Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/8693111C5B4611EDB3C1D217C4F9AE02.roa
File: 8693111C5B4611EDB3C1D217C4F9AE02.roa (raw, json)
Hash identifier: VGAMkXQ3DeOktotHfLfiw/iIKp+U39+8cwrGyHAzjRM=
Subject key identifier: 01:F9:CE:0F:93:B7:E6:D8:CC:A5:ED:3F:B5:5B:4C:CD:BD:D7:A5:E4
Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Certificate serial: 059C
Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/8693111C5B4611EDB3C1D217C4F9AE02.roa
Signing time: Sat 07 Jan 2023 00:20:12 +0000
ROA not before: Sat 07 Jan 2023 00:20:12 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 139325
IP address blocks: 103.158.158.0/23 maxlen: 23
103.158.158.0/24 maxlen: 24
103.158.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 16:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1436 (0x59c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Validity
Not Before: Jan 7 00:20:12 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63b8babc-ed4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5f:24:c5:a1:81:93:ca:41:01:01:e0:8b:7a:
9b:41:c6:88:25:86:7b:6d:dd:4c:72:01:c8:46:f3:
4d:01:e7:02:45:d8:5c:af:d6:d4:aa:3d:d5:05:97:
4c:89:b8:11:ba:14:48:c9:62:ca:66:6f:6a:0f:cc:
82:19:49:b2:da:1b:2c:1c:ac:a8:e1:7c:f2:02:d5:
37:8b:c8:ef:0b:16:80:3b:78:1e:6f:58:3b:a4:7f:
4b:7b:de:91:f9:c3:3a:75:3f:05:30:e0:24:5b:1e:
28:5b:3b:22:4e:22:5e:f6:80:fe:6d:eb:22:04:79:
c3:90:c7:9e:e0:ab:68:89:8a:d8:ce:c9:0d:7e:1b:
28:ef:63:2f:b2:74:32:58:d2:da:8a:ae:9c:88:71:
aa:82:a8:1c:ef:15:4a:77:e0:b6:79:41:76:47:2f:
48:2b:4b:c4:b5:f0:d1:5c:a6:1f:59:3e:d3:f1:cc:
c9:27:fc:69:d3:26:b4:48:19:a3:b4:5c:62:71:24:
a1:ca:e7:67:c3:5f:26:76:f1:47:bf:1a:4e:fc:59:
fe:04:58:61:8e:07:83:6f:1c:6f:d5:ba:b3:73:da:
5b:12:9a:46:8d:dd:3c:55:20:c4:b3:3b:40:5d:02:
ed:0e:40:01:6f:d8:78:e9:76:8f:6a:ed:7b:69:14:
02:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F9:CE:0F:93:B7:E6:D8:CC:A5:ED:3F:B5:5B:4C:CD:BD:D7:A5:E4
X509v3 Authority Key Identifier:
keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/8693111C5B4611EDB3C1D217C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.158.0/23
Signature Algorithm: sha256WithRSAEncryption
66:72:cf:75:6a:e3:a0:da:da:97:7b:de:58:ef:07:7e:d4:fb:
35:0f:96:15:ea:9e:80:05:da:0f:1d:ea:ab:37:fc:e1:6b:4e:
a0:20:1c:1d:4a:c8:d7:ff:2f:14:e6:5b:a9:44:34:2c:b6:34:
e3:3b:dc:9d:8f:33:40:71:73:72:8a:9f:cc:a7:3d:cd:3f:f7:
f6:b0:02:dd:9e:b3:f6:66:90:e4:47:9d:1e:6c:9a:0b:3b:7f:
55:f6:b3:8a:0c:a1:34:02:99:92:0a:1c:f7:73:85:77:08:73:
29:7c:c2:de:d0:f6:e4:78:b9:ad:8b:d5:ec:56:61:e3:a0:86:
13:49:99:c4:71:59:ac:69:d8:e4:21:97:ca:21:44:ec:22:f1:
2c:f4:ec:9b:41:2c:c2:ed:f0:71:63:e8:29:22:cd:32:c4:5b:
cd:e6:cf:d8:e5:05:f2:cb:50:6a:51:93:1a:7c:e3:bb:47:6e:
b9:15:0b:f4:4d:8c:36:e9:a2:ed:ca:cb:2c:9b:1e:40:31:60:
89:e1:d5:3e:01:22:bb:8a:d6:3c:20:d3:59:3a:a3:7d:ec:ad:
0b:0a:b1:bc:e8:c4:47:d2:d7:34:1e:c9:df:24:7c:f3:39:68:
c6:ea:45:e7:bd:ae:b5:9a:90:be:13:25:78:db:b6:4c:9a:91:
69:4d:34:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:01 2024 by rpki-client on console.sobornost.net