Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/454C750ED9D211ECA5D14025C4F9AE02.roa
File: 454C750ED9D211ECA5D14025C4F9AE02.roa (raw, json)
Hash identifier: WPi00UWExdexihUZvJVVlTCo6hBMMqrBODo/evu2MTE=
Subject key identifier: F1:63:E7:5B:5D:7A:16:CD:53:68:1E:38:4B:5E:05:5C:94:B2:E6:3C
Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Certificate serial: 0172
Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/454C750ED9D211ECA5D14025C4F9AE02.roa
Signing time: Mon 17 Apr 2023 05:25:52 +0000
ROA not before: Mon 17 Apr 2023 05:25:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137823
IP address blocks: 103.185.226.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Validity
Not Before: Apr 17 05:25:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=643cd860-0eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:02:cb:7d:01:19:e7:ef:30:38:ca:1f:0f:
e8:d4:b1:e9:25:17:ef:e3:eb:63:da:5d:21:55:2b:
e3:a9:5e:8f:47:13:d8:6e:22:35:be:fc:c4:b8:95:
3b:f2:68:86:45:b7:2e:62:d3:36:eb:cb:91:ee:f7:
fc:29:41:ed:5b:e7:bd:9e:5f:60:ac:18:8c:6d:86:
d8:b1:d6:9d:05:42:87:15:64:2c:61:de:fc:92:e6:
04:d1:3c:2d:39:ad:8e:bb:ad:ea:86:3c:84:ff:6e:
23:89:3b:90:7d:0a:34:cf:62:42:d1:fe:02:f0:46:
db:32:dc:c1:27:ef:75:bb:a4:81:b9:10:8e:60:46:
73:22:58:c3:0d:fa:d1:4a:9c:56:ac:cd:ab:ac:48:
56:77:c0:ff:80:0b:79:07:2c:ec:c7:ec:ef:7e:e1:
87:47:d0:79:fd:6f:7a:3b:02:7d:7f:f2:8e:0d:3e:
cf:d2:58:96:ad:2a:27:30:56:ca:63:eb:4a:fe:5a:
87:df:f6:a0:4b:78:79:6e:ad:03:eb:df:5b:b7:fa:
a1:5d:c1:d9:6d:14:95:13:b9:ad:14:d1:10:ab:f1:
2f:51:59:a8:a1:10:73:17:bf:39:64:ee:0e:d5:8c:
38:40:0c:f5:29:78:df:fe:b8:e0:8f:65:3e:15:c5:
c5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:63:E7:5B:5D:7A:16:CD:53:68:1E:38:4B:5E:05:5C:94:B2:E6:3C
X509v3 Authority Key Identifier:
keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/454C750ED9D211ECA5D14025C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.226.0/23
Signature Algorithm: sha256WithRSAEncryption
44:4a:d9:ea:38:98:cc:a9:d8:c6:c9:98:3d:bb:49:4f:d4:8e:
ad:a0:d3:72:d8:3b:d0:89:78:d0:68:12:b2:c3:29:1d:b3:6b:
65:bd:87:8f:cf:83:ce:6b:2f:6f:82:0d:e4:75:1e:05:0a:5f:
73:ab:e9:33:e8:52:13:58:a9:b1:e4:33:ee:46:10:a1:bb:fc:
c7:9f:0f:7d:89:ab:21:77:43:4c:65:de:32:b5:1c:78:bb:16:
cb:c7:8f:1a:a7:1f:a7:8e:e6:e1:40:c4:a2:d7:25:ab:bc:78:
30:36:53:92:0d:de:1d:d2:e5:0f:34:38:a8:0c:42:2a:60:f5:
e2:2f:ee:bf:55:92:d7:c0:a2:92:05:d4:d8:e0:1f:62:65:c9:
89:e2:79:05:4e:24:b6:95:d6:ea:fd:d6:4a:4c:7b:27:69:49:
32:3a:27:d2:b2:5e:b3:87:38:f9:f9:83:c7:86:eb:85:71:68:
45:5a:f7:e8:f7:9d:af:4b:3c:2e:4b:43:d0:87:fd:4e:cd:d3:
f7:25:ca:4c:1c:d7:0c:35:6d:25:b7:b9:f4:0a:70:f1:fe:20:
31:35:b6:33:d4:54:4d:0d:4d:7c:45:d4:72:c0:dc:f9:34:d4:
61:23:14:c3:32:b7:46:d7:60:9d:87:97:8f:29:08:6e:69:82:
ef:d5:a1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:53 2023 by rpki-client on console.sobornost.net