Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/8BC0BDB2FD6911EE801FFF6CC4F9AE02.roa
File: 8BC0BDB2FD6911EE801FFF6CC4F9AE02.roa (raw, json)
Hash identifier: qpoZRQUDu93Oa81TcFD5ed19Sq0gFeIQlW6zwfZog2Q=
Subject key identifier: 7C:F1:E9:3B:44:FE:3E:AC:A5:A2:43:17:84:BF:92:17:AD:76:58:6B
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 0753
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/8BC0BDB2FD6911EE801FFF6CC4F9AE02.roa
Signing time: Thu 18 Apr 2024 09:53:45 +0000
ROA not before: Thu 18 Apr 2024 09:53:45 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 5065
IP address blocks: 202.139.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 10:21:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1875 (0x753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Validity
Not Before: Apr 18 09:53:45 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6620eda9-3685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:cc:95:2f:fa:a5:2b:ae:fc:49:8a:a6:3d:
7d:e1:93:8b:c1:b0:3d:fd:2f:b0:b9:14:5b:72:65:
dc:0e:7c:83:08:af:d6:0f:b5:73:10:bb:b8:24:9c:
5a:a1:3a:8d:48:8d:a4:2c:02:45:2b:58:bb:6f:95:
7a:f6:46:5a:1e:36:66:64:dc:33:e5:9e:d6:3b:8e:
f4:33:05:64:21:bc:76:2e:a4:be:67:80:bc:37:ac:
b5:45:b9:98:e6:26:f2:9e:4c:e9:94:dc:4a:6d:30:
79:9e:81:c5:15:c2:88:79:f6:67:d9:ec:c0:64:37:
4d:36:c6:a9:79:ce:34:ec:c1:9e:0b:a1:62:c6:73:
dc:9c:82:dd:9a:89:33:8f:b4:b3:5e:0a:30:e8:f8:
80:3e:20:21:11:26:50:46:eb:c8:d7:0d:c5:26:6f:
fa:d3:a1:f0:4a:3f:49:53:a3:40:f0:72:bc:23:a3:
aa:69:c6:67:61:3a:0c:75:b4:a7:4d:d1:2a:f5:01:
bf:2c:40:17:19:59:91:1b:24:46:4c:4f:71:a3:41:
75:38:d9:3d:c4:b8:1a:8f:cd:4a:79:42:fb:b7:f1:
21:ac:c3:aa:eb:0c:74:80:1c:dc:74:f7:43:63:35:
dd:e9:32:d2:f0:e7:95:0d:b9:5a:1a:02:9e:59:bf:
5c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F1:E9:3B:44:FE:3E:AC:A5:A2:43:17:84:BF:92:17:AD:76:58:6B
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/8BC0BDB2FD6911EE801FFF6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.139.244.0/22
Signature Algorithm: sha256WithRSAEncryption
97:a0:32:e7:24:67:b1:4f:ad:14:1d:26:ff:90:ae:12:8d:d0:
3a:b7:24:fa:e7:85:26:da:70:6f:e5:9b:fa:28:03:58:f9:fa:
d8:73:aa:82:4e:0a:94:84:b4:e6:d0:b8:d0:2f:7d:c4:db:73:
c2:70:14:a7:af:74:4e:45:74:03:dc:ad:90:8f:c1:1f:f2:6b:
ce:84:46:56:67:7d:95:d4:7f:b4:e6:0f:99:18:3f:18:0a:60:
87:98:be:2b:79:66:48:7f:f0:16:5a:6e:ce:87:6e:31:e7:10:
9c:88:cf:79:dd:c2:ed:7d:ce:d9:36:ee:55:2c:64:c7:61:9c:
e9:1c:83:6a:ba:f0:3a:a8:5f:c1:ec:48:8d:4c:4d:cb:9b:0a:
87:6d:f6:70:89:6b:5a:aa:64:da:1d:13:03:6a:29:14:12:d5:
8f:14:87:57:29:f6:d8:a1:8d:f4:0f:6c:91:7c:86:a6:c4:e9:
c6:6d:60:1b:bc:27:ff:67:35:98:46:5f:f3:dc:0a:a8:1e:71:
7e:d7:12:b9:10:59:75:00:bb:1d:c6:f5:79:3e:74:39:92:37:
5d:74:d6:23:36:f6:27:39:ad:41:41:fc:70:c2:e6:6f:3a:07:
02:ad:97:f3:49:ba:4a:45:b8:c1:81:73:78:8b:e0:06:07:38:
b4:2f:51:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 18:13:35 2024 by rpki-client on console.sobornost.net