Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/FF40707EDC7311ED8759C02BC4F9AE02.roa
File: FF40707EDC7311ED8759C02BC4F9AE02.roa (raw, json)
Hash identifier: CfFWVDCs/ZQR49+zTotW9WOqXudYqRd6yogT5jHzyhk=
Subject key identifier: DA:63:D7:A7:23:5C:69:D6:38:E8:02:5A:85:87:B1:94:9A:15:BC:8E
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3427
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/FF40707EDC7311ED8759C02BC4F9AE02.roa
Signing time: Sat 06 May 2023 14:50:31 +0000
ROA not before: Sat 06 May 2023 14:50:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135407
IP address blocks: 111.88.76.0/24 maxlen: 24
111.88.77.0/24 maxlen: 24
111.88.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13351 (0x3427)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: May 6 14:50:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64566937-2e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:b5:ac:09:c8:c6:ca:c1:e4:7e:69:9a:20:
4f:95:b5:d7:7b:bc:06:27:a0:e0:b8:3d:72:77:f4:
1e:59:53:3f:88:9b:a7:7c:82:0a:94:a3:8a:bd:57:
67:9a:ff:51:d7:9e:1c:36:1c:0f:d0:0a:15:b6:b8:
b2:e3:1c:7c:f2:e4:63:28:ee:99:2e:10:36:f6:32:
59:8f:81:bd:72:3a:ae:e1:2c:be:ba:9c:27:da:85:
c9:98:8b:ab:b0:d5:51:33:61:ff:24:cc:38:3a:1c:
da:78:a5:8e:e5:64:31:42:db:5b:ed:0a:d7:f1:35:
bd:15:8e:e0:70:82:d4:7b:df:a9:fb:b2:02:13:04:
c2:fd:9e:ca:48:ee:ca:a1:ac:f9:aa:18:f3:e8:6f:
89:13:c7:79:e9:b6:5f:89:f8:0f:ba:25:ad:cf:fc:
58:c1:3d:6e:57:35:e4:e3:04:67:39:d9:e1:ab:c8:
3d:a5:57:73:eb:88:38:61:31:11:c4:42:e5:37:86:
95:c1:fa:3a:78:0d:64:ca:5e:d3:27:1f:14:08:e5:
1f:ea:ad:e8:a1:1b:d3:d4:fe:7c:0d:3c:6d:79:f0:
6f:8f:30:99:3c:82:93:49:7c:90:c9:46:5b:9a:99:
ac:50:d1:de:4d:de:dc:01:4d:65:2f:41:b4:58:1c:
7a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:63:D7:A7:23:5C:69:D6:38:E8:02:5A:85:87:B1:94:9A:15:BC:8E
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/FF40707EDC7311ED8759C02BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.76.0/23
111.88.240.0/24
Signature Algorithm: sha256WithRSAEncryption
86:45:75:7f:b7:50:21:38:6a:86:28:20:be:33:a0:50:ce:a5:
81:4b:dc:63:3f:14:dd:e4:e2:9b:00:23:b0:f2:ff:94:2b:8b:
7f:2c:4f:e4:7a:f4:53:c0:69:74:4d:6e:25:aa:65:a3:ce:6c:
16:79:4b:ce:60:f2:2c:14:eb:71:88:81:ee:fa:26:1d:ed:c3:
bb:50:70:8d:80:06:af:74:3c:fa:e4:a0:a8:02:ab:08:4c:94:
0d:be:54:83:8f:01:a4:fb:3f:03:1e:ed:fd:c3:88:62:c6:d9:
8d:6e:50:3e:99:6e:e7:ec:61:bb:3e:b4:a0:ee:d6:f6:28:cf:
e6:d2:fd:4d:5c:49:0b:53:92:2b:b8:70:4f:61:47:ac:b6:bb:
78:6c:09:90:bd:d1:9a:74:80:3c:77:a3:cc:05:94:f5:e5:ef:
30:36:e8:75:f2:95:71:5f:a5:de:39:ec:ad:d7:51:0a:63:e3:
c2:2c:d1:bd:f2:68:bf:af:36:23:18:2f:b7:48:bd:a5:3d:0c:
27:12:6f:36:2a:5d:7d:9f:b7:d1:b2:15:3d:d3:c3:8f:8d:1a:
14:9c:a7:f0:6b:e3:f5:c0:5b:78:db:6b:5d:35:73:32:8b:80:
c4:dd:94:81:fe:aa:cf:ad:df:0f:7e:a5:ae:29:a6:6a:c2:56:
7a:76:fa:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:35 2023 by rpki-client on console.sobornost.net