
9f:eb:91:f4:3f:5b:c1:19:b0:0e:5d:42:31:b7:8a:
33:00:64:11:e9:1d:d3:a1:d0:ea:b5:e8:c4:b2:0c:
95:a6:40:47:83:a8:30:32:cc:5c:f3:69:f2:09:41:
c6:47:fe:ad:29:d1:68:07:4a:df:ed:7a:3d:ef:5c:
35:16:6e:39:84:21:95:89:46:fe:7c:aa:86:06:68:
c7:87:8c:3b:5f:a8:95:0f:f0:1d:fd:c2:f2:fa:dd:
d7:63:85:29:ba:57:75:ef:6f:99:ed:65:71:74:8b:
d0:1a:3c:28:0f:57:a8:1a:5b:74:61:81:38:64:ce:
5e:5f:32:50:84:8e:c8:60:c7:83:a4:60:14:d8:e1:
80:b2:3a:8f:73:61:5a:b2:d7:a5:a4:30:04:82:11:
16:23:fa:0b:ef:8c:a2:39:3d:3c:7e:33:2c:90:05:
66:33:2e:71:ad:c9:ab:b0:42:b5:a4:72:8c:e6:40:
7e:37:c5:15:87:03:fe:00:52:1e:15:65:af:6c:1c:
1b:d8:a3:a5:a3:2c:a7:60:db:6c:5c:a6:2f:d5:73:
a9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:16:71:44:CF:4F:AD:02:DA:59:A4:B6:BB:24:52:08:FA:67:75:5A
X509v3 Authority Key Identifier:
keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/4A136E9EFC5511ECB16BAE39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.131.12.0/22
45.127.244.0/22
103.196.232.0/22
IPv6:
2401:c5c0::/32
Signature Algorithm: sha256WithRSAEncryption
33:a6:91:34:ae:da:ec:90:8f:37:60:83:15:cd:5a:85:fd:f3:
c6:86:f1:ba:40:6f:b4:ac:ce:a6:7e:2e:00:53:5d:62:91:9f:
04:91:ab:84:58:31:32:43:ea:7d:f6:3b:74:41:45:65:f7:f4:
26:65:35:2c:5b:d6:83:cc:13:ca:c6:f2:77:24:51:06:3e:96:
27:d6:9f:11:01:23:a5:ab:17:f6:cb:50:34:a9:f6:a1:c1:c4:
97:9f:b5:bd:fc:04:16:b4:b1:cf:86:fb:74:76:71:14:d7:63:
8c:ed:4a:cc:ae:a2:85:f9:cc:c9:47:7c:41:92:cf:e5:dc:65:
7e:bf:3e:4d:0b:98:18:1b:d9:c1:0a:7b:56:b0:fb:7e:63:14:
9b:f7:bf:04:bd:a1:b4:22:cb:55:70:6d:74:91:2a:97:ec:4d:
3a:b9:82:a7:a4:3b:d2:c9:2d:75:cb:0d:68:dd:87:2f:0f:ec:
2a:61:0a:09:9b:c5:d2:c5:5a:65:22:38:36:79:2a:f1:3a:20:
54:ff:8a:1b:2b:07:e7:c7:58:34:61:88:7b:92:c8:10:80:49:
6c:3c:13:e4:07:f7:b3:f5:75:33:38:ca:2f:b1:fa:6a:b7:61:
7c:c5:7c:46:67:3b:31:72:e5:f4:c4:46:68:71:42:fb:63:9a:
af:67:65:33
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgICCYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5MjgxMTAvBgNVBAUTKEY1QzlEMzBFOUQwNzcxQ0QwN0U1MUIyRTRBNTJCNTIy
NTNBQkQwMjYwHhcNMjIwNzA1MTEyNjE5WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmM0MWZkYS03MDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApdQTwshWMYx2yg2kukAfsGCMPK65N1RVGmbs7sdZv6zPMNYZy+ViDPak7T+f
65H0P1vBGbAOXUIxt4ozAGQR6R3TodDqtejEsgyVpkBHg6gwMsxc82nyCUHGR/6t
KdFoB0rf7Xo971w1Fm45hCGViUb+fKqGBmjHh4w7X6iVD/Ad/cLy+t3XY4Upuld1
72+Z7WVxdIvQGjwoD1eoGlt0YYE4ZM5eXzJQhI7IYMeDpGAU2OGAsjqPc2Fastel
pDAEghEWI/oL74yiOT08fjMskAVmMy5xrcmrsEK1pHKM5kB+N8UVhwP+AFIeFWWv
bBwb2KOloyynYNtsXKYv1XOpgwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHUWcUTP
T60C2lmktrskUgj6Z3VaMB8GA1UdIwQYMBaAFPXJ0w6dB3HNB+UbLkpStSJTq9Am
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODkyOC80REE3QkIyMDBC
NUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNjMEg1UnN1U2xLMUlsT3Iw
Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzljblREcDBIY2MwSDVSc3VTbEsxSWxPcjBDWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjg5MjgvNERBN0JCMjAwQjVCMTFFQUEzRUJDNjUwQzRGOUFFMDIvNEExMzZFOUVG
QzU1MTFFQ0IxNkJBRTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E
KzApMBgEAgABMBIDBAIbgwwDBAItf/QDBAJnxOgwDQQCAAIwBwMFACQBxcAwDQYJ
KoZIhvcNAQELBQADggEBADOmkTSu2uyQjzdggxXNWoX988aG8bpAb7SszqZ+LgBT
XWKRnwSRq4RYMTJD6n32O3RBRWX39CZlNSxb1oPME8rG8nckUQY+lifWnxEBI6Wr
F/bLUDSp9qHBxJeftb38BBa0sc+G+3R2cRTXY4ztSsyuooX5zMlHfEGSz+XcZX6/
Pk0LmBgb2cEKe1aw+35jFJv3vwS9obQiy1VwbXSRKpfsTTq5gqekO9LJLXXLDWjd
hy8P7CphCgmbxdLFWmUiODZ5KvE6IFT/ihsrB+fHWDRhiHuSyBCASWw8E+QH97P1
dTM4yi+x+mq3YXzFfEZnOzFy5fTERmhxQvtjmq9nZTM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-ams.rpki-client.org