Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/C592F7FEE82211EA95CE9974C4F9AE02.roa
File: C592F7FEE82211EA95CE9974C4F9AE02.roa (raw, json)
Hash identifier: r16niF0h4Zswr3wHxLydr6Aas9uxGe4ymyaoBoV8WY8=
Subject key identifier: 34:A0:43:0D:7E:E9:B9:B6:35:03:2A:15:51:88:DF:D1:00:81:CC:07
Certificate issuer: /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Certificate serial: 09B4
Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/C592F7FEE82211EA95CE9974C4F9AE02.roa
Signing time: Fri 12 May 2023 21:42:39 +0000
ROA not before: Fri 12 May 2023 21:42:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 202.93.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2484 (0x9b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Validity
Not Before: May 12 21:42:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645eb2cf-4b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:17:0f:4d:0c:cd:f3:2d:d3:fb:c3:00:6e:
94:35:de:83:cb:94:75:49:ce:57:0b:4e:46:9a:87:
d2:87:e8:7d:29:93:e8:71:4e:e1:1d:0d:a1:f5:79:
07:db:c5:6d:81:6a:1e:de:b9:e6:86:34:ae:64:d3:
ef:35:75:63:a0:1f:fb:0a:42:6f:a1:cf:88:29:c1:
57:78:00:b5:24:d8:28:b8:dc:27:79:72:e0:ea:be:
e7:de:f0:d2:65:e8:00:88:e4:a2:2d:be:66:15:9b:
70:15:25:bc:5c:13:f1:a2:fe:ef:bc:c6:98:85:5c:
5b:7e:3d:3c:04:0a:70:78:fa:6a:8f:fa:ea:e3:f1:
e7:33:3c:42:b7:eb:11:fe:3e:96:2c:c7:78:9a:7d:
22:fe:e9:10:1c:4b:b4:1a:69:14:9d:8c:b2:0f:c7:
2f:3a:a9:a5:22:9d:f4:4d:de:77:cf:eb:d1:31:54:
5a:b1:aa:d4:f3:ef:b0:bf:e2:c8:8b:2c:bb:6b:8e:
e6:16:3b:38:db:2f:00:1e:c1:7c:83:a0:25:dc:75:
5d:32:0d:cd:b7:b7:1f:53:d4:00:fe:e9:c4:a6:4f:
f2:ef:c6:5c:a5:37:17:3f:d0:2a:46:f9:f8:66:11:
66:d5:82:d5:24:14:6d:ff:99:df:de:b9:94:00:eb:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A0:43:0D:7E:E9:B9:B6:35:03:2A:15:51:88:DF:D1:00:81:CC:07
X509v3 Authority Key Identifier:
keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/C592F7FEE82211EA95CE9974C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.93.249.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:51:80:e0:4e:dd:18:a9:96:27:ee:d5:fe:e5:c7:53:27:dc:
6a:e8:1f:f2:9f:90:86:6b:6f:e6:ff:66:03:d6:7d:ac:6f:c0:
3e:5b:f9:2c:a5:5b:71:17:76:17:47:e4:ea:0a:2b:93:37:0d:
20:f6:72:81:53:81:8d:9f:d2:81:43:08:67:8a:a5:ed:61:66:
04:fc:49:e8:dc:76:00:0b:f4:b6:a9:83:53:fc:78:8b:84:63:
bd:44:71:7a:2f:97:1c:79:bb:5b:23:1f:3b:70:e2:3e:e8:b4:
de:43:45:5b:aa:26:d9:f6:02:c4:e5:66:69:6b:df:92:01:37:
7a:80:32:d0:8f:d1:68:ab:7f:2e:9e:9e:1c:07:ee:29:50:d2:
3a:9f:8d:58:0d:12:1b:d2:f6:6f:b9:cb:57:d3:ea:e5:68:89:
7c:f1:8b:7a:c1:15:c8:83:bf:fb:b5:f7:9c:d2:55:14:7a:43:
bc:01:fc:8e:cb:43:25:1e:87:f1:8a:88:09:69:13:ee:ac:50:
94:d9:1f:f7:3a:94:aa:95:3b:8f:56:82:14:5c:1a:bb:b0:6c:
c5:b8:30:fa:73:eb:2d:8f:8a:bb:ea:51:c5:b8:f0:23:48:2a:
bb:be:34:ad:f8:ca:ec:27:32:3c:e7:73:f5:4c:6f:9a:6b:1a:
85:43:d7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:58 2023 by rpki-client on console.sobornost.net