Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/00C34E729CD411EFA228E85FC4F9AE02.roa
File: 00C34E729CD411EFA228E85FC4F9AE02.roa (raw, json)
Hash identifier: kO/PRkOfvIeEHNf+K2KAsJbnYeBOYKMLWv0EXSM95rY=
Subject key identifier: EF:DD:C4:E7:03:61:10:75:0B:36:2B:FC:D9:D9:E6:18:B4:DF:76:E8
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1BD7
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/00C34E729CD411EFA228E85FC4F9AE02.roa
Signing time: Fri 08 Nov 2024 10:40:27 +0000
ROA not before: Fri 08 Nov 2024 10:40:27 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 213990
IP address blocks: 113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
115.167.20.0/22 maxlen: 22
115.167.56.0/22 maxlen: 22
115.167.60.0/22 maxlen: 22
115.167.78.0/24 maxlen: 24
175.110.80.0/22 maxlen: 22
175.110.105.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 10:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7127 (0x1bd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 8 10:40:27 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=672dea9b-e391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:1d:e2:e8:37:5b:c6:dc:51:73:c7:05:33:
91:a1:ab:45:95:88:8c:35:a1:d3:c7:09:27:85:bc:
1a:e2:f7:51:fa:46:db:b7:6b:a5:61:7d:7f:a5:d5:
62:6f:0f:be:c9:b8:f6:34:a1:f2:1b:08:7f:6f:28:
07:59:71:f0:5e:5f:2f:fb:e0:47:9c:71:6d:5b:e3:
70:b6:d7:8f:5e:87:a2:67:d2:71:2e:75:e9:7f:dc:
4f:0b:31:6b:b5:ca:18:2d:7e:c6:99:1e:30:cb:74:
ad:1a:52:bf:9a:64:7c:83:56:98:f4:58:1f:34:0b:
c9:8e:5a:ad:f4:72:98:af:ea:e3:52:6b:32:72:40:
3d:fc:71:f7:cd:9b:f0:bc:3b:3a:4d:eb:51:9f:89:
41:43:70:85:fd:1e:1b:3a:9e:04:62:fc:27:e6:b1:
05:3c:44:06:70:d1:ca:0f:e9:3f:53:be:a1:a8:d6:
28:dc:d1:54:26:c5:2f:d9:db:f6:07:ad:ec:e1:cb:
ab:12:c7:ae:8c:e4:aa:cf:3a:ff:35:5e:41:9f:19:
cc:62:f6:c3:92:78:5b:1f:84:6c:44:0e:f8:3d:07:
56:89:04:0f:26:b3:25:c5:e6:43:c5:46:9d:10:28:
b2:f9:80:75:59:9d:be:1e:9a:d8:63:1f:e5:a3:87:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DD:C4:E7:03:61:10:75:0B:36:2B:FC:D9:D9:E6:18:B4:DF:76:E8
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/00C34E729CD411EFA228E85FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.209.0-113.203.210.255
113.203.217.0/24
113.203.220.0/24
115.167.20.0/22
115.167.56.0/21
115.167.78.0/24
175.110.80.0/22
175.110.105.0/24
180.178.162.0/24
180.178.164.0/24
180.178.190.0/24
223.29.226.0/24
223.29.228.0/24
223.29.230.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:6c:8c:75:e0:ca:a6:62:24:44:4b:d1:a1:a6:88:4e:6f:33:
60:78:9e:27:bc:2f:9a:50:28:88:a3:dd:60:3d:96:e5:64:c1:
16:1f:85:dd:1b:f2:46:27:03:43:eb:bd:10:95:5c:b8:20:d1:
a2:7a:73:8f:6d:25:ee:48:77:c3:e0:6d:f3:1e:68:ae:e4:d6:
d5:f0:3b:48:c8:7d:97:b7:74:a3:f2:45:c5:9a:d6:f3:51:68:
64:bb:fe:4e:ae:91:35:61:f2:19:4b:72:d7:ac:e4:b1:ff:6b:
04:2c:fe:15:ff:71:9c:cf:4a:f3:f6:71:65:f4:36:29:51:4f:
9f:36:f5:70:cd:a0:c7:08:d6:03:83:46:ef:26:19:6e:67:a2:
d1:58:98:4f:41:06:29:5b:cf:73:d9:7e:e1:df:4e:99:c4:85:
5a:53:88:07:66:cd:4d:df:78:22:b6:c4:d2:6a:71:77:d2:35:
16:04:32:e4:2c:ec:02:8f:94:0a:4d:49:9a:30:7b:a3:19:e7:
5e:20:f5:89:ea:f1:43:4f:18:37:26:8a:35:88:ea:3c:ff:cd:
84:f0:75:e0:f3:7a:f0:bf:ab:83:b5:97:0b:0a:6a:3a:69:4d:
12:50:fb:3f:ce:86:c3:c2:2c:72:3d:1b:46:29:79:35:60:21:
f7:78:99:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 14:33:47 2024 by rpki-client on console.sobornost.net