Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/B840A7FA75D011EFA971985EC4F9AE02.roa
File: B840A7FA75D011EFA971985EC4F9AE02.roa (raw, json)
Hash identifier: wSXJqr/zkvVkc/eXCfA26CPDllbxy2jJvozTj+kJAns=
Subject key identifier: 28:2B:AE:C5:1E:AD:D4:6C:47:82:13:E2:76:DE:98:EE:22:15:2C:4B
Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial: 1C5F
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/B840A7FA75D011EFA971985EC4F9AE02.roa
Signing time: Mon 30 Sep 2024 16:24:14 +0000
ROA not before: Mon 30 Sep 2024 16:24:14 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 131471
IP address blocks: 115.42.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 18:20:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7263 (0x1c5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Validity
Not Before: Sep 30 16:24:14 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66fad0ad-fbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:d1:1c:a6:ae:dd:dd:49:b3:8d:9e:5c:22:
93:ed:ca:bd:0e:67:c2:23:a4:84:9f:43:65:c6:59:
a7:37:ce:32:44:18:5e:08:77:3c:ef:7a:4c:5b:04:
61:e6:20:00:e7:bf:a5:b6:89:29:2e:5a:5f:82:72:
29:56:27:40:d6:16:08:8c:5f:6b:55:35:85:2c:5e:
85:d1:a1:07:5b:5c:0d:92:60:ac:84:36:26:92:c3:
55:25:14:4b:bb:94:f6:e1:1b:0a:52:ef:a6:85:e8:
9c:fc:3e:12:43:b9:88:7e:a6:56:1f:50:9c:59:db:
94:f8:6c:5b:06:4c:98:46:9a:25:6f:64:5f:eb:20:
82:79:78:d1:76:9e:a2:72:07:af:a5:51:4a:5e:5d:
4c:42:ce:ed:a1:89:3a:54:03:da:57:9e:f5:cb:b0:
ee:64:51:59:ce:08:01:fa:63:d1:b4:cd:fc:a0:22:
e7:45:a8:34:bc:62:77:0f:e5:4c:dc:e4:cd:c2:09:
99:9c:e1:18:6e:a8:68:04:3c:49:fc:8c:fa:d4:b3:
8c:5d:82:29:cb:14:44:a9:0a:e5:0a:dc:0c:9a:49:
40:80:ce:3a:dd:6a:6c:9b:fb:92:e9:9f:61:fe:b5:
ec:8e:e6:17:03:8a:14:4c:5f:78:32:b4:6b:00:26:
d7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2B:AE:C5:1E:AD:D4:6C:47:82:13:E2:76:DE:98:EE:22:15:2C:4B
X509v3 Authority Key Identifier:
keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/B840A7FA75D011EFA971985EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.42.69.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:53:cc:72:8a:19:7e:a2:8a:7c:50:0f:36:d0:8b:d2:8b:30:
97:20:db:ed:67:7a:e7:e1:3d:d9:d4:dc:9b:c2:7e:b2:67:71:
4e:57:93:f9:a5:31:c4:68:1b:68:2b:22:0b:35:be:50:a2:e4:
55:4f:f5:87:30:d9:59:f1:e0:50:bb:e9:cd:9b:bd:57:65:15:
22:be:85:df:44:db:72:eb:d1:3d:10:76:d9:8a:47:8d:bf:42:
2a:c7:5a:72:fa:cd:85:35:1f:8c:8a:ad:53:8a:32:7f:23:ed:
7d:bb:71:4f:43:f5:29:61:9d:69:b3:f9:a0:3a:85:ce:6e:0b:
7e:9f:10:5f:84:83:7c:b4:09:1c:aa:b8:50:41:df:82:31:7c:
6c:76:eb:d0:9f:5d:ac:92:09:eb:c6:96:0a:4d:94:34:0e:61:
bc:e6:13:9c:b0:ee:79:e6:0f:c6:0d:59:b6:14:46:eb:ac:91:
f8:30:6a:02:a0:b0:92:20:a8:88:7c:c0:76:ba:93:40:63:ee:
e6:86:84:e6:03:35:82:2d:35:08:54:ff:02:1b:8e:43:9f:60:
81:6e:27:23:a4:cd:b4:92:61:77:00:8c:9f:4a:f8:dd:12:f7:
9d:86:15:fc:12:db:51:67:cd:81:20:1e:22:a4:03:73:2c:13:
d6:5d:3d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 20:35:29 2024 by rpki-client on console.sobornost.net