Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A3776B4218D811EFBEC4D11AC4F9AE02.roa
File: A3776B4218D811EFBEC4D11AC4F9AE02.roa (raw, json)
Hash identifier: rvt0ENK+Mieov8rykASJPYhnj8+Dirq/MfjrsNcCosc=
Subject key identifier: 48:A1:8F:29:31:2F:43:37:1E:3F:3C:8D:52:EB:87:48:E3:22:B1:88
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1270
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A3776B4218D811EFBEC4D11AC4F9AE02.roa
Signing time: Wed 29 May 2024 11:14:25 +0000
ROA not before: Wed 29 May 2024 11:14:25 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.249.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
113.203.251.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.10.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.152.0/21 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.179.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/24 maxlen: 24
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 May 2024 11:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4720 (0x1270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 29 11:14:25 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66570e10-7af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9a:49:d8:ef:21:2e:ef:d4:4b:fd:15:5a:10:
bb:d1:5d:df:ba:67:22:ad:ee:9b:9b:1b:43:8c:f5:
d1:f5:c8:72:b3:e5:82:0e:21:99:69:95:97:e2:d4:
b0:95:08:b8:f2:56:09:6a:f0:4b:15:ac:23:a9:b6:
90:2d:a7:ad:ea:74:d7:bb:c9:31:9e:e6:8a:22:b4:
53:08:88:ef:ca:5c:a8:6c:4c:22:61:a8:e2:55:5a:
52:0e:79:0d:e4:0c:82:4b:86:18:a4:b1:87:f4:e0:
2a:5e:23:f5:cd:94:87:4c:86:ce:36:81:d3:bb:b9:
22:25:82:bb:33:1d:fb:26:44:16:5a:cd:b0:ba:55:
1a:38:bf:2a:0f:c2:c2:63:b5:32:93:e9:be:8b:cd:
07:3d:e2:a3:bc:7a:97:27:c7:3d:44:7b:e2:af:6c:
b0:d0:1d:92:52:49:5c:53:5a:e4:c9:ed:3d:23:03:
38:bc:4f:f0:bd:c9:6f:e6:8c:ba:ce:e6:8a:7e:8a:
bb:d2:5f:ab:04:58:bd:80:d6:54:ce:b3:78:83:e8:
9c:57:7e:89:79:77:61:6d:d4:61:7a:fc:c7:9b:29:
bc:54:d2:a1:ec:f4:69:23:2a:c6:ee:f5:20:c5:91:
ac:00:16:42:01:8f:64:47:44:4f:9c:d5:2f:ee:9c:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A1:8F:29:31:2F:43:37:1E:3F:3C:8D:52:EB:87:48:E3:22:B1:88
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A3776B4218D811EFBEC4D11AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
113.203.208.0/24
113.203.210.0/24
113.203.212.0/23
113.203.216.0-113.203.218.255
113.203.220.0/24
113.203.223.0-113.203.226.255
113.203.228.0/22
113.203.233.0/24
113.203.242.0/24
113.203.244.0/23
113.203.248.0/21
115.167.2.0/24
115.167.9.0-115.167.10.255
115.167.49.0/24
115.167.73.0/24
115.167.78.0/24
180.178.142.0/24
180.178.144.0/24
180.178.146.0/24
180.178.148.0-180.178.150.255
180.178.152.0-180.178.160.255
180.178.163.0/24
180.178.165.0-180.178.170.255
180.178.179.0-180.178.187.255
180.178.189.0/24
202.92.18.0/24
202.92.20.0/24
223.29.225.0/24
223.29.227.0/24
223.29.231.0/24
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
19:17:03:cf:81:95:59:7e:14:63:5f:8c:eb:ce:40:41:35:c0:
de:af:ca:98:fc:fb:3d:95:cf:86:3e:8b:56:2e:05:cd:67:1f:
a4:86:31:4e:b6:5f:c6:c3:23:e2:ee:d4:71:2b:28:c4:db:94:
33:44:d9:35:6b:fd:2e:5d:91:26:66:ca:f7:14:a2:04:e5:dd:
5c:67:50:8d:66:5f:0a:3e:56:b9:85:9a:7e:e0:f3:59:dc:01:
8c:ba:85:e0:49:48:a9:53:e7:a3:19:38:63:42:ce:a4:25:b8:
81:0e:64:87:14:8f:1e:93:3b:18:d3:9b:f5:8b:cf:9c:3c:a6:
26:ac:6a:50:0c:f8:48:b6:e7:52:85:36:cc:ed:ba:da:ff:4a:
6e:e9:9a:d2:dc:4e:e0:df:3e:d8:23:2d:8c:74:7e:72:85:12:
19:f2:11:e5:0a:0d:90:79:71:90:98:4e:11:af:d4:9c:b1:2e:
4c:c7:1a:d0:c1:b2:29:92:8b:19:86:cf:11:e5:1a:bb:bd:15:
58:12:ef:88:5f:65:18:ff:2b:30:2b:c1:f6:29:24:d8:15:56:
e6:35:95:eb:ce:ca:0c:83:25:09:25:db:2a:dd:38:61:a4:6d:
bf:f2:9f:1d:cd:c7:56:a8:b6:67:01:fb:d0:47:e5:fb:2b:1e:
24:0f:eb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 16:03:50 2024 by rpki-client on console.sobornost.net