Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/C65E43A0E82211EA95CE9974C4F9AE02.roa
File: C65E43A0E82211EA95CE9974C4F9AE02.roa (raw, json)
Hash identifier: alQbbqpdNt5oXyt2BEEtPkq5OTGiAIY0zhgfT0s0udo=
Subject key identifier: A5:E5:36:96:C3:BA:B4:B2:6D:B3:AC:93:10:5D:28:C0:05:AA:2D:D1
Certificate issuer: /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Certificate serial: 09B5
Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/C65E43A0E82211EA95CE9974C4F9AE02.roa
Signing time: Fri 12 May 2023 21:42:40 +0000
ROA not before: Fri 12 May 2023 21:42:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 202.93.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2485 (0x9b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Validity
Not Before: May 12 21:42:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645eb2d0-377e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8c:9f:d5:96:e7:69:9d:1f:73:01:b3:e4:88:
ba:00:97:7d:c0:ca:a5:0d:dd:41:b3:74:71:de:ec:
88:aa:45:d1:74:c4:26:33:ce:60:25:e0:06:b2:36:
d8:f9:a7:4d:35:fb:33:ad:60:53:73:8f:c7:02:45:
63:f6:3e:ce:01:3b:0d:eb:6a:54:08:41:ef:c7:34:
3a:df:9b:9e:d5:d7:3f:01:34:d0:42:19:20:47:32:
2e:4a:81:14:0f:96:fc:a6:db:bc:ca:4f:7c:db:53:
5a:80:00:67:31:a9:cd:54:76:71:af:77:0b:6a:22:
34:d2:df:86:05:6e:9b:2d:72:e9:2c:0c:e3:e8:24:
48:6f:81:b5:38:2d:dc:ce:ba:8d:3d:36:78:c0:19:
fd:be:a9:d5:9e:94:b6:a5:8c:0f:1d:e1:b5:c7:c1:
84:6d:df:66:eb:12:8b:92:37:c0:2b:fe:a1:58:d7:
94:97:59:75:60:db:b6:d8:6a:a6:bc:1f:ff:4f:9a:
4a:40:f1:6d:0f:fb:02:f3:3c:e0:12:45:69:dd:27:
ae:5e:ab:58:91:ad:37:85:6b:93:46:34:2d:71:8a:
fa:68:5a:51:24:9e:6f:81:08:1d:82:5f:69:1d:74:
99:19:0a:31:09:d6:86:6d:db:f1:a7:95:a3:da:3a:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E5:36:96:C3:BA:B4:B2:6D:B3:AC:93:10:5D:28:C0:05:AA:2D:D1
X509v3 Authority Key Identifier:
keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/C65E43A0E82211EA95CE9974C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.93.249.0/24
Signature Algorithm: sha256WithRSAEncryption
73:90:24:cd:47:a4:ff:81:31:51:5b:15:4a:ed:6d:a7:f8:ce:
60:34:b1:59:51:c4:8a:e0:64:87:48:98:c4:d4:88:e2:7f:35:
35:de:6d:09:93:55:e1:2b:6d:42:c3:98:b8:54:ab:9e:81:52:
37:ff:bf:ec:d7:87:40:38:42:d9:93:fd:1a:b8:8e:2d:f5:23:
1c:98:a2:d3:92:25:2e:af:73:37:b7:7c:1e:2d:20:92:d3:72:
fc:10:0d:1d:9e:65:7f:2b:90:dd:40:35:ed:c3:e5:1a:c3:0c:
ce:6e:eb:f6:46:66:5d:10:f3:f1:6b:36:b4:d7:47:ae:75:5f:
1f:74:f3:79:60:68:f7:4c:51:61:30:4c:7b:2a:c4:c3:12:06:
21:ee:12:31:02:9c:f9:f3:d2:14:4c:12:ed:23:71:0d:6e:e1:
38:ed:41:4c:cf:fb:5f:84:ad:a2:6e:5f:4c:ff:00:b4:d3:f5:
b0:76:3f:04:a9:dc:f2:b5:87:af:51:ef:2c:09:27:f4:ea:75:
7d:bc:35:33:3f:b6:b5:77:03:b1:5c:8e:84:64:5a:1d:c6:19:
c9:ea:95:3d:5b:00:08:d9:b0:66:52:f9:fd:cb:25:28:f0:52:
6a:dc:34:d2:bd:f8:3d:5b:4c:ef:0d:cd:70:2c:ca:15:e9:63:
91:54:16:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:58 2023 by rpki-client on console.sobornost.net