Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/650046748F2811EF81466773C4F9AE02.roa
File: 650046748F2811EF81466773C4F9AE02.roa (raw, json)
Hash identifier: i43I2Vj6OSJ6hv3dv5+qxaYl329g3lRBM2YZ8PsXSwo=
Subject key identifier: FC:CB:38:0A:92:DD:79:55:ED:0E:EC:59:19:F2:7B:F4:D7:94:EB:0B
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 357E
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/650046748F2811EF81466773C4F9AE02.roa
Signing time: Sun 20 Oct 2024 21:15:13 +0000
ROA not before: Sun 20 Oct 2024 21:15:13 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 175.29.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 10:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13694 (0x357e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Oct 20 21:15:13 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671572e1-1543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b5:cb:1f:a9:d6:80:2a:21:f0:b1:83:e6:fc:
f7:6d:72:e9:14:51:7a:97:cb:40:54:9d:e2:1b:42:
b0:66:5f:97:43:98:73:c5:d0:7a:f6:84:6e:c5:40:
80:6c:04:66:c5:37:38:33:04:e8:d5:86:65:3e:5e:
e0:83:73:f2:d5:d0:40:5a:03:5e:35:f9:b7:e2:fd:
d3:93:a1:9c:c6:ec:31:20:e2:d0:ac:60:67:7f:ba:
7c:50:c6:3d:93:16:34:90:90:e7:25:9b:ed:2e:da:
0c:e4:a0:ba:a8:bc:68:da:15:fd:c6:18:27:b2:1f:
9f:ce:d1:cf:2d:da:de:43:8c:8f:97:20:02:10:1a:
5d:a5:b4:e9:8c:5c:84:5b:50:b4:ee:da:04:92:bd:
58:cb:5d:c5:ea:f5:28:c5:b8:ff:33:5d:45:a8:94:
5c:16:3f:fb:9b:87:e3:84:34:17:e3:18:65:7e:e0:
26:0f:23:35:f3:7c:98:ba:4f:d6:19:2e:db:67:55:
70:e7:2a:2c:e9:f6:aa:53:83:d7:bd:17:11:50:90:
fe:a1:e0:29:5e:3a:91:7e:a4:e1:43:51:ec:3e:13:
b6:fd:f0:55:f2:29:15:19:8e:58:1a:ff:4d:25:d6:
a7:fa:cc:9a:66:a9:82:c4:7d:ec:78:a9:e7:5a:69:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CB:38:0A:92:DD:79:55:ED:0E:EC:59:19:F2:7B:F4:D7:94:EB:0B
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/650046748F2811EF81466773C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.32.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:23:42:f6:29:f2:47:bd:18:fe:84:16:ca:5e:b0:f1:ca:67:
b0:66:bd:76:6b:8b:74:ac:3c:ff:a5:8d:17:07:6c:05:52:9c:
9d:d2:ab:16:e7:4b:07:b5:ea:4d:10:47:0f:e4:40:d7:71:47:
b6:8d:45:60:da:17:6e:c6:e2:33:79:0b:85:6c:dc:51:47:ed:
97:a1:67:5f:18:9a:70:9c:f7:05:4c:b3:d3:c4:f3:6e:73:4d:
80:d6:e4:3f:61:a1:5c:b0:bb:6f:59:4a:20:e5:c9:a7:06:f5:
41:c4:12:e1:fb:ef:53:c1:67:b1:f8:0e:d5:68:f2:bc:1a:d0:
1e:5c:07:a3:1e:58:16:90:e3:9e:14:ee:b4:bb:bb:48:19:16:
c2:98:49:1c:48:de:4c:b2:6c:99:5f:a0:33:03:18:e3:54:49:
0b:f1:7c:60:0e:a6:99:e2:0c:66:06:bc:3f:b7:a2:5c:28:5b:
a7:b4:27:f9:18:99:a0:16:61:6d:a6:2d:7c:af:d2:05:e5:59:
f3:11:99:0f:43:eb:a4:eb:44:00:89:2e:2e:c9:91:60:f0:f6:
61:2a:0c:57:35:53:f6:43:22:fc:75:9a:c0:1c:60:77:b0:6e:
8c:fa:5f:12:b1:52:49:d9:f1:2c:b8:c4:52:5e:71:94:86:81:
a8:6e:2f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 09:11:25 2024 by rpki-client on console.sobornost.net