Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F5CEB22C136C11EFA5ABC611C4F9AE02.roa
File: F5CEB22C136C11EFA5ABC611C4F9AE02.roa (raw, json)
Hash identifier: IbZy43dGsAX+lX82Qa8HXaj5hrpgoOvgugGIk84rOsA=
Subject key identifier: E5:47:E4:F1:F1:86:D2:29:32:E8:5A:D6:6C:57:E1:67:3F:BE:30:85
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 120B
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F5CEB22C136C11EFA5ABC611C4F9AE02.roa
Signing time: Mon 20 May 2024 10:32:44 +0000
ROA not before: Mon 20 May 2024 10:32:44 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138241
IP address blocks: 103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.249.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
113.203.251.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 05:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4619 (0x120b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 20 10:32:44 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=664b26cc-39db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:95:2c:5b:3b:49:7b:8e:b0:12:06:d6:da:
93:ef:92:ee:47:18:fb:1a:c8:62:e8:22:42:ec:50:
4e:50:c2:67:77:12:18:a9:65:e2:1e:ba:fb:72:e9:
1f:9b:19:78:a2:f1:f2:29:c4:f0:50:cb:f8:dd:38:
30:48:a6:15:14:9f:70:7b:c5:1a:e5:35:3b:ac:20:
7b:a7:e7:2c:9c:40:de:dd:ae:52:60:1b:57:8c:3f:
54:a8:7c:10:b0:36:c1:a0:e4:10:e5:95:76:3c:ea:
33:16:ca:ec:ee:dc:6e:40:b1:71:f2:5d:13:cb:b2:
9d:71:f3:ea:fd:8b:ad:5b:53:23:1d:24:51:a7:af:
28:d9:87:17:1f:02:ec:12:32:db:80:e9:77:55:7b:
c2:d2:46:8f:9e:0b:85:04:ea:03:25:7e:fc:31:ad:
bb:f5:60:ab:63:37:d8:22:63:de:b7:75:48:0c:f3:
ed:61:2e:6e:be:68:a5:3a:c6:15:91:5a:59:04:91:
a5:26:3f:e7:03:f9:18:9f:56:f7:ab:31:dd:33:ac:
82:4b:8c:a6:e0:a0:59:f4:59:27:de:0e:88:40:33:
ed:f0:be:5e:cb:1a:0d:8a:56:d1:94:e6:b6:8c:4c:
7c:f9:5b:4d:59:96:50:b9:4d:18:cf:7d:54:19:ad:
0e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:47:E4:F1:F1:86:D2:29:32:E8:5A:D6:6C:57:E1:67:3F:BE:30:85
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F5CEB22C136C11EFA5ABC611C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
113.203.208.0/24
113.203.210.0/24
113.203.212.0/23
113.203.216.0-113.203.218.255
113.203.220.0/24
113.203.223.0-113.203.226.255
113.203.228.0/22
113.203.233.0/24
113.203.235.0/24
113.203.242.0/24
113.203.244.0/23
113.203.248.0/21
115.167.2.0/24
115.167.49.0/24
115.167.78.0/24
180.178.142.0/24
180.178.160.0/24
202.92.18.0/24
202.92.20.0/24
223.29.227.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:7d:d7:21:06:5a:f3:7f:10:58:9f:9d:0d:e4:7b:88:4c:63:
cc:0c:34:8b:94:55:95:fc:85:6e:bd:15:12:3d:c8:f1:57:ce:
08:f7:37:cb:ee:bf:60:03:8a:4c:98:e7:87:17:08:68:43:23:
5f:0d:e3:53:e9:ac:83:90:cf:d0:86:af:06:2b:63:c9:b8:c3:
39:30:c0:fc:55:3e:86:e4:03:dc:ae:42:fd:f7:a1:23:0c:08:
e4:19:cb:99:52:54:32:88:3d:76:af:2b:ed:72:30:9f:f2:bf:
b3:23:56:36:00:f3:4e:f4:1b:a7:ed:ec:ba:c6:17:88:59:2c:
27:9c:66:9f:a4:3c:d4:db:3d:f6:19:b2:37:e2:6a:62:ac:32:
91:9b:f5:45:3c:fb:91:56:80:56:74:3f:0f:3f:a9:17:8a:08:
37:a1:e9:61:96:17:b3:62:85:5a:15:58:a3:78:10:12:c0:3b:
64:0a:46:f3:95:1d:cd:a3:1f:77:94:ad:4e:e1:59:7a:66:e4:
62:a7:01:49:03:da:e7:24:bd:bc:57:9a:33:6c:09:4d:7f:28:
41:9f:d7:c7:0b:20:da:81:00:a9:22:ea:54:60:79:30:5c:93:
66:00:80:b1:c5:bb:a6:2b:f9:e7:2d:a6:db:c2:38:8f:8c:59:
04:33:36:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 09:51:42 2024 by rpki-client on console.sobornost.net