Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/D4E1388A2F8A11EEA59DA358C4F9AE02.roa
File: D4E1388A2F8A11EEA59DA358C4F9AE02.roa (raw, json)
Hash identifier: aFSA5O7xnkZZwxm6vC5yFG/zZzKo/s7oLpRn4AOcG08=
Subject key identifier: 43:42:03:F9:EC:8C:C1:A2:20:10:81:62:E6:63:7A:9A:3B:71:65:24
Certificate issuer: /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Certificate serial: 036A
Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/D4E1388A2F8A11EEA59DA358C4F9AE02.roa
Signing time: Tue 17 Sep 2024 12:02:19 +0000
ROA not before: Tue 17 Sep 2024 12:02:19 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 147049
IP address blocks: 103.173.150.0/23 maxlen: 23
103.173.150.0/24 maxlen: 24
103.173.151.0/24 maxlen: 24
116.204.192.0/24 maxlen: 24
116.204.193.0/24 maxlen: 24
116.204.194.0/24 maxlen: 24
116.204.195.0/24 maxlen: 24
2407:e8c0::/48 maxlen: 48
2407:e8c0:1::/48 maxlen: 48
2407:e8c0:2::/48 maxlen: 48
2407:e8c0:3::/48 maxlen: 48
2407:e8c0:4::/48 maxlen: 48
2407:e8c0:5::/48 maxlen: 48
2407:e8c0:6::/48 maxlen: 48
2407:e8c0:7::/48 maxlen: 48
2407:e8c0:8::/48 maxlen: 48
2407:e8c0:9::/48 maxlen: 48
2407:e8c0:a::/48 maxlen: 48
2407:e8c0:b::/48 maxlen: 48
2407:e8c0:c::/48 maxlen: 48
2407:e8c0:d::/48 maxlen: 48
2407:e8c0:e::/48 maxlen: 48
2407:e8c0:f::/48 maxlen: 48
2407:e8c0:11::/48 maxlen: 48
2407:e8c0:4a00::/40 maxlen: 40
2407:e8c0:4b00::/40 maxlen: 40
2407:e8c0:4c00::/40 maxlen: 40
2407:e8c0:4d00::/40 maxlen: 40
2407:e8c0:4e00::/40 maxlen: 40
2407:e8c0:4f00::/40 maxlen: 40
2407:e8c0:5000::/40 maxlen: 40
2407:e8c0:5100::/40 maxlen: 40
2407:e8c0:5200::/40 maxlen: 40
2407:e8c0:5300::/40 maxlen: 40
2407:e8c0:5400::/40 maxlen: 40
2407:e8c0:5500::/40 maxlen: 40
2407:e8c0:5600::/40 maxlen: 40
2407:e8c0:5700::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 19 Sep 2024 07:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 874 (0x36a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Validity
Not Before: Sep 17 12:02:19 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=66e96fcb-f271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:ec:65:ff:ec:62:7a:f4:7b:e9:e9:9a:49:
ac:77:6c:fe:84:88:76:a0:62:ed:b5:97:ab:5d:69:
78:9c:47:a1:4d:92:48:9c:39:e3:db:68:05:90:fd:
e9:bc:20:db:63:d0:73:e5:14:b2:db:9c:38:d8:e1:
ff:f9:c3:ae:2c:dc:69:9d:a0:a6:96:e2:8f:04:97:
b6:cc:bd:da:e7:12:4e:1f:ed:bc:c6:8b:da:5e:37:
d4:05:18:64:e8:77:a3:7d:c2:f6:d6:4b:35:e5:ab:
dd:43:7a:0c:83:4a:ab:38:23:73:bb:c9:c4:40:07:
7b:6e:2c:5f:bc:3b:6a:2c:dc:02:b1:57:6b:0c:1b:
8d:d0:07:af:d6:ea:24:a0:b1:2a:d9:2b:c2:d2:9d:
e7:73:9b:54:d2:34:13:85:a2:62:0f:ec:51:d6:e9:
e6:47:a1:6a:5b:ae:2f:83:ec:7d:af:3b:69:0c:43:
a1:7b:e1:3c:7e:a3:4b:b4:b9:bc:24:65:99:0c:82:
31:97:4f:6a:ab:84:f8:5f:e1:2a:53:08:fe:d2:00:
9d:d4:4c:e2:28:02:65:39:22:ac:0c:ce:08:d5:29:
a0:99:06:84:bb:b2:94:06:6a:d4:a1:8f:29:25:b6:
71:5c:b9:7f:8c:ff:5f:28:8f:6f:f5:b6:7f:68:99:
57:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:42:03:F9:EC:8C:C1:A2:20:10:81:62:E6:63:7A:9A:3B:71:65:24
X509v3 Authority Key Identifier:
keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/D4E1388A2F8A11EEA59DA358C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.150.0/23
116.204.192.0/22
IPv6:
2407:e8c0::/44
2407:e8c0:11::/48
2407:e8c0:4a00::-2407:e8c0:57ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a3:9b:6f:31:29:55:bd:6a:92:d2:ff:5e:30:d7:fb:6e:5d:ca:
9e:52:a7:f6:0b:10:d9:27:3f:1f:6c:2c:81:bd:f8:26:ab:f8:
e5:2c:5e:6f:a4:27:31:f7:18:ef:96:96:d1:a9:b2:a3:1b:41:
56:ab:92:d3:a1:c9:7f:0c:78:33:59:e8:e4:51:99:a4:23:80:
3f:a3:14:74:fe:d1:d6:18:80:0b:da:85:4a:43:c1:dc:e7:9b:
f4:9b:1a:1e:08:6c:68:b2:86:ed:38:08:64:30:14:2c:36:63:
6c:3a:9c:9e:1a:11:3d:00:be:d7:ef:0a:a7:7a:5c:3e:c7:02:
f9:f8:fa:dd:8f:08:15:ec:9f:e2:96:ad:cd:0f:83:e4:73:47:
e9:13:df:2d:a0:16:3e:7a:e0:55:fa:04:a9:22:8f:2b:a2:01:
67:9e:cf:4e:37:e2:5a:0b:5a:89:d7:e7:58:3b:7a:fc:c0:a2:
01:d6:71:a0:27:d8:69:29:f6:37:16:68:11:cc:e1:53:7f:91:
ee:df:12:7c:8a:42:d3:e4:b3:6d:71:b1:1e:c6:6d:ed:bc:c2:
a8:6a:84:14:50:02:42:e2:50:72:11:81:4a:f0:ad:31:cc:60:
81:5c:bf:1e:12:e8:b9:2b:64:52:ec:d2:94:ca:22:34:ab:6e:
e8:24:36:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 12:35:31 2024 by rpki-client on console.sobornost.net