Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/B6388AE4A63211EA859D741CC4F9AE02.roa
File: B6388AE4A63211EA859D741CC4F9AE02.roa (raw, json)
Hash identifier: 0zMs4TrvOeAZw4FnQrL9aF0rlkN8GOvt/hCzVoYK6kw=
Subject key identifier: 70:41:4B:3C:B0:2A:C0:18:32:81:90:96:A0:98:D2:92:E7:39:29:08
Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
Certificate serial: 16A7
Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/B6388AE4A63211EA859D741CC4F9AE02.roa
Signing time: Fri 19 May 2023 10:42:26 +0000
ROA not before: Fri 19 May 2023 10:42:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9287
IP address blocks: 45.125.128.0/22 maxlen: 22
45.125.128.0/24 maxlen: 24
45.125.129.0/24 maxlen: 24
45.125.130.0/24 maxlen: 24
45.125.131.0/24 maxlen: 24
45.252.52.0/24 maxlen: 24
103.55.1.0/24 maxlen: 24
103.55.2.0/24 maxlen: 24
103.76.196.0/22 maxlen: 22
103.76.196.0/24 maxlen: 24
103.76.197.0/24 maxlen: 24
103.76.198.0/24 maxlen: 24
103.76.199.0/24 maxlen: 24
2404:3280::/32 maxlen: 32
2404:3280:1::/48 maxlen: 48
2404:3280:a::/48 maxlen: 48
2404:3280:c::/48 maxlen: 48
2404:3280:f::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5799 (0x16a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
Validity
Not Before: May 19 10:42:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64675292-3e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:12:b6:61:15:57:10:26:f1:dd:73:52:80:1f:
bf:96:02:83:c8:65:6d:27:72:08:a1:a1:71:a1:0a:
3f:37:86:ed:13:7f:6e:33:85:f3:47:b9:77:3c:ce:
f8:57:8f:df:dc:4f:2c:82:c5:c1:83:09:3a:ae:04:
97:b7:93:bb:97:cf:e5:46:80:87:c0:30:46:97:87:
2c:46:c5:cc:ea:1f:7e:64:87:52:59:d1:9d:d2:d1:
68:f7:99:9c:b2:4e:69:19:6d:37:87:d1:51:80:2a:
29:55:f9:cf:6c:fb:67:8a:6f:4d:24:ee:8f:85:8e:
2d:06:10:02:c5:a5:89:df:22:70:32:be:13:c2:ea:
2f:ac:83:f6:19:e7:7b:18:aa:6c:81:28:d9:5f:9b:
72:71:14:01:fe:0b:75:6e:b4:34:0e:30:26:90:23:
04:31:14:c5:8c:58:65:a4:77:5e:b7:00:c2:19:bb:
2c:ee:fa:66:2d:5f:9c:e2:42:22:13:a2:35:a8:17:
2f:c3:f1:d2:b1:b6:74:b5:4e:03:de:69:3a:ca:e4:
83:3c:a7:f8:54:8b:11:6b:00:a0:22:a7:c6:9c:45:
24:02:17:24:fe:cb:c5:4e:37:13:61:82:ee:5d:25:
d7:5c:1c:b3:7b:ba:de:0f:dc:7b:88:43:ae:81:b0:
c3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:41:4B:3C:B0:2A:C0:18:32:81:90:96:A0:98:D2:92:E7:39:29:08
X509v3 Authority Key Identifier:
keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/B6388AE4A63211EA859D741CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.128.0/22
45.252.52.0/24
103.55.1.0-103.55.2.255
103.76.196.0/22
IPv6:
2404:3280::/32
Signature Algorithm: sha256WithRSAEncryption
06:33:5e:f7:52:d9:95:51:60:5d:e6:87:a1:27:90:82:84:e2:
a7:d6:8d:56:d5:3e:b7:ed:0a:16:51:f4:86:5e:02:51:a4:0d:
46:6d:bc:35:d6:f3:0e:d1:5b:b6:eb:01:47:07:7e:aa:1b:6c:
6c:b6:ba:df:b6:6b:65:02:c2:26:6d:08:ef:9c:9a:21:e1:03:
6d:10:b9:cb:09:fc:6b:4c:84:f8:86:5e:02:d2:79:bc:ac:a7:
3e:70:47:0d:5d:a5:4b:8f:bf:85:01:c5:ce:73:a2:69:9a:fd:
05:c1:37:92:a2:7e:73:db:2c:1e:b0:ce:56:3a:87:09:e6:5d:
93:0e:11:be:f9:f3:b1:fa:b4:a2:5f:2d:a7:9e:bf:81:5b:a2:
81:cb:38:52:1e:7f:c0:68:1d:1f:89:fb:d0:15:6b:8e:50:1b:
60:cf:18:70:59:d7:a4:f3:1a:ec:8c:f5:6a:e5:c6:17:df:c4:
73:f2:ad:6a:f7:66:17:49:5e:bc:85:ad:56:e3:00:30:58:06:
31:b5:53:e6:af:55:93:c4:3b:37:0a:57:32:bf:2b:a5:d6:62:
97:d6:dd:34:1c:34:d0:db:f5:17:9f:b3:8b:2a:75:a9:15:e3:
e9:a7:73:21:02:2e:29:1c:e8:cb:97:0b:9b:0a:1a:1c:47:ca:
7d:40:52:27
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:47 2023 by rpki-client on console.sobornost.net