Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/7A75B7D24B0911EEA98A477BC4F9AE02.roa
File: 7A75B7D24B0911EEA98A477BC4F9AE02.roa (raw, json)
Hash identifier: PsZVGXgpzmM9sq5I2QRtPWpn9ExDkrVMMqF7nUbBoJo=
Subject key identifier: AD:C3:11:6A:54:32:2F:21:CA:26:84:7B:7C:D0:3E:CC:20:4C:A8:41
Certificate issuer: /CN=A9145456/serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Certificate serial: 0624
Authority key identifier: 3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/7A75B7D24B0911EEA98A477BC4F9AE02.roa
Signing time: Mon 04 Sep 2023 09:57:38 +0000
ROA not before: Mon 04 Sep 2023 09:57:38 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 138915
IP address blocks: 139.135.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 02:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1572 (0x624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145456/serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Validity
Not Before: Sep 4 09:57:38 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=64f5aa11-67a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:50:08:a1:54:3e:bd:49:e3:37:71:d0:f1:
16:ef:95:67:5d:97:d3:49:eb:66:c9:59:a4:d2:bc:
48:7f:5e:78:ae:e5:eb:e8:17:3c:bd:6b:bf:de:fd:
2b:4d:d7:68:6a:2a:5f:c0:04:4b:f9:a5:37:6e:06:
01:02:13:6a:ef:bd:e1:7e:a5:f4:c3:e9:77:a8:df:
46:8d:14:17:b4:54:34:af:f3:3b:57:5d:6c:cf:9c:
e1:03:28:e0:fb:a3:9b:62:94:e3:a3:2a:29:b1:08:
c5:27:86:c5:cc:34:15:c2:58:db:74:b9:ae:f1:c1:
99:46:aa:60:18:0e:6e:83:ad:8c:dc:33:c4:b7:fe:
8b:fc:da:90:1a:c7:a0:c0:6b:44:c9:08:04:75:c7:
b1:09:9d:68:44:38:8c:d0:35:74:af:ed:40:3b:b9:
81:c5:a8:3a:27:8b:1e:28:99:98:4b:2b:90:9d:3b:
bc:a0:49:63:8d:4e:99:6c:33:e8:57:bb:00:1f:7a:
ad:ad:bd:af:bb:c7:ad:b5:fe:09:9d:04:2d:b8:25:
d3:5f:d7:02:48:f8:0a:2f:b8:f0:67:3e:96:ae:ed:
dc:86:1f:ec:a1:14:f0:80:ab:5d:21:23:a0:ea:97:
4e:eb:38:50:41:c8:08:d4:91:5f:13:2d:16:38:c5:
50:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C3:11:6A:54:32:2F:21:CA:26:84:7B:7C:D0:3E:CC:20:4C:A8:41
X509v3 Authority Key Identifier:
keyid:3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/7A75B7D24B0911EEA98A477BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.135.127.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:63:6e:ee:31:69:83:bb:c0:af:6b:00:36:18:70:1e:31:fb:
25:8d:5a:7d:03:55:51:00:f7:7d:f4:42:86:b3:a7:f9:16:40:
d9:e2:b8:68:d2:fe:f6:fa:71:cd:8e:f5:e7:58:ca:d0:ee:f9:
7a:1f:95:41:72:c9:54:dc:d2:b3:94:cb:eb:f9:05:e7:d0:89:
47:35:1d:57:d5:84:e4:1c:fa:39:e1:6c:54:ae:08:cf:72:65:
f1:85:72:ee:06:21:e1:3f:a2:5f:cd:f6:d6:9c:eb:69:70:fd:
85:83:2a:e7:12:88:c8:8a:3b:02:70:78:c5:95:88:f2:db:d2:
fc:26:00:e3:4d:f3:3b:77:d6:66:ae:19:27:14:49:b8:10:c2:
57:7b:7e:87:fa:b4:f2:71:89:81:bd:7b:a5:07:b5:36:6d:3e:
0f:7a:a7:ec:f3:5b:e9:4f:7a:7c:03:89:09:6b:f6:47:d6:08:
ab:31:9f:5e:1d:b8:b9:d0:58:f1:57:ee:ac:f3:0e:4e:09:d3:
1c:92:2d:b5:39:d6:0d:8f:24:4f:72:19:f0:3a:ba:cd:94:cb:
f9:25:4b:d4:68:54:df:c7:e7:8c:5b:cf:5c:53:77:3f:bb:31:
96:04:70:f5:8b:20:24:5b:19:b1:ec:08:95:be:ba:7a:60:3e:
a7:fa:5c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:01 2024 by rpki-client on console.sobornost.net