Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/75A600167D2A11ED98425149C4F9AE02.roa
File: 75A600167D2A11ED98425149C4F9AE02.roa (raw, json)
Hash identifier: 4lhdchbhcqO5xDsmUVDUsuDn45J32i6Wi37d/1TMNDo=
Subject key identifier: 31:6D:A4:FC:3F:10:BC:AB:A5:D1:8B:9B:8A:BB:B3:F1:1B:47:DF:8A
Certificate issuer: /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Certificate serial: 104C
Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/75A600167D2A11ED98425149C4F9AE02.roa
Signing time: Fri 16 Dec 2022 10:14:44 +0000
ROA not before: Fri 16 Dec 2022 10:14:44 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 140096
IP address blocks: 103.102.4.0/22 maxlen: 23
103.102.4.0/24 maxlen: 32
103.102.5.0/24 maxlen: 24
103.102.6.0/24 maxlen: 24
103.102.7.0/24 maxlen: 24
182.255.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4172 (0x104c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Validity
Not Before: Dec 16 10:14:44 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=639c4513-bab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:e9:c2:6b:d9:67:db:78:99:9f:1e:ee:ff:
95:78:e8:a3:49:1e:6e:49:be:a1:19:f2:f5:37:27:
33:77:7b:2d:3a:5d:3f:f7:2e:c7:18:6e:12:d8:ef:
d8:5c:7f:cd:2b:e3:fc:f4:3f:8d:44:e0:9e:5e:a1:
35:ae:0b:88:12:b2:05:ce:51:18:36:31:b4:dc:6d:
aa:52:56:d5:a6:c7:81:6f:c4:18:e3:6f:8a:51:3c:
a1:f9:9d:cb:e5:a5:52:75:1d:e8:04:c5:40:2f:62:
aa:c9:ba:56:b1:a6:60:dd:f7:da:9c:78:05:f5:63:
1f:52:35:9d:87:97:ad:c4:32:79:32:5e:ae:c7:ab:
62:00:d0:28:40:7c:64:0d:56:cc:88:74:f5:04:6f:
98:fc:85:72:6b:92:ce:0b:7d:2e:2e:98:8d:5b:b0:
3c:8a:fb:c5:e2:3b:b1:c5:97:6b:ed:ad:74:c0:ed:
d2:b9:c1:da:9a:84:ee:3d:46:78:f1:7d:b0:04:c1:
c8:a0:eb:fb:47:5b:10:34:e3:5f:f5:fc:16:16:e6:
29:65:16:70:8f:4b:b1:88:23:38:c5:de:7b:2b:53:
38:9d:5a:49:f0:03:62:4f:6f:45:e6:a3:63:00:4a:
52:2d:58:51:79:6a:ac:6b:75:08:71:11:bf:1e:66:
6e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6D:A4:FC:3F:10:BC:AB:A5:D1:8B:9B:8A:BB:B3:F1:1B:47:DF:8A
X509v3 Authority Key Identifier:
keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/75A600167D2A11ED98425149C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.4.0/22
182.255.32.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:06:db:e6:58:41:00:69:71:ec:08:46:1f:7b:00:b0:96:4c:
ba:50:5d:b5:25:b7:33:bb:63:3a:10:76:bb:04:df:56:7a:e7:
66:e5:3d:4c:00:58:67:df:11:55:07:94:f5:6e:2b:2e:96:84:
03:05:a5:5a:c2:8b:4e:ae:1a:e7:5e:d7:61:d5:81:2e:8f:a0:
d0:be:a3:73:d4:63:29:a0:02:8c:99:60:9e:b0:85:0d:7c:09:
86:4d:82:a2:55:b0:3c:75:04:f9:d7:22:f7:a6:6c:9c:ff:50:
7a:97:d2:83:5c:40:ef:02:78:88:3e:67:b6:81:41:80:94:64:
18:c3:72:e0:25:ec:10:7c:7e:06:e5:86:da:35:c7:dd:f4:bb:
01:c2:ff:6e:e4:2d:4e:36:6c:66:da:84:0f:36:07:d3:e1:84:
b5:b4:bb:76:5d:42:fa:fe:4f:27:b8:f6:5b:af:f8:8c:6e:d3:
57:42:07:13:37:4e:1e:24:d8:76:be:03:4d:29:0d:aa:1d:de:
df:1a:fc:02:11:e9:0b:88:8c:2b:1b:6e:23:09:c3:9b:d0:be:
14:20:6f:ff:18:f5:2c:52:6f:b5:1f:80:de:17:e2:d2:e7:6c:
43:20:97:6d:da:91:b3:d7:5f:e8:98:19:54:4d:51:97:cd:b7:
a0:67:ae:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:41 2023 by rpki-client on console.sobornost.net