Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/37BBAF34296011EEA8C6E645C4F9AE02.roa
File: 37BBAF34296011EEA8C6E645C4F9AE02.roa (raw, json)
Hash identifier: o5LKsxEXgehoHTg8rToAd0d01ZshLkyKqdsYjoFmvYQ=
Subject key identifier: FC:6D:EC:BE:CD:EB:4B:AD:B3:A1:24:3C:00:BA:0D:7F:57:0D:22:87
Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Certificate serial: 04
Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/37BBAF34296011EEA8C6E645C4F9AE02.roa
Signing time: Sun 23 Jul 2023 13:52:53 +0000
ROA not before: Sun 23 Jul 2023 13:52:53 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 133480
IP address blocks: 103.115.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Validity
Not Before: Jul 23 13:52:53 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64bd30b4-48f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:5b:55:4b:c2:3a:de:f3:15:24:ad:36:f5:
0a:f3:8c:1c:cc:82:f3:c0:b0:13:4d:02:c7:f7:27:
71:97:87:c4:da:c8:a0:6f:9b:34:31:19:04:cb:16:
9a:31:c1:38:00:c4:37:84:30:6e:05:dd:95:3b:a0:
e3:6f:32:e5:ac:d7:78:4f:f2:fc:dd:37:56:2a:c3:
8a:4d:b8:93:f8:d0:cf:9f:3d:ff:43:fb:ba:b2:e8:
ba:25:de:4c:6f:39:10:ef:22:38:65:dd:dd:87:64:
f7:95:aa:fe:d3:49:c7:fb:2f:f6:ec:e8:5b:a4:b6:
e2:6c:f9:45:3b:c8:17:5a:66:1d:08:52:d6:06:c6:
e6:c5:11:aa:5d:23:57:21:ce:a5:ee:52:cf:62:93:
99:da:ea:b9:e8:a2:d6:d9:85:81:73:8c:e7:2e:ab:
e6:8c:7c:ff:de:34:65:50:fb:ec:53:5e:30:70:bf:
88:12:ab:35:53:73:17:33:75:21:34:bc:00:60:41:
69:1d:e0:1c:1c:a1:d3:c5:4e:00:c7:ce:0b:9b:ac:
06:3f:e5:62:98:54:0b:e4:9a:8c:4a:c0:af:31:ae:
60:65:8a:19:28:74:7d:93:4b:06:39:71:49:55:8e:
0b:98:e3:d8:8d:77:98:3a:1a:f8:ab:a0:af:2c:6e:
88:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6D:EC:BE:CD:EB:4B:AD:B3:A1:24:3C:00:BA:0D:7F:57:0D:22:87
X509v3 Authority Key Identifier:
keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/37BBAF34296011EEA8C6E645C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.184.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:79:58:cf:ef:4d:fd:44:14:21:38:9b:c8:03:8b:c6:39:f0:
f3:03:42:50:a4:cd:e9:0e:70:9a:eb:3f:ea:65:6a:70:bd:5d:
d2:8b:1f:c2:ab:63:ab:7a:0a:cc:c2:89:8e:57:ab:ba:5d:01:
cb:51:05:9c:ca:8d:d6:23:a2:13:2a:78:c0:ca:ee:5f:0b:65:
81:c9:25:95:c5:ec:ba:54:78:3e:99:40:38:6e:51:2b:a5:9c:
e3:c1:81:34:2f:b5:9b:24:fa:27:21:fc:f2:04:8a:97:46:ed:
e7:a9:e7:1b:5d:4b:4c:b1:e4:1a:d6:2d:84:87:77:10:e7:c6:
37:27:ef:e6:a9:1e:c7:57:ce:db:e8:0d:87:6c:3c:49:07:17:
a7:9f:d7:35:e0:14:7c:6e:17:84:e3:15:bb:37:25:a8:12:8f:
c1:9a:20:a2:db:bf:74:72:e9:cd:34:c4:ad:29:b6:82:04:89:
98:e7:68:58:01:91:9e:9d:41:fc:d4:2c:b4:93:2b:1e:53:2c:
b0:62:4d:29:f2:bb:a2:e0:13:bb:f7:0f:c7:b2:46:37:5b:8c:
8e:93:ea:19:44:67:55:71:58:50:a5:80:df:93:40:e2:3c:d1:
6a:9a:3c:83:9e:f9:ee:16:6c:52:8e:d7:e5:79:1f:e1:1c:f6:
98:cf:0d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:43 2023 by rpki-client on console.sobornost.net