Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/DBA96446D19E11EF9C42D05BC4F9AE02.roa
File: DBA96446D19E11EF9C42D05BC4F9AE02.roa (raw, json)
Hash identifier: oJC0qD3oUn3lBSjTr8PaHiSEKmJBAGkfxMqgmAkpdc8=
Subject key identifier: 83:5E:1B:26:D0:2A:2C:3C:1B:A4:0F:ED:CA:9F:D5:F3:75:2D:ED:68
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 0245
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/DBA96446D19E11EF9C42D05BC4F9AE02.roa
Signing time: Mon 13 Jan 2025 11:09:29 +0000
ROA not before: Mon 13 Jan 2025 11:09:29 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 218.33.104.0/22 maxlen: 24
218.33.108.0/22 maxlen: 24
218.33.112.0/22 maxlen: 24
218.33.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 14:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Jan 13 11:09:29 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=6784f469-0d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:5f:5b:b9:9e:3c:9b:e7:c5:e2:97:77:d6:
00:96:0a:6c:65:61:56:d4:95:78:87:b0:09:66:c1:
ae:ee:72:a2:5f:f4:51:91:d1:4d:58:4c:d8:9e:a1:
06:04:d7:cf:ec:23:82:41:f6:01:4f:37:ea:81:0c:
d3:20:1b:45:15:10:37:24:17:b9:e4:56:dc:39:68:
55:89:fb:1d:e0:c9:e3:bf:73:12:4f:a1:e3:65:fa:
52:ad:99:66:52:a9:93:ca:55:3c:ae:46:ad:7e:d0:
6e:91:ce:98:01:3e:f8:2c:a8:71:d2:02:45:a7:1c:
5f:60:e3:50:76:12:fb:6e:5f:19:17:36:98:0f:80:
9d:ae:de:e4:23:06:36:b6:eb:67:d1:b3:cc:6d:b5:
b9:ab:0f:28:f0:09:0c:30:94:25:bf:10:11:80:c6:
a4:71:88:15:01:14:94:0c:cd:8a:42:59:db:54:1d:
66:f6:57:a5:3e:18:20:d7:69:62:05:00:e0:cb:a1:
87:3f:5e:85:48:e2:dc:1b:7e:82:84:19:a5:0d:b9:
07:f1:3a:8e:cf:73:3f:87:e1:1a:69:6a:55:ca:76:
81:91:d6:0f:0c:37:15:53:77:82:75:c7:86:4f:e6:
3a:36:c5:8a:88:78:e6:c5:b9:49:f4:c1:ce:a0:06:
71:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5E:1B:26:D0:2A:2C:3C:1B:A4:0F:ED:CA:9F:D5:F3:75:2D:ED:68
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/DBA96446D19E11EF9C42D05BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.33.104.0-218.33.119.255
Signature Algorithm: sha256WithRSAEncryption
a8:bf:d8:16:68:9c:0d:81:15:35:6a:a1:b9:63:3b:1f:4d:68:
53:b8:70:96:4b:81:9e:ed:af:2c:1e:6c:40:01:de:e2:3b:40:
c8:f9:bf:d4:fc:fd:19:24:72:38:e9:e7:47:c1:e7:b6:17:be:
1d:9e:11:2a:03:de:ec:02:33:e1:a1:d3:85:2d:ff:95:55:30:
e1:3b:59:7d:ab:3c:02:10:dc:0a:ad:3e:64:86:ac:95:4e:a3:
23:4a:11:66:88:86:ce:78:e5:5f:cc:99:a6:83:b1:89:83:7c:
17:5a:99:83:aa:bc:43:04:47:53:11:fb:cd:b4:d2:fa:5e:88:
b0:b1:be:00:36:3d:6c:a4:36:c8:dc:c1:3d:c0:a6:d2:68:db:
1e:95:1b:4a:c6:1f:41:60:7b:7b:a0:00:72:11:70:83:e6:3f:
78:91:03:78:d2:7a:e7:37:90:55:a3:83:22:d8:0a:06:8d:2e:
d9:b9:fc:db:64:f6:a9:2a:72:9b:5e:3a:f4:47:a4:4e:2c:84:
3e:d3:28:04:7b:c2:f4:a9:4a:ac:36:86:f3:ed:e6:3d:3c:50:
f1:4d:1c:4c:cc:dc:2b:21:37:18:e7:a8:77:1f:2e:5a:54:92:
6a:eb:51:8f:4e:3c:3e:ac:03:72:b9:4b:b3:9f:43:28:98:36:
f2:79:cb:8c
-----BEGIN CERTIFICATE-----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Generated at Tue Jan 14 17:02:55 2025 by rpki-client on console.sobornost.net