Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/6EE624A443B611EB9FB8597CC4F9AE02.roa
File: 6EE624A443B611EB9FB8597CC4F9AE02.roa (raw, json)
Hash identifier: EXS6gJyLOeDj7jnT/RXmYyWy7xrQhIGiRAvoi/ByYek=
Subject key identifier: 67:03:AC:89:D4:FE:6F:E6:6A:BD:F4:D8:B2:1B:61:34:4A:29:6C:B9
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 3338
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/6EE624A443B611EB9FB8597CC4F9AE02.roa
Signing time: Fri 20 Jan 2023 14:40:27 +0000
ROA not before: Fri 20 Jan 2023 14:40:27 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 140607
IP address blocks: 103.207.85.0/24 maxlen: 24
116.90.116.0/24 maxlen: 24
116.90.117.0/24 maxlen: 24
116.90.118.0/24 maxlen: 24
116.90.121.0/24 maxlen: 24
116.90.122.0/24 maxlen: 24
202.69.51.0/24 maxlen: 24
202.142.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13112 (0x3338)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Jan 20 14:40:27 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63caa7db-6094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:c8:98:57:40:9b:25:15:4e:82:7f:94:29:
70:4c:36:98:ee:fd:00:5c:09:ca:44:69:dc:0c:fe:
d2:59:b3:69:8f:d5:c1:64:27:8e:d4:83:d9:5d:13:
b5:87:a7:2f:46:ec:2b:67:ec:88:cd:be:c9:4e:b0:
1c:b7:17:04:46:6d:d5:7e:87:fa:3c:39:5e:26:77:
11:29:5f:8b:57:78:71:2a:a1:6d:2d:85:78:73:be:
82:a0:a9:ad:82:e9:78:01:e7:66:8c:62:f3:cb:ca:
99:de:65:72:1e:89:93:53:08:09:27:7b:87:c6:78:
40:9f:f0:1f:5f:c0:49:da:1a:f6:d0:ad:c7:57:fb:
db:9a:9e:b5:47:99:2a:40:66:c9:7b:db:71:2e:d6:
62:a1:ad:f4:25:60:39:d3:8b:52:c7:e4:db:bf:4c:
9e:84:40:27:d2:5d:be:60:cc:95:f7:c9:ba:b6:e0:
40:68:f3:14:61:2e:ba:08:20:0e:90:b6:47:3b:83:
65:8d:f7:97:a5:03:c9:34:41:2d:7f:33:eb:90:9a:
e3:6d:7e:0a:98:4c:f6:8b:73:0a:2c:2a:09:d7:5f:
7d:87:8a:bf:7b:f5:50:57:76:07:0b:f3:fd:4f:85:
18:bf:8a:9a:ec:3f:a0:ad:04:30:6b:79:13:15:51:
fc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:03:AC:89:D4:FE:6F:E6:6A:BD:F4:D8:B2:1B:61:34:4A:29:6C:B9
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/6EE624A443B611EB9FB8597CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.85.0/24
116.90.116.0-116.90.118.255
116.90.121.0-116.90.122.255
202.69.51.0/24
202.142.151.0/24
Signature Algorithm: sha256WithRSAEncryption
11:60:ff:43:bc:ff:c4:88:9c:cd:f6:f5:87:fc:2f:38:60:af:
26:30:33:72:39:1d:9a:93:7e:45:52:05:56:7e:fd:7b:25:c6:
7c:59:09:14:1e:ae:be:3a:a4:ae:d0:7a:e8:18:ea:73:dd:a8:
c1:3c:58:f3:0c:1f:ba:c9:d1:bf:ec:40:46:f6:13:6b:cc:57:
37:b2:87:d8:88:7a:f5:56:b4:86:0c:21:de:dd:f1:3b:2f:51:
85:68:54:39:de:90:37:1a:0c:98:0d:f9:bc:f3:a6:8c:3d:8a:
62:b9:3b:48:f4:7a:f1:4d:bc:2f:a6:48:b4:3c:cb:9d:c1:5f:
5c:cc:3e:01:2b:63:c6:c0:33:cf:51:57:a4:f7:7f:0b:2a:8e:
c9:20:7c:e1:02:0c:4f:99:43:79:1f:50:3d:cb:3f:2d:51:0a:
88:93:00:83:7f:c8:dc:6b:7e:de:25:34:be:93:9a:f4:5b:65:
cc:44:67:3e:5a:e2:67:63:59:a9:5e:f3:f1:65:5c:47:83:84:
96:57:21:d9:70:de:6c:91:64:75:8d:51:e2:04:a0:4d:58:b9:
0c:7e:30:c4:4a:d8:53:7c:6c:70:c9:e4:8d:f7:65:cf:de:2b:
97:f3:f0:14:5d:dd:02:4f:fb:2e:c0:3c:b8:e7:88:9e:68:ec:
6b:a6:28:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:36:16 2023 by rpki-client on console.sobornost.net