Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FEBB1AA27B2611EF88B60D0DC4F9AE02.roa
File: FEBB1AA27B2611EF88B60D0DC4F9AE02.roa (raw, json)
Hash identifier: LVsfytWRCEJGwrDN7URnf1Q3teTi5K4v26yZe993z5U=
Subject key identifier: 84:D3:8D:6F:D6:13:A1:6D:B6:DF:1E:F2:5E:1F:F8:C6:1D:37:27:A3
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1679
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FEBB1AA27B2611EF88B60D0DC4F9AE02.roa
Signing time: Wed 25 Sep 2024 10:14:48 +0000
ROA not before: Wed 25 Sep 2024 10:14:48 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.224.0/22 maxlen: 24
103.11.63.0/24 maxlen: 24
103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.228.0/22 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.248.0/22 maxlen: 24
113.203.252.0/22 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.152.0/21 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/22 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/22 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 10:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5753 (0x1679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 25 10:14:48 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66f3e298-50e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cf:de:38:52:03:11:7f:67:cf:fe:0d:89:3d:
34:6c:21:38:d2:96:d7:b2:9c:7f:ed:67:bb:35:a7:
79:c9:da:68:b0:93:d2:df:15:9b:7b:30:d4:ae:a3:
58:c3:7c:85:9d:44:51:88:9e:95:c8:3a:b8:67:c6:
54:90:66:60:38:40:f3:f1:72:0b:a1:6f:73:48:52:
0a:2f:9e:47:09:e1:ad:4c:df:3b:54:bf:4a:72:54:
83:67:c7:18:56:ab:5f:07:81:4c:8e:b0:b4:fb:8e:
e9:25:e1:2c:5b:55:19:d9:fc:55:9f:6e:39:f0:f7:
6f:9f:7b:e7:87:c0:57:7a:15:06:b2:32:05:10:b8:
d0:81:12:6d:88:15:01:37:f1:23:f7:1f:f4:c7:0c:
1c:4e:01:05:e8:1d:f6:64:50:87:7d:01:2a:8e:97:
72:c9:2f:16:a9:10:69:68:4f:e0:9d:b0:8c:ee:a9:
11:72:ed:bd:f2:38:c1:c6:a7:28:22:a7:80:6a:f9:
c5:5d:6f:7d:d5:e3:25:b2:7a:b3:20:7c:dc:8c:ef:
71:87:f7:6e:a0:9e:49:15:b0:91:a0:19:64:97:3d:
7a:fd:c3:10:ec:5f:e5:f3:4e:4d:13:0f:8d:48:16:
9a:f1:ad:b5:6c:91:a6:55:0c:6a:65:d8:8f:60:b3:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D3:8D:6F:D6:13:A1:6D:B6:DF:1E:F2:5E:1F:F8:C6:1D:37:27:A3
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FEBB1AA27B2611EF88B60D0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
103.11.63.0/24
103.151.27.0/24
113.203.208.0/24
113.203.210.0/24
113.203.212.0/23
113.203.215.0-113.203.220.255
113.203.222.0-113.203.231.255
113.203.233.0/24
113.203.242.0-113.203.245.255
113.203.248.0/21
115.167.2.0/23
115.167.12.0-115.167.23.255
115.167.50.0/24
115.167.56.0/22
115.167.73.0/24
115.167.78.0/24
115.167.125.0/24
175.110.97.0/24
175.110.104.0-175.110.106.255
180.178.142.0/24
180.178.144.0/24
180.178.146.0/24
180.178.148.0-180.178.150.255
180.178.152.0-180.178.160.255
180.178.163.0/24
180.178.165.0-180.178.171.255
180.178.176.0-180.178.187.255
180.178.189.0/24
180.178.191.0/24
202.92.26.0/24
223.29.231.0/24
223.29.235.0-223.29.239.255
Signature Algorithm: sha256WithRSAEncryption
25:a1:a2:8f:ea:af:f4:06:ad:75:bd:e9:5e:b3:eb:8d:60:07:
e3:3c:cf:b2:e4:d7:a4:79:6d:c6:30:1d:2c:6c:41:82:fd:ae:
e9:ee:6b:40:08:a3:5e:07:f2:ca:c0:34:99:fd:2e:ef:80:82:
3f:1b:01:54:6d:01:56:b3:15:fa:39:e5:35:cd:33:fa:93:8f:
0e:ca:ca:8b:e4:a2:bb:08:3f:ae:3b:2f:ba:5d:14:a0:1f:1f:
fa:50:84:f3:15:48:22:4b:b7:68:b6:b5:ea:13:3d:ae:62:f4:
93:cb:7f:66:2f:db:44:85:55:02:bf:99:d8:d2:e1:5b:29:c9:
81:52:c0:8a:d9:9f:a7:3b:f7:26:19:1d:67:93:00:76:ab:43:
d2:2c:b2:a0:6e:39:a8:fd:6e:d2:f6:9b:05:75:f9:de:6d:c0:
78:95:9f:43:87:64:0a:ff:3b:f4:21:b9:ce:77:3d:e3:43:bb:
36:4e:33:3a:fc:8a:cc:5a:a6:29:93:35:fc:c9:44:1b:b9:5c:
6c:0a:ca:13:79:20:46:01:9b:48:bd:38:a2:d2:98:b0:5b:29:
49:89:ac:96:51:ed:3d:39:6c:a4:07:55:1d:75:64:e0:4c:20:
e8:7e:18:fe:63:14:26:97:77:bf:be:c1:c3:f4:17:a4:3f:96:
6b:eb:a5:fc
-----BEGIN CERTIFICATE-----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=
Generated at Wed Sep 25 13:20:45 2024 by rpki-client on console.sobornost.net