Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/ED84BF168F3411ED93CC0E19C4F9AE02.roa
File: ED84BF168F3411ED93CC0E19C4F9AE02.roa (raw, json)
Hash identifier: F9j5qfUPuXtqpab8YUf2ZxzAneSQac7f6ANv1Xdp0sg=
Subject key identifier: 06:5B:82:2B:95:A1:62:07:D7:7C:62:83:A5:35:EC:2A:7D:64:C1:B5
Certificate issuer: /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
Certificate serial: 0F56
Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/ED84BF168F3411ED93CC0E19C4F9AE02.roa
Signing time: Sun 26 Feb 2023 18:45:14 +0000
ROA not before: Sun 26 Feb 2023 18:45:14 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 135413
IP address blocks: 103.132.248.0/22 maxlen: 22
103.132.248.0/24 maxlen: 24
103.132.250.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3926 (0xf56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
Validity
Not Before: Feb 26 18:45:14 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=63fba8b9-e235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:0a:31:a0:df:d2:5c:58:2e:5e:0b:76:c7:
a0:b3:25:88:7f:39:82:29:fd:42:8f:30:dd:59:94:
0e:ba:cb:0b:ef:16:fe:66:d7:f2:e3:c8:20:bc:1d:
25:3f:59:9e:fc:6c:e7:18:e6:6a:b0:84:83:cd:ec:
fd:bb:3c:5c:c8:f4:7e:3a:7b:02:86:f7:8e:ce:15:
3b:d7:e7:27:e9:68:61:13:f2:e0:92:89:a8:0e:80:
6b:ca:33:67:ec:a9:5c:43:e0:88:fc:a4:cc:d0:55:
70:70:75:ea:69:4e:e3:0d:8a:62:73:f1:39:39:9e:
38:94:9b:da:f8:2e:2f:e2:e3:4f:4c:67:2b:0b:ea:
80:9c:0c:c1:49:ee:a3:01:ec:e0:08:1f:bf:c9:a6:
e2:d4:cf:c0:13:78:5e:a9:26:dc:9c:02:92:0a:60:
ee:44:95:38:9c:ac:d5:97:da:c4:54:29:b0:56:57:
38:e9:4b:bb:1c:f1:97:73:db:6c:04:b0:20:1d:c8:
3a:84:12:9d:54:7b:83:39:6f:1f:0a:50:a1:54:1a:
be:98:61:a2:1b:53:d7:53:4b:a0:67:1f:89:24:f7:
aa:17:3a:95:68:d9:0a:4f:e8:f9:a2:54:47:16:8a:
4d:b0:a4:f4:70:b4:05:f1:fd:34:17:3d:21:aa:29:
84:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5B:82:2B:95:A1:62:07:D7:7C:62:83:A5:35:EC:2A:7D:64:C1:B5
X509v3 Authority Key Identifier:
keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/ED84BF168F3411ED93CC0E19C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.248.0/22
Signature Algorithm: sha256WithRSAEncryption
88:83:cd:f7:c9:47:e6:11:b7:6c:bc:18:30:0e:f3:30:bb:f8:
49:4a:f6:34:54:8f:f3:19:0a:b6:2e:e1:c3:7d:c9:2a:b5:a9:
46:97:74:36:01:f3:8e:94:70:8e:94:86:d9:e2:9d:13:50:d3:
e2:4f:8a:b1:60:ff:79:2d:a3:4a:36:41:05:85:ab:d0:a2:a4:
f6:0a:07:17:b4:ce:cd:b8:e2:ad:74:af:17:4e:d0:23:b1:57:
2e:82:0a:a4:ea:d9:6d:10:e4:4a:0d:69:40:ca:41:6d:2e:c5:
c7:d6:80:6d:b3:c2:9d:c1:5f:43:9f:ac:76:f2:42:be:d2:42:
41:04:cf:fb:d1:3e:c7:1d:40:5d:a1:47:00:58:c8:e1:24:c3:
4f:45:bf:f9:c1:d7:aa:7f:a8:f3:d5:09:5e:1d:da:6a:11:65:
58:30:28:83:aa:6d:60:4d:31:d3:d5:2a:ff:a7:d9:52:6f:15:
2f:61:6b:83:9f:ab:e4:6b:fb:76:93:d8:7e:b9:25:0e:10:2a:
07:ad:fc:4b:d1:50:9c:5b:71:1e:20:78:a1:dd:0c:f9:2e:71:
53:e5:1d:0d:55:c9:19:6d:4d:bb:de:5d:a7:ec:a2:49:aa:7e:
b1:e3:5e:78:02:4e:df:bb:80:de:d7:16:50:a4:70:d2:0c:21:
48:cc:fb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:27 2023 by rpki-client on console.sobornost.net