Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/5B068E72B0DB11EC87206C69C4F9AE02.roa
File: 5B068E72B0DB11EC87206C69C4F9AE02.roa (raw, json)
Hash identifier: XXDPvpimNgU4caGA5He8DFGDT0v2xabbxiHo6CpeClg=
Subject key identifier: 7C:A8:44:40:09:7C:C9:CA:70:4C:F2:63:F2:DF:29:41:6D:B4:F1:76
Certificate issuer: /CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C
Certificate serial: 0221
Authority key identifier: F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/5B068E72B0DB11EC87206C69C4F9AE02.roa
Signing time: Sat 13 May 2023 05:23:28 +0000
ROA not before: Sat 13 May 2023 05:23:28 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 136461
IP address blocks: 103.183.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C
Validity
Not Before: May 13 05:23:28 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=645f1ecf-b78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:63:56:a8:67:df:64:a1:1b:5d:16:7e:d9:
f2:48:52:ac:b1:90:e3:eb:db:0b:dd:dd:bd:90:bb:
d4:e1:bb:ee:c0:f5:df:94:89:b3:37:b9:aa:07:9c:
36:d8:62:05:48:d8:f4:8c:3b:98:5e:92:91:5a:cc:
ec:df:58:75:76:74:06:cc:8e:06:ec:72:13:50:3e:
97:c9:94:01:d1:48:e5:b1:d9:77:d8:7d:43:4d:90:
a1:26:20:86:ba:34:2d:44:3c:ab:ef:7b:d0:4e:e5:
52:18:e6:ff:1e:29:e6:a4:e0:85:3b:50:d3:92:76:
02:67:10:64:0e:d2:43:25:8b:32:a4:6e:00:3d:1d:
c8:48:4e:f3:47:85:c3:78:a1:03:33:8f:c2:cb:1c:
c0:bd:e2:bf:f8:0c:7e:d5:8f:81:39:4a:8b:95:e2:
46:8e:e5:58:ee:8b:21:c7:f7:b0:c1:00:7a:2b:2a:
26:91:19:d3:b3:09:9f:c2:59:06:a1:e5:f2:6a:04:
51:00:f7:71:d7:09:5b:05:ad:b4:7b:07:ba:bc:69:
02:b4:a1:fa:88:4e:b3:b3:03:62:43:9d:99:e3:c2:
48:b5:68:5b:10:f2:dc:42:f1:ee:3e:dd:eb:de:d9:
57:28:53:93:24:8e:b8:e4:97:f1:13:49:50:1e:3c:
75:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A8:44:40:09:7C:C9:CA:70:4C:F2:63:F2:DF:29:41:6D:B4:F1:76
X509v3 Authority Key Identifier:
keyid:F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/5B068E72B0DB11EC87206C69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ca:5a:6f:de:d1:03:eb:a0:09:62:f7:09:66:a2:64:3d:6f:
8d:e0:b6:e9:71:3e:5f:47:1e:f4:60:41:ff:bf:9b:b8:3a:88:
99:38:34:98:1d:22:d8:f2:ba:29:f9:59:70:9c:de:22:e4:5b:
b4:1a:66:1e:c2:b6:53:82:7b:c3:19:d0:22:79:e5:8b:80:3b:
8f:f2:1d:af:69:7b:bb:af:56:c4:9c:56:4f:a5:b7:18:09:63:
cd:44:e2:18:27:df:e2:b8:87:9c:33:34:7d:ef:a1:c0:39:8e:
41:f4:e5:e3:c8:56:48:cd:b7:bd:09:7c:83:79:fe:8e:11:b5:
e0:af:42:a4:df:7b:bf:62:bc:f4:96:ed:ce:9a:05:a9:6d:84:
1d:84:c1:58:e2:50:32:6a:9d:77:29:0c:89:5a:44:b6:fc:2e:
d6:45:ac:00:2f:3b:3e:16:90:47:4b:8d:ea:9f:40:cf:2c:56:
9a:20:f1:91:1c:fa:2a:3c:9c:83:07:7d:55:29:4b:d6:7b:42:
24:8c:42:86:ca:02:48:f0:68:f3:72:d4:c4:54:43:db:01:62:
20:5f:a0:08:0b:ee:c5:5d:b3:fe:ec:4b:4e:c5:ac:38:73:12:
77:95:a3:00:bb:83:7b:6f:37:21:47:9c:fc:a6:da:65:38:e1:
c3:f8:03:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:40 2023 by rpki-client on console.sobornost.net