Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/37D48B30F65C11ED84ECEF0AC4F9AE02.roa
File: 37D48B30F65C11ED84ECEF0AC4F9AE02.roa (raw, json)
Hash identifier: UUEPiXaBiUrr7lcSGw/CXksjsJl4mPtPZEwBSItlkdY=
Subject key identifier: D9:92:4F:5E:CD:19:77:AF:1D:F3:A6:94:AA:89:D7:71:A9:68:D9:87
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0BBF
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/37D48B30F65C11ED84ECEF0AC4F9AE02.roa
Signing time: Wed 24 May 2023 23:25:30 +0000
ROA not before: Wed 24 May 2023 23:25:30 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 142127
IP address blocks: 180.178.184.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
223.29.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3007 (0xbbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 23:25:30 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646e9cea-65c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:45:ad:16:d5:72:5b:cf:06:67:d1:f8:55:
41:1b:29:a4:b0:38:7d:08:78:4a:9f:61:d2:66:2a:
88:10:15:fb:45:3f:c3:ef:f5:0b:e9:9f:6f:98:35:
7e:65:f1:12:45:0d:5a:1f:8f:d4:73:36:b5:cb:87:
77:51:02:ba:14:01:63:36:46:c4:3c:26:76:d2:08:
52:2d:f5:7f:c2:73:62:3b:29:65:31:84:e2:23:00:
9a:44:bb:0e:b5:94:cb:0f:3f:d1:d2:7f:f3:1e:79:
e2:6c:c9:f9:d7:a4:09:3f:bc:88:c7:d9:04:2d:23:
3b:6f:f9:4b:25:0f:f3:15:4d:a8:ad:b6:d8:fd:3a:
b8:07:b9:c1:d0:31:af:12:d3:f5:e8:50:72:06:f4:
9b:40:b9:c4:19:38:95:9f:68:57:97:17:57:f6:c1:
79:8e:c2:c8:00:ca:55:be:53:2a:ae:25:66:1f:24:
0b:24:93:c1:a8:7a:e5:5b:90:c0:34:b9:5f:f0:42:
e4:71:14:b3:bc:e1:5c:cd:d7:69:0b:19:c8:74:50:
d6:f2:70:0a:80:0c:2e:a3:57:ab:07:9e:ac:54:18:
04:72:a7:78:51:5f:92:ed:14:40:84:9b:66:54:2f:
b5:ae:1b:49:df:fa:5c:e6:db:cf:03:d0:cd:ba:c3:
f3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:92:4F:5E:CD:19:77:AF:1D:F3:A6:94:AA:89:D7:71:A9:68:D9:87
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/37D48B30F65C11ED84ECEF0AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.178.184.0/24
180.178.186.0/24
223.29.224.0/24
Signature Algorithm: sha256WithRSAEncryption
53:5d:f2:a7:14:3e:25:84:12:8c:8e:d6:0f:f1:93:a4:2e:b2:
6a:dc:26:7a:35:3f:5f:83:17:b6:99:2e:9f:a3:7e:2d:c4:6c:
df:c3:1b:95:c9:19:ea:e3:9e:b2:18:cc:c1:74:16:e6:07:8e:
fb:d9:58:cc:27:c8:b3:f5:f0:a0:c6:08:ae:44:ea:c9:93:3c:
19:b4:d6:d5:7a:1a:ce:1a:be:ef:05:0b:79:03:02:87:29:7b:
72:80:2c:54:92:69:01:d0:6d:7b:c6:cb:6b:e3:f5:e3:40:e5:
9b:3f:d2:08:3d:60:1b:88:13:72:69:91:95:e6:db:60:98:d7:
c5:dd:82:86:8e:bd:2b:0f:a0:b2:6e:46:ca:9b:79:35:e8:fc:
7c:2d:fc:20:1a:a5:d0:5d:90:f7:7e:c9:fe:3b:76:be:46:9a:
75:20:8b:5d:6f:ad:a5:1b:74:6a:5c:69:03:18:19:4a:92:87:
73:26:19:a8:ef:fc:8f:72:c8:5d:74:fc:cc:09:30:55:1c:1e:
4a:a8:75:12:a1:b9:12:cc:71:92:d9:b7:ec:6f:5e:ea:13:c3:
50:4c:5c:98:5a:45:66:39:60:55:cf:ed:76:87:d1:e4:24:fd:
ef:26:81:c2:8a:d7:e2:41:13:6d:95:dc:ed:b3:f8:70:48:0e:
6f:18:aa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:40 2023 by rpki-client on console.sobornost.net