Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C7226A3EA80111EF8102393CC4F9AE02.roa
File: C7226A3EA80111EF8102393CC4F9AE02.roa (raw, json)
Hash identifier: 5y+4wVS2C7gX4oowe4HlKjwD7FEPq9nQX0H+1a5LSck=
Subject key identifier: 20:62:8D:C2:E4:62:87:FD:A4:C3:B7:21:CC:67:5F:62:1C:EE:34:C6
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 0206
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C7226A3EA80111EF8102393CC4F9AE02.roa
Signing time: Thu 21 Nov 2024 12:11:46 +0000
ROA not before: Thu 21 Nov 2024 12:11:46 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 212238
IP address blocks: 218.33.80.0/22 maxlen: 22
218.33.84.0/22 maxlen: 22
218.33.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 21 Jan 2025 00:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 518 (0x206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Nov 21 12:11:46 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=673f2382-dc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8d:5b:cc:c2:5c:49:ad:f2:d0:80:fc:56:63:
83:d5:5a:2d:dc:b1:f2:a8:66:9a:f4:44:7b:d7:03:
1a:cb:9a:d4:3b:2e:11:ad:49:fc:85:ce:ae:94:06:
b5:79:88:1d:87:d8:b7:4c:e6:b9:01:52:8b:ff:09:
8b:c0:e5:9c:1d:1c:f8:8b:fe:f6:a9:e7:c8:ea:be:
a1:08:d8:4d:ab:d4:80:7a:30:c7:68:d5:0c:cf:5b:
d9:7c:12:e1:0f:bb:e2:f7:f9:f1:d2:f4:6e:65:d6:
2f:21:c9:bb:80:43:67:ce:a4:9e:8e:12:6a:bd:ac:
0c:ec:b1:d9:a9:7e:61:81:8a:b4:52:6a:c1:cd:35:
9d:c9:9f:04:31:5b:d2:48:af:e8:e4:97:9e:59:7c:
36:16:70:e1:87:71:a3:c9:1a:d9:a0:d3:fc:a3:c3:
83:78:53:c9:23:88:7d:a6:05:9f:ac:5e:9a:30:37:
25:fd:fd:fa:30:05:39:22:86:91:7d:28:df:83:8c:
8b:42:ff:6a:cc:3c:58:6a:2a:06:b0:c1:81:ff:ef:
d9:24:7e:c0:7e:ff:e7:d8:93:16:9e:7c:7a:bb:1a:
0b:1e:f2:51:6a:77:68:f5:9f:94:24:76:7e:76:10:
68:11:07:43:85:40:1e:32:39:3a:1e:19:fa:d1:dd:
2f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:62:8D:C2:E4:62:87:FD:A4:C3:B7:21:CC:67:5F:62:1C:EE:34:C6
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C7226A3EA80111EF8102393CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.33.80.0-218.33.91.255
Signature Algorithm: sha256WithRSAEncryption
a3:b1:ec:78:e3:ed:12:ba:41:e9:45:3e:38:b3:09:f9:47:46:
5c:69:2b:7f:a6:18:da:12:53:2b:ce:7a:7d:20:4e:0e:b1:43:
91:64:ea:75:bf:8f:26:ec:99:6f:64:39:62:0a:18:b1:39:a3:
0e:5a:31:41:67:01:5b:a1:35:72:8b:8f:49:ef:ab:12:1b:70:
01:84:0e:6f:57:c4:4a:1e:48:e2:e7:38:66:d6:70:2b:f7:b1:
94:05:47:08:96:f5:a7:3f:ab:67:7c:8c:6b:2d:a5:ff:c1:af:
c0:60:86:91:56:c2:fb:80:32:54:f0:0d:9d:0b:83:8e:35:28:
64:af:0a:23:c7:4d:ed:4b:a8:3b:63:e7:25:34:d7:9e:bc:db:
89:e4:d5:3b:ed:ca:06:da:c2:d9:13:fc:62:c7:38:08:1c:1f:
cb:e2:b7:59:a6:9f:1a:42:2d:c8:91:66:45:c4:01:a8:ed:f9:
ab:95:76:39:31:f6:9e:15:48:01:53:1d:38:aa:a9:7d:d8:a6:
88:0a:e9:78:76:d9:99:48:53:66:41:8d:28:dd:04:69:a8:ef:
0a:9a:73:11:60:c2:e8:8b:bb:a6:36:51:7f:94:9e:22:66:93:
26:3e:17:04:eb:03:a2:3f:e0:c5:9c:71:74:76:fc:3b:c4:07:
3c:13:b7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 02:48:16 2025 by rpki-client on console.sobornost.net