Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CC82FD54E4F811ED9F93311EC4F9AE02.roa
File: CC82FD54E4F811ED9F93311EC4F9AE02.roa (raw, json)
Hash identifier: tNmO5ujdbaZYVofkow6uD0iTbfv9UEJVTEWBkVv9Dck=
Subject key identifier: 8C:22:4E:7A:6A:48:A3:DB:78:DA:FB:38:AC:F8:A8:4D:71:27:79:08
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0BC8
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CC82FD54E4F811ED9F93311EC4F9AE02.roa
Signing time: Wed 24 May 2023 23:25:40 +0000
ROA not before: Wed 24 May 2023 23:25:40 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 113.203.248.0/24 maxlen: 24
113.203.249.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
113.203.251.0/24 maxlen: 24
115.167.24.0/24 maxlen: 24
115.167.25.0/24 maxlen: 24
115.167.26.0/24 maxlen: 24
115.167.27.0/24 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3016 (0xbc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 23:25:40 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646e9cf4-f9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:0e:c4:95:fd:7f:78:b6:01:85:3f:53:7a:
3b:95:d7:f7:a7:e9:c4:80:a0:ac:32:32:ba:ea:b8:
3f:01:4f:fc:7d:51:36:be:45:59:ea:aa:b1:08:fc:
2b:ff:28:4f:67:bb:ab:3b:5d:b2:29:ad:99:9e:5a:
7c:a9:44:f5:86:b5:35:e9:3b:c3:a9:43:0f:12:ed:
24:51:27:1e:30:58:b8:7e:8e:15:54:26:c5:74:eb:
20:a1:f4:f1:1b:88:13:42:1b:b8:98:cb:f6:bb:8c:
e2:85:be:60:18:71:c6:75:b9:29:a6:86:d4:8a:d8:
18:29:78:72:02:53:f2:e8:c9:f5:93:2f:b8:75:df:
4a:10:4d:e7:d8:97:81:c8:6d:59:8b:9e:d1:1d:c8:
62:74:af:b1:52:8c:25:da:af:98:2c:cf:84:df:c8:
e6:f6:17:42:06:79:dd:00:db:7b:53:f5:ab:db:89:
f2:ae:93:c0:6c:f9:a1:dc:88:1a:be:63:02:6b:61:
e5:f2:8b:f0:eb:a1:8e:ed:d6:c4:21:68:a2:6b:2f:
8b:b3:29:e4:50:6f:07:b4:ee:36:86:8c:c7:91:57:
a7:b2:f6:b4:9a:6b:bb:04:e3:14:b0:1c:0b:1a:cb:
8f:77:a1:e9:dd:a1:e0:5a:91:87:54:a7:49:7a:4b:
da:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:22:4E:7A:6A:48:A3:DB:78:DA:FB:38:AC:F8:A8:4D:71:27:79:08
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CC82FD54E4F811ED9F93311EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.248.0/22
115.167.24.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:d3:24:c9:28:09:e6:e4:68:f0:ff:3c:1c:1c:94:81:28:6b:
68:be:68:31:d2:cd:df:06:4d:c3:d2:2e:e8:f9:5f:de:36:73:
2e:c5:20:b4:50:e5:19:4c:b2:02:61:01:df:77:e3:15:ce:06:
07:8d:db:4e:f5:51:b1:45:db:d4:20:36:d0:14:7c:e6:fb:c4:
01:87:79:53:13:55:1b:fb:4e:77:56:c6:5d:b4:ba:cf:46:e0:
a5:38:6f:28:47:53:94:6a:f1:07:c0:bd:17:ac:23:48:f3:0f:
00:bd:90:7b:09:c4:06:85:51:b2:2f:78:f4:8f:8a:68:20:1c:
93:df:9f:77:80:8b:b7:23:5d:34:58:2a:c6:ec:2e:7a:d2:b2:
11:a8:29:6a:eb:99:55:02:ca:33:85:ed:8f:10:86:de:4e:6f:
2d:8a:72:59:dd:7d:ad:22:dd:e4:10:aa:96:f8:ed:2f:46:d4:
c1:af:09:8f:42:64:c8:f3:7a:aa:cc:2c:92:29:f8:68:85:18:
f6:cd:3c:22:f0:fb:1d:20:cd:b2:4c:ea:21:93:b7:1c:54:ed:
03:b5:2f:45:79:58:2a:c0:b2:12:13:04:c7:38:5f:c4:2e:68:
10:4d:7f:9d:86:b9:50:a1:20:ae:ff:00:42:d6:47:8b:21:62:
8b:79:7c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:46 2023 by rpki-client on console.sobornost.net