Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1E15E61C9BC111EDA901FB84C4F9AE02.roa
File: 1E15E61C9BC111EDA901FB84C4F9AE02.roa (raw, json)
Hash identifier: 8qgiFpo0oQyMsWwD/2PXFAq+gfggY4CxHTBT50L6OaY=
Subject key identifier: 6C:EB:75:0E:9C:70:AC:DC:59:13:98:75:6A:50:C7:75:68:1E:A3:02
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0BD4
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1E15E61C9BC111EDA901FB84C4F9AE02.roa
Signing time: Wed 24 May 2023 23:25:54 +0000
ROA not before: Wed 24 May 2023 23:25:54 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 202.92.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3028 (0xbd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 23:25:54 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646e9d02-8c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0d:b7:da:5f:1f:95:c6:50:fe:af:37:18:11:
c5:47:8b:f2:5e:39:d7:c6:7e:02:8f:26:a6:77:ae:
5f:36:1b:40:1c:86:e8:ab:0c:46:5c:7f:24:4a:7a:
81:86:01:0e:4c:54:b7:8d:dd:2a:c2:01:40:55:53:
17:0f:ec:eb:c4:2a:1b:da:94:e3:45:98:e8:f7:2d:
fa:60:9b:d1:73:9a:91:3d:3c:72:eb:37:68:91:ed:
ac:de:eb:4d:0f:56:28:a5:d3:54:08:6b:4e:2f:09:
02:57:d2:4b:b7:ff:43:e5:11:a6:66:02:5f:fb:8e:
ea:1f:89:fb:19:0e:44:21:8f:b2:e0:f3:47:ce:21:
e5:f8:f6:8a:90:a3:1f:ee:16:a8:87:36:0c:08:19:
53:a1:fe:89:81:83:a8:f0:3c:f5:43:8d:39:e7:e4:
20:b9:35:63:66:ac:2d:e1:a9:8e:c2:8a:36:28:05:
2b:38:b9:75:da:ac:56:b1:76:90:c2:d9:b7:f4:9f:
62:ac:c7:8f:76:0f:a7:73:ea:a6:a1:f6:e0:6a:5e:
92:72:80:05:55:7b:4d:95:fa:2b:e4:27:69:ff:e5:
fc:22:21:e8:44:9d:a6:f5:3a:40:8b:8d:a2:aa:e5:
61:44:00:86:0e:18:45:fd:04:29:7d:7b:2a:20:5b:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EB:75:0E:9C:70:AC:DC:59:13:98:75:6A:50:C7:75:68:1E:A3:02
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1E15E61C9BC111EDA901FB84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.92.18.0/24
Signature Algorithm: sha256WithRSAEncryption
85:4c:c1:d6:bc:d5:ca:2b:13:44:97:b6:5d:07:c4:e2:f8:cc:
54:9e:ba:94:86:95:61:b1:1e:71:7f:8d:28:51:18:31:fa:40:
86:2f:f5:d1:00:fc:9b:7a:f8:36:ee:16:c1:57:7f:27:bf:09:
65:80:6f:2d:50:27:70:6c:cd:b8:95:7d:59:4f:66:76:a2:12:
91:15:8e:55:20:8b:cc:12:f8:1e:e9:9c:8d:5c:b8:e9:5a:d2:
0e:8a:f4:30:44:ff:cc:ff:60:47:df:41:7a:3e:64:46:cf:5e:
a8:5b:2e:65:2b:91:88:2e:db:80:77:05:21:49:68:11:f1:f8:
01:14:47:f5:25:4e:1a:ae:c6:b1:42:3a:50:8e:fc:85:e5:b2:
b1:8c:31:04:f5:8f:95:e7:6c:f4:85:44:c6:11:f0:62:9c:a3:
fc:fe:66:b4:86:56:b7:01:9f:f1:09:3c:c7:24:a8:89:f9:2e:
94:40:5f:5b:34:95:b1:52:7f:90:28:17:4c:77:21:56:4a:03:
8b:3e:17:83:ba:85:45:56:cf:f7:f4:01:b0:65:23:42:b8:72:
1a:ae:5b:d7:3b:10:d5:04:7a:c2:83:f0:ec:29:98:5f:3c:1d:
b9:e4:45:fc:a6:f8:2b:7c:fd:bc:14:f2:76:f0:f1:97:55:72:
f3:95:55:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:40 2023 by rpki-client on console.sobornost.net