Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/7F5D0764906911EEBB2B0A26C4F9AE02.roa
File: 7F5D0764906911EEBB2B0A26C4F9AE02.roa (raw, json)
Hash identifier: yUlVoKACo4sfhlCjkW8yIIv49Rj793X0cFqH4ynfGyE=
Subject key identifier: 80:B9:74:D1:A3:58:A7:E9:E6:CA:73:BA:25:00:08:92:57:84:74:C7
Certificate issuer: /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
Certificate serial: 04
Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/7F5D0764906911EEBB2B0A26C4F9AE02.roa
Signing time: Fri 01 Dec 2023 16:55:45 +0000
ROA not before: Fri 01 Dec 2023 16:55:45 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 152176
IP address blocks: 210.87.64.0/23 maxlen: 23
2001:df3:3d40::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
Validity
Not Before: Dec 1 16:55:45 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=656a1011-8b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:35:78:2d:22:b1:04:9d:3d:24:05:ed:b9:
5d:cc:37:1a:25:ac:69:d1:49:1f:d4:17:55:fa:09:
b5:fc:90:11:34:2a:f2:16:47:2d:e7:3e:3b:d8:22:
53:dc:ef:48:ce:54:5e:29:3f:7a:02:31:96:10:e2:
24:58:8f:44:ea:f4:34:a8:61:6b:be:ca:55:81:63:
f5:45:3d:d7:13:f2:7b:55:f5:35:5a:bd:71:c3:dc:
27:48:76:2b:1b:d9:c3:5e:76:5a:4c:ff:fd:51:db:
10:bf:ea:28:b4:cb:6b:8d:54:b0:bd:1d:a3:0f:35:
49:26:6f:50:67:46:79:18:46:8a:2a:52:b6:32:34:
2e:a9:96:eb:fe:e2:f8:57:67:80:b5:7c:20:7c:d8:
33:01:ca:39:ee:61:e0:69:43:7d:7b:81:4a:1b:b1:
a0:fe:50:a0:62:fe:6a:07:2e:84:be:c2:5f:ab:f6:
cf:d3:2c:ec:20:69:a8:1c:08:b2:2d:ac:1b:d2:11:
94:b5:00:6c:d8:4c:91:a2:99:ef:77:35:b2:1d:32:
ce:eb:3f:60:b6:8c:bf:66:7f:e4:7d:d5:8d:f4:b4:
da:01:06:ad:bf:11:dc:3f:c9:b0:ca:33:63:38:d4:
d9:dd:b3:62:bf:f7:66:bf:b4:70:0f:13:25:43:fd:
0e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B9:74:D1:A3:58:A7:E9:E6:CA:73:BA:25:00:08:92:57:84:74:C7
X509v3 Authority Key Identifier:
keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/7F5D0764906911EEBB2B0A26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.87.64.0/23
IPv6:
2001:df3:3d40::/48
Signature Algorithm: sha256WithRSAEncryption
69:0b:36:6b:4f:7f:64:a0:13:b2:14:95:17:d9:57:02:10:11:
6c:3e:f5:9c:13:13:75:45:09:b4:d7:e9:8a:5f:28:f8:70:04:
f3:2f:cb:5f:0b:28:20:3a:a7:2d:b7:ba:61:9c:56:f4:56:ed:
e0:18:08:0c:ab:a4:84:42:22:d9:fa:e7:3a:37:ef:12:c1:fc:
83:90:ad:00:9c:6f:fc:2c:0d:5d:21:0f:7e:09:13:e8:e2:30:
16:31:b9:c5:ac:7a:af:cd:d2:fa:55:8f:d2:b1:eb:9a:21:94:
36:af:48:49:5f:33:7d:46:cd:8a:d3:32:ca:f3:34:e9:f7:5b:
ba:5a:fb:3d:2b:2f:a9:51:fc:61:01:48:d4:d8:dd:68:4f:bf:
0f:60:73:76:f3:f1:b4:db:b4:c8:be:24:a7:96:0d:96:2f:24:
f8:59:d3:d9:85:b6:fd:5a:7b:fd:4d:27:22:b0:86:89:5f:8b:
b4:33:a4:26:87:b7:8c:6c:e9:fd:02:0d:1c:8c:44:dd:71:2b:
7c:b9:a4:62:4e:70:2a:48:00:da:a4:00:aa:aa:10:4e:48:09:
8f:d9:cc:9b:af:bb:49:d1:9c:32:ae:7d:13:56:66:7b:1b:6a:
c2:63:cd:21:33:11:50:8b:7c:ed:a4:1c:5e:43:80:c3:0b:80:
ea:65:4f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:27 2023 by rpki-client on console.sobornost.net