Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B547C5F25B7C11EEB638DB0EC4F9AE02.roa
File: B547C5F25B7C11EEB638DB0EC4F9AE02.roa (raw, json)
Hash identifier: 3rr5FkmHUqxIYJ8vhFNyVXKU/CCFIMM6ZnNiCSLPb2s=
Subject key identifier: EB:D1:A8:4F:0B:7E:48:69:D0:84:F6:38:BB:BE:7C:DF:5A:62:2A:A8
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1253
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B547C5F25B7C11EEB638DB0EC4F9AE02.roa
Signing time: Fri 24 May 2024 22:32:28 +0000
ROA not before: Fri 24 May 2024 22:32:28 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 150177
IP address blocks: 223.29.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 May 2024 11:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4691 (0x1253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 22:32:28 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6651157b-cdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cc:7c:e4:ff:c4:a9:84:05:8b:d0:23:0a:70:
32:83:c0:59:79:59:8a:e1:15:ad:5d:ff:83:b0:56:
7f:06:45:b3:01:2a:2a:46:6d:72:45:54:b6:af:bb:
92:b2:ca:79:b0:1f:4d:66:28:79:3b:0c:36:a7:1e:
45:60:70:a5:1b:96:74:0b:a8:71:d8:52:b9:cc:f9:
ef:c0:46:81:ea:4f:05:c8:91:24:ff:ee:a3:1c:28:
ca:f3:35:fa:ef:ac:27:e1:ff:cd:3c:61:ac:18:76:
cc:e9:b2:7e:62:6d:cc:f3:58:e4:c1:ce:41:69:8f:
ac:b0:42:09:bf:39:e1:28:71:a6:97:89:3d:b5:c5:
c0:75:d1:5a:ee:c0:91:a2:ce:41:cd:71:f8:e7:19:
89:94:cc:94:21:7a:0b:49:1f:9a:37:a4:56:16:5a:
2e:51:a2:f2:bc:65:ce:31:c9:22:05:4e:3c:e3:26:
1d:cf:b1:6d:8f:31:ba:96:78:25:48:5a:f6:d6:fa:
7a:1d:81:51:a2:99:96:bd:58:b2:ab:5f:a5:1d:ad:
84:4a:36:22:e5:6b:7f:e1:f4:bf:fe:cf:87:44:0f:
17:d0:7f:4b:a7:ae:7c:17:34:77:d5:1b:1d:8c:be:
18:e7:ad:73:61:c4:e7:db:ed:5c:ce:ab:25:ec:8d:
de:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D1:A8:4F:0B:7E:48:69:D0:84:F6:38:BB:BE:7C:DF:5A:62:2A:A8
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B547C5F25B7C11EEB638DB0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.233.0/24
Signature Algorithm: sha256WithRSAEncryption
51:cc:13:7a:7e:08:9e:87:ea:e7:d4:ee:f6:df:2e:05:58:71:
17:9f:be:12:d6:8f:e7:67:55:dd:66:ea:96:ff:21:d7:ad:61:
0b:01:de:68:9b:3a:75:f0:ac:70:ec:fa:1e:63:5e:56:ae:09:
6b:5d:37:82:e6:cd:fb:ea:a4:0a:d6:a2:73:36:73:44:87:93:
ff:1b:71:7c:8b:82:dd:89:65:1f:35:2c:37:29:43:1d:d3:72:
17:2c:87:d1:77:57:c6:5b:6d:b4:d4:cd:de:cd:29:2d:d2:26:
fe:d5:dd:d8:8b:23:cc:48:b5:29:f6:7b:49:98:b8:58:9f:80:
a4:90:48:f5:44:b5:54:a8:58:08:64:b9:80:2d:6e:e0:10:27:
66:39:4f:a8:5b:69:d6:c7:c7:98:ad:c3:06:4b:dd:84:69:82:
9d:59:42:49:0f:03:02:9e:28:5e:58:5a:95:e7:88:9a:5b:7c:
50:94:1e:df:0a:58:7b:89:08:3b:2f:90:61:06:c0:d9:e3:ab:
b5:ff:98:5d:05:de:29:7c:6c:15:cf:32:3a:7d:49:61:9c:da:
87:67:87:74:91:17:20:56:5c:bd:71:70:d8:bf:20:cc:84:a2:
92:a5:9d:bf:8f:1b:80:60:5f:ff:dc:84:e3:2c:9c:4a:b5:5e:
a0:95:4c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 16:03:50 2024 by rpki-client on console.sobornost.net