Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/20B8871C2C3F11EE899C056EC4F9AE02.roa
File: 20B8871C2C3F11EE899C056EC4F9AE02.roa (raw, json)
Hash identifier: d0yT4DMbaFlknP7LrEmppg633WaJAZK0DZyLgxAbHus=
Subject key identifier: EA:61:32:9F:42:CB:BF:34:DF:78:76:65:A3:D9:85:E8:6F:F8:0E:4F
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 372D
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/20B8871C2C3F11EE899C056EC4F9AE02.roa
Signing time: Thu 27 Jul 2023 05:33:34 +0000
ROA not before: Thu 27 Jul 2023 05:33:34 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 17552
IP address blocks: 27.145.0.0/16 maxlen: 24
58.8.0.0/16 maxlen: 24
58.9.0.0/16 maxlen: 24
58.10.0.0/16 maxlen: 24
58.11.0.0/16 maxlen: 24
61.90.0.0/17 maxlen: 24
61.91.128.0/21 maxlen: 24
61.91.144.0/21 maxlen: 24
61.91.190.0/24 maxlen: 24
61.91.191.0/24 maxlen: 24
61.91.192.0/24 maxlen: 24
61.91.193.0/24 maxlen: 24
61.91.201.0/24 maxlen: 24
61.91.214.0/24 maxlen: 24
110.168.0.0/17 maxlen: 24
110.168.128.0/17 maxlen: 24
110.169.0.0/16 maxlen: 24
110.171.0.0/17 maxlen: 24
110.171.128.0/17 maxlen: 24
114.109.0.0/16 maxlen: 24
115.87.0.0/17 maxlen: 24
115.87.128.0/17 maxlen: 24
119.46.255.0/24 maxlen: 24
119.76.0.0/16 maxlen: 24
124.120.0.0/16 maxlen: 24
124.121.0.0/16 maxlen: 24
124.122.0.0/16 maxlen: 24
171.96.0.0/16 maxlen: 24
171.97.0.0/16 maxlen: 24
171.98.0.0/16 maxlen: 24
171.99.0.0/16 maxlen: 24
171.100.0.0/16 maxlen: 24
171.101.0.0/16 maxlen: 24
182.17.0.0/16 maxlen: 24
202.176.64.0/18 maxlen: 18
202.176.64.0/19 maxlen: 24
202.176.96.0/19 maxlen: 24
202.176.128.0/18 maxlen: 18
202.176.128.0/19 maxlen: 19
202.176.183.0/24 maxlen: 24
202.176.184.0/24 maxlen: 24
2001:fb1::/32 maxlen: 32
2001:fb1::/44 maxlen: 48
2001:fb1:10::/44 maxlen: 48
2001:fb1:20::/44 maxlen: 48
2001:fb1:30::/44 maxlen: 48
2001:fb1:40::/44 maxlen: 48
2001:fb1:50::/44 maxlen: 48
2001:fb1:60::/44 maxlen: 48
2001:fb1:70::/44 maxlen: 48
2001:fb1:80::/44 maxlen: 48
2001:fb1:90::/44 maxlen: 48
2001:fb1:a0::/44 maxlen: 48
2001:fb1:b0::/44 maxlen: 48
2001:fb1:c0::/44 maxlen: 48
2001:fb1:d0::/44 maxlen: 48
2001:fb1:e0::/44 maxlen: 48
2001:fb1:f0::/44 maxlen: 48
2001:fb1:100::/44 maxlen: 48
2001:fb1:110::/44 maxlen: 48
2001:fb1:120::/44 maxlen: 48
2001:fb1:130::/44 maxlen: 48
2001:fb1:140::/44 maxlen: 48
2001:fb1:150::/44 maxlen: 48
2001:fb1:160::/44 maxlen: 48
2001:fb1:170::/44 maxlen: 48
2001:fb1:180::/44 maxlen: 48
2001:fb1:fc0::/48 maxlen: 48
2001:fb1:fd0::/48 maxlen: 48
2001:fb1:fe0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14125 (0x372d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 27 05:33:34 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64c201ae-638f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:75:8c:c1:85:02:5f:25:5c:23:3c:d7:c4:
d4:e7:78:49:a9:10:d7:9c:83:a1:c1:c8:0a:f4:ed:
ad:77:db:a2:e9:8c:cf:b7:54:5c:f1:d4:59:86:c6:
6e:d7:9b:f3:d6:34:aa:19:b0:71:32:60:7b:f9:b0:
0c:a2:99:b1:57:53:8f:0c:a2:00:ac:3b:44:42:ea:
ba:ee:15:96:ba:74:bf:cd:c1:9c:d4:09:03:e9:df:
34:e9:84:a0:8f:9c:4a:48:d1:05:5e:16:9a:ee:dd:
27:7c:85:b8:2e:8b:82:b5:26:ce:f4:46:10:29:ed:
62:8d:c1:62:e1:85:58:cd:cc:ac:35:7b:bc:1e:05:
7f:5d:d6:01:2f:79:8a:ef:1f:18:1b:b6:24:66:9b:
55:00:13:d7:47:13:d7:d1:31:15:fc:b0:a5:3b:9b:
1d:6b:5d:47:ab:37:2e:19:c3:fe:f8:50:68:8e:04:
44:46:db:a3:b8:c1:83:37:a9:a7:99:5d:c2:32:42:
79:24:39:fd:e6:c3:37:2e:6b:79:ba:47:c5:2a:90:
89:59:2c:d1:b4:c8:03:43:13:94:54:ff:f8:eb:9b:
43:5d:c4:c6:4a:34:c7:54:b0:ef:0c:20:3b:e8:e4:
fe:82:86:f0:6e:b0:7b:68:bf:c4:0c:5a:47:8a:ac:
d5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:61:32:9F:42:CB:BF:34:DF:78:76:65:A3:D9:85:E8:6F:F8:0E:4F
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/20B8871C2C3F11EE899C056EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.145.0.0/16
58.8.0.0/14
61.90.0.0/17
61.91.128.0/21
61.91.144.0/21
61.91.190.0-61.91.193.255
61.91.201.0/24
61.91.214.0/24
110.168.0.0/15
110.171.0.0/16
114.109.0.0/16
115.87.0.0/16
119.46.255.0/24
119.76.0.0/16
124.120.0.0-124.122.255.255
171.96.0.0-171.101.255.255
182.17.0.0/16
202.176.64.0-202.176.191.255
IPv6:
2001:fb1::/32
Signature Algorithm: sha256WithRSAEncryption
25:18:8c:b2:a4:a0:a6:34:55:b0:d1:27:76:70:4b:f1:ec:ad:
93:a8:03:cc:8e:4e:6e:4b:19:01:e4:d7:85:66:da:54:f6:5c:
22:23:c8:a4:25:b1:91:d2:5c:ca:71:ac:7d:59:f0:54:9d:ca:
37:83:4e:9b:6f:9d:41:89:cb:36:41:38:ee:e5:a3:67:c3:09:
71:7e:a1:ef:ac:1b:4e:86:c6:74:01:7c:a0:cd:99:99:0f:d3:
17:9f:4e:74:e1:29:9e:a8:d9:e7:87:91:b5:a6:9f:d0:4a:71:
0f:1b:43:3e:9a:48:79:87:0c:03:d1:3c:69:28:51:a9:06:d2:
dc:55:fb:b8:6e:3d:eb:36:20:1e:b3:a4:0a:68:30:eb:d4:56:
9d:b1:4b:e2:87:55:ce:d6:6d:d1:67:ca:03:b0:51:1a:71:ac:
16:2f:bf:80:0b:97:29:c2:29:a9:bb:bf:46:e7:3d:f4:a9:35:
45:4b:13:99:7d:ef:75:1c:19:96:f0:e8:26:5a:38:39:15:dc:
a7:a1:7b:63:88:ea:30:d6:70:e3:18:c0:d1:3e:73:76:0e:f0:
52:cf:23:53:71:c4:cb:10:47:aa:41:91:ba:b6:d1:c3:a4:83:
9a:d4:38:d1:41:f4:39:15:26:68:a1:dd:eb:ba:16:e1:01:01:
ed:1e:58:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:37 2023 by rpki-client on console.sobornost.net