Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/2D08D492E6E311ECBB46EC4AC4F9AE02.roa
File: 2D08D492E6E311ECBB46EC4AC4F9AE02.roa (raw, json)
Hash identifier: eV6gtYp0VbrwFmP9v/40cI9l/dNQ6o7QF+G2Ar+qX9E=
Subject key identifier: AE:54:CC:5E:55:90:52:6F:67:DD:41:35:EE:29:37:FA:69:BB:9D:63
Certificate issuer: /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Certificate serial: 14AD
Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/2D08D492E6E311ECBB46EC4AC4F9AE02.roa
Signing time: Fri 26 May 2023 17:57:58 +0000
ROA not before: Fri 26 May 2023 17:57:58 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 101.97.68.0/22 maxlen: 22
2403:b101::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5293 (0x14ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Validity
Not Before: May 26 17:57:58 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6470f326-56ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:04:f5:80:fc:97:ca:eb:a2:b9:a9:1b:51:
6a:f4:ee:9c:4d:4c:15:6c:9c:0c:a1:83:7b:9b:f3:
81:32:1f:62:e8:53:64:db:0c:49:f8:86:bf:b6:16:
f3:f8:74:85:fb:0d:c7:14:07:aa:0e:ba:d4:71:1d:
57:36:1e:6c:1c:20:ec:32:d7:ef:49:84:72:1f:03:
84:46:8e:e1:6a:5b:3f:a5:e4:1c:d8:8d:e1:d7:69:
30:44:b0:d5:ab:bb:cd:d7:c9:77:6f:c8:7b:bb:17:
6b:c0:13:3f:21:3c:3e:57:91:6a:8b:26:ec:7b:f8:
82:93:b2:ee:07:4d:38:e9:75:06:f7:19:bc:60:89:
f7:19:f3:05:fd:b6:36:13:80:c5:f8:b3:f2:03:bc:
83:69:d4:b6:36:82:99:1d:ec:63:db:0c:43:4c:7c:
13:c4:62:c5:1b:a5:63:3d:78:f2:12:5d:a7:34:10:
b4:b1:c6:2a:64:f9:d6:dc:5c:c5:65:f4:60:4a:e2:
ac:37:07:04:87:c1:6d:dd:38:2c:c9:13:a1:f9:2a:
af:49:08:bb:b4:05:3a:2c:e0:89:42:08:be:1a:85:
8c:5b:a8:be:11:2f:98:94:58:89:d8:ab:98:28:f7:
36:3a:ee:36:00:3f:a0:b9:a0:9e:4d:93:78:0a:48:
7a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:54:CC:5E:55:90:52:6F:67:DD:41:35:EE:29:37:FA:69:BB:9D:63
X509v3 Authority Key Identifier:
keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/2D08D492E6E311ECBB46EC4AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.97.68.0/22
IPv6:
2403:b101::/40
Signature Algorithm: sha256WithRSAEncryption
a6:e6:d8:b6:30:2e:66:73:0f:8d:65:c8:b6:af:80:9f:30:ba:
0e:21:26:0b:5b:f7:37:24:85:5c:4d:2d:be:13:9e:71:88:01:
40:72:9a:62:48:65:d7:4f:d0:67:41:a0:25:ab:29:e3:50:d2:
df:f8:35:a5:5d:f5:eb:28:61:de:13:9b:36:e5:a5:46:14:73:
ea:4d:2c:71:5f:3d:51:05:78:8c:ae:40:93:d9:d0:ef:23:0c:
f5:7c:e0:bc:81:13:f3:81:d0:d1:8a:01:b5:c0:97:7b:30:33:
6e:b1:2d:c2:44:0c:1c:8d:00:3e:37:eb:71:bb:7a:53:bd:6b:
eb:6e:42:1e:3f:81:cc:d7:68:e3:be:fb:8e:99:3a:0f:ee:26:
b9:53:3d:fb:17:5c:be:52:97:fc:3b:58:d0:e5:13:9c:c8:1d:
36:b4:03:80:9a:26:de:12:c9:aa:8a:74:a6:64:f6:7f:be:a8:
58:7f:7a:e2:8e:8f:1a:64:0f:48:0b:05:35:d6:cb:47:8f:5f:
17:2b:fe:63:fd:59:8a:15:01:5e:4f:51:6a:2d:0a:92:5d:ef:
e5:c4:6f:45:73:9e:30:fc:cd:fd:21:bf:34:5f:45:d1:60:37:
61:f0:98:bf:dd:be:36:a0:f7:0c:f1:23:01:8e:0d:59:21:fd:
a5:87:c4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:47 2023 by rpki-client on console.sobornost.net