Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/6FC9EB5A152411F0BE552087C4F9AE02.roa
File: 6FC9EB5A152411F0BE552087C4F9AE02.roa (raw, json)
Hash identifier: qeLk0d+IQOjI16k8gNqqJpcblci1vpZ/O/n3rwQnt6A=
Subject key identifier: AF:63:41:6F:55:43:A8:2F:A6:8F:D4:6D:21:06:25:3C:D3:DE:76:2B
Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Certificate serial: 0158
Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/6FC9EB5A152411F0BE552087C4F9AE02.roa
Signing time: Wed 09 Apr 2025 09:24:29 +0000
ROA not before: Wed 09 Apr 2025 09:24:29 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 40605
IP address blocks: 185.254.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Apr 2025 16:18:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Validity
Not Before: Apr 9 09:24:29 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67f63ccc-eef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:cf:c5:d5:b6:a0:ef:36:12:5c:ca:9c:43:
a3:dd:a4:60:a7:be:45:e6:2a:67:e9:12:23:3b:25:
b7:f7:78:be:bb:db:d4:18:c2:48:31:0e:c2:f9:49:
e8:0e:fd:03:35:0c:50:c2:9b:a4:4b:7a:e3:3f:20:
f4:5f:55:db:91:5a:e6:ce:24:84:23:07:4b:4b:d4:
bb:20:c8:16:68:3c:b0:d5:11:85:16:cc:cf:20:8e:
b2:23:16:32:32:69:bd:74:57:1e:5e:a4:d8:71:6c:
c8:0f:90:c1:2a:f0:cd:f2:99:14:16:fe:2f:52:ed:
6c:9b:b4:7e:30:01:ba:9a:fc:5d:e3:7d:fa:4f:9c:
04:6c:a0:b8:d8:27:a2:34:a0:75:61:4b:5b:8b:1d:
3c:ad:67:ef:25:f7:91:58:20:bd:60:8c:82:b0:80:
4f:6c:92:6c:13:dd:5c:bb:f4:09:25:6e:53:76:f1:
90:54:46:12:97:6a:6d:75:6e:bb:3b:66:22:44:69:
7e:fe:b3:52:ed:e7:18:0f:e0:68:0f:8c:67:06:57:
99:95:cd:76:3a:de:af:5b:7c:59:f7:bb:fe:17:6a:
e8:98:5a:56:b9:eb:42:7e:20:35:5f:c5:b2:04:f7:
3b:56:84:21:c3:67:70:9e:c6:35:a9:d7:bf:ba:36:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:63:41:6F:55:43:A8:2F:A6:8F:D4:6D:21:06:25:3C:D3:DE:76:2B
X509v3 Authority Key Identifier:
keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/6FC9EB5A152411F0BE552087C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
185.254.243.0/24
Signature Algorithm: sha256WithRSAEncryption
64:18:d3:1a:55:5e:ce:7a:d6:96:4c:20:11:81:9d:02:bc:ef:
89:36:fd:1d:41:b5:89:20:56:b9:b1:1a:c1:46:78:6f:36:1a:
05:ba:92:13:00:7c:0b:c3:4f:35:d1:c7:9d:16:83:79:5f:6d:
62:cc:76:c6:11:16:7c:73:14:58:e4:6d:2a:1a:37:d3:6a:6d:
61:62:ac:fa:e4:f6:37:79:7a:54:cd:4a:f8:9e:c9:a9:59:49:
28:8b:4f:88:1c:c6:c6:2e:9d:b6:d2:cd:ad:f6:e2:09:bd:b5:
0f:f6:80:5f:29:fd:d8:1b:62:de:8d:16:2e:0c:5d:fc:38:3c:
e7:93:62:3c:59:df:28:81:7d:8f:47:3f:75:85:9c:09:56:b6:
2f:6c:c5:61:47:d4:17:fa:fc:77:70:a2:e0:ab:8f:59:0d:be:
64:ed:5b:7f:b9:8b:28:02:d0:4c:75:c4:53:11:7c:4b:f7:f0:
c5:6b:0d:2a:7b:7d:06:06:9b:c3:44:b4:32:a2:f0:5c:62:6f:
35:0a:9f:aa:57:a3:72:39:12:f3:ae:74:75:82:e5:84:2a:01:
22:00:89:48:81:99:8f:ac:54:37:65:cb:f7:21:de:37:4e:10:
6f:3c:62:fb:f7:13:66:a5:82:4f:46:8e:56:21:d4:94:0c:1c:
4c:6f:14:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:54:19 2025 by rpki-client on console.sobornost.net