Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/23971C7A171B11EEA0A4F04FC4F9AE02.roa
File: 23971C7A171B11EEA0A4F04FC4F9AE02.roa (raw, json)
Hash identifier: nOWkak5y1cFgE2x6BK9UFjkDqAiGtLIjeiZeXM8Nl+4=
Subject key identifier: DD:8A:4D:87:66:DB:0C:E5:82:16:94:F1:87:2B:F5:E4:36:24:FC:72
Certificate issuer: /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Certificate serial: DC
Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/23971C7A171B11EEA0A4F04FC4F9AE02.roa
Signing time: Fri 30 Jun 2023 07:53:03 +0000
ROA not before: Fri 30 Jun 2023 07:53:03 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 60021
IP address blocks: 125.62.68.0/24 maxlen: 24
125.62.69.0/24 maxlen: 24
125.62.70.0/24 maxlen: 24
125.62.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 05:37:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Validity
Not Before: Jun 30 07:53:03 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=649e89de-48d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:e7:b9:f7:54:1b:3a:52:67:a2:6d:47:8b:
11:08:37:42:45:d9:0e:99:e0:90:a2:95:78:29:96:
42:cc:df:e2:92:86:08:e4:2c:5c:13:ed:c4:d1:2f:
5d:60:93:b2:99:58:b1:fb:41:2b:21:06:bd:2c:7b:
0d:42:c1:c3:76:93:0a:d0:c4:69:ae:2c:cb:73:91:
bb:07:33:f9:13:8e:ce:67:68:2d:09:fd:a7:23:b4:
48:1f:64:ad:69:1f:98:78:2b:ce:42:4e:72:6f:b3:
d2:f5:62:a8:63:37:73:f6:78:71:26:29:f8:f0:8c:
02:84:68:64:90:98:12:9a:bc:6e:05:7c:04:1a:8c:
02:fd:2e:ba:42:bf:15:4a:b2:5d:51:98:9b:09:8c:
b9:f6:4c:e7:19:0f:30:be:cd:24:2f:2c:ff:f9:24:
4e:23:12:fb:b3:b3:ac:af:a8:b3:7b:c4:45:1b:25:
f9:f3:3d:90:8a:70:00:3d:66:b5:08:8e:ce:4a:97:
ff:c2:45:62:a8:05:73:2b:8f:d8:81:e4:6b:be:b2:
9f:00:b9:c3:ce:b8:51:84:14:24:0f:a9:05:b2:fb:
7b:de:52:e8:a3:4f:91:9f:94:a1:18:7d:96:23:ce:
4c:74:d4:e6:91:07:6c:50:23:44:53:b2:01:1d:5e:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8A:4D:87:66:DB:0C:E5:82:16:94:F1:87:2B:F5:E4:36:24:FC:72
X509v3 Authority Key Identifier:
keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/23971C7A171B11EEA0A4F04FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.62.68.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:1c:d4:63:44:80:84:9c:b9:83:13:eb:82:40:5c:a2:b4:2d:
e1:88:fa:62:64:ef:75:37:8e:c4:46:1a:84:e4:56:64:20:29:
e0:d6:a5:e9:b8:e4:3a:02:41:58:20:b5:8a:df:80:a4:94:9f:
35:4a:07:e9:88:46:21:f6:22:bb:62:48:bf:3f:f4:1c:e8:bb:
15:85:08:63:62:05:d2:da:fc:aa:21:f6:5e:fc:fa:23:09:2d:
1e:31:8d:f1:bc:01:75:c8:0f:a3:e0:1d:30:4f:42:86:1e:9e:
6f:0a:10:75:b1:f9:86:91:b3:84:2d:f5:f2:2a:67:9e:29:fc:
64:f6:f9:17:92:b7:15:eb:0a:35:af:05:92:16:07:e5:5e:9d:
8a:6e:1e:f0:d3:e9:2d:58:6d:69:68:50:a5:ce:e1:fd:32:20:
be:81:b0:8c:99:a6:30:c0:91:06:ba:47:45:73:fc:b7:86:84:
72:3c:fc:87:e9:d9:09:8b:9c:1e:6a:0f:5b:f1:1f:1e:bc:89:
22:cd:2c:f4:e4:bb:f0:fc:00:e1:e6:56:ac:6e:70:97:d6:dd:
2b:31:dc:f3:ff:eb:01:72:ea:51:f3:e0:09:4b:9b:9b:5c:9e:
85:09:da:51:76:1e:f0:99:d1:82:16:2a:ae:03:dd:4e:f4:c5:
d2:1f:41:a8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjMyRDcxMTAvBgNVBAUTKDRFMDczNzg2NjdFQzc5RDUzRDY1MEU1MjREMUU4Rjk4
QjA4QzI4RTEwHhcNMjMwNjMwMDc1MzAzWhcNMjQwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDllODlkZS00OGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx1HnufdUGzpSZ6JtR4sRCDdCRdkOmeCQopV4KZZCzN/ikoYI5CxcE+3E0S9d
YJOymVix+0ErIQa9LHsNQsHDdpMK0MRprizLc5G7BzP5E47OZ2gtCf2nI7RIH2St
aR+YeCvOQk5yb7PS9WKoYzdz9nhxJin48IwChGhkkJgSmrxuBXwEGowC/S66Qr8V
SrJdUZibCYy59kznGQ8wvs0kLyz/+SROIxL7s7Osr6ize8RFGyX58z2QinAAPWa1
CI7OSpf/wkViqAVzK4/YgeRrvrKfALnDzrhRhBQkD6kFsvt73lLoo0+Rn5ShGH2W
I85MdNTmkQdsUCNEU7IBHV7qNwIDAQABo4IClTCCApEwHQYDVR0OBBYEFN2KTYdm
2wzlghaU8Ycr9eQ2JPxyMB8GA1UdIwQYMBaAFE4HN4Zn7HnVPWUOUk0ej5iwjCjh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzJENy9GOTc5NTlDMjI0
MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2VkVTlaUTVTVFI2UG1MQ01L
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RnYzNobWZzZWRVOVpRNVNUUjZQbUxDTUtPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjMyRDcvRjk3OTU5QzIyNDE3MTFFRDlDMEM3MDBEQzRGOUFFMDIvMjM5NzFDN0Ex
NzFCMTFFRUEwQTRGMDRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJ9PkQwDQYJKoZIhvcNAQELBQADggEBADoc1GNEgIScuYMT
64JAXKK0LeGI+mJk73U3jsRGGoTkVmQgKeDWpem45DoCQVggtYrfgKSUnzVKB+mI
RiH2IrtiSL8/9BzouxWFCGNiBdLa/Koh9l78+iMJLR4xjfG8AXXID6PgHTBPQoYe
nm8KEHWx+YaRs4Qt9fIqZ54p/GT2+ReStxXrCjWvBZIWB+VenYpuHvDT6S1YbWlo
UKXO4f0yIL6BsIyZpjDAkQa6R0Vz/LeGhHI8/Ifp2QmLnB5qD1vxHx68iSLNLPTk
u/D8AOHmVqxucJfW3Ssx3PP/6wFy6lHz4AlLm5tcnoUJ2lF2HvCZ0YIWKq4D3U70
xdIfQag=
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:01 2024 by rpki-client on console.sobornost.net