Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/793CB16AAA0211EE81A35332C4F9AE02.roa
File: 793CB16AAA0211EE81A35332C4F9AE02.roa (raw, json)
Hash identifier: LmWj5/H1KQG7atLsqIwg04AeMymXKWvFn3zzTBh8+9E=
Subject key identifier: 78:C6:6D:C8:72:00:91:17:71:12:FE:30:28:7F:20:09:3D:9A:74:0B
Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Certificate serial: 032F
Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/793CB16AAA0211EE81A35332C4F9AE02.roa
Signing time: Wed 03 Jan 2024 09:29:41 +0000
ROA not before: Wed 03 Jan 2024 09:29:41 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 16509
IP address blocks: 103.179.36.0/24 maxlen: 24
2001:df0:45c4::/46 maxlen: 48
2001:df0:45c8::/45 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 815 (0x32f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Validity
Not Before: Jan 3 09:29:41 2024 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=65952905-4313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:b2:2e:ff:bb:c5:a5:79:8d:0a:c5:d0:69:
05:d2:48:bc:7b:8b:1f:16:8a:bb:ba:45:19:f0:f2:
af:83:4f:f1:23:f7:f9:77:1e:39:29:07:02:77:b8:
b7:33:2d:86:6e:d4:4e:b8:d0:8a:dd:7e:aa:d6:f2:
83:d2:44:71:f2:cc:97:2c:ec:d4:27:cc:74:03:ae:
c7:8a:d3:72:bf:9d:9e:da:22:74:77:fa:c5:e5:ba:
7e:2c:9a:90:20:52:e3:a6:2f:ae:54:df:ad:18:f4:
c6:57:bc:bc:d5:ba:f0:49:d8:7e:e3:83:c3:43:12:
0c:63:e2:1b:48:35:5f:ed:02:fe:7d:21:8c:ee:b3:
a3:26:18:16:35:86:77:58:9d:d5:24:5a:ff:7c:27:
aa:98:5a:8d:17:a8:69:25:bd:a3:38:75:2f:07:70:
dd:46:a9:6f:65:3c:42:83:4c:56:c5:ad:eb:ec:90:
cb:cf:7a:52:b4:9a:6f:3f:4a:de:a0:0b:59:0d:9c:
73:b8:46:46:46:00:34:c4:2b:40:3c:96:ed:34:f3:
d9:99:6a:e5:be:19:62:3c:cb:a4:de:db:ca:43:7c:
50:41:41:f5:89:0b:ed:57:df:58:79:a5:67:0e:05:
cf:7d:1b:a5:e6:d5:4e:60:09:bb:68:6a:a3:5f:28:
d1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C6:6D:C8:72:00:91:17:71:12:FE:30:28:7F:20:09:3D:9A:74:0B
X509v3 Authority Key Identifier:
keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/793CB16AAA0211EE81A35332C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.36.0/24
IPv6:
2001:df0:45c4::-2001:df0:45cf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
72:bb:5f:62:43:0c:fc:37:23:4c:5b:ad:71:46:af:07:d4:3d:
da:48:c8:69:fa:52:ca:b1:0c:40:c8:f4:d6:03:3b:a8:8f:6f:
84:b6:89:c2:75:2d:82:b9:f0:5e:c4:56:e9:5f:26:4d:77:0f:
ea:75:39:44:38:ae:c0:d1:0d:4a:12:37:39:4d:c2:9e:09:76:
81:a7:0b:d7:74:bf:93:bd:fe:aa:d8:00:ab:be:1d:9d:e0:df:
63:81:0b:70:06:f7:d0:c7:52:f4:76:7e:de:6f:70:15:4c:6e:
4f:0c:5e:f9:5e:72:c6:49:60:25:2e:31:0b:b5:c3:69:de:40:
ae:b9:c5:32:d9:48:f9:cf:3b:8e:57:b4:f1:40:69:2c:8c:c6:
8a:58:fc:3c:0d:43:44:d2:81:cc:2b:26:6f:5e:a5:65:1b:07:
18:44:06:dd:50:29:88:f2:c6:41:bc:1b:ab:60:47:55:da:61:
69:6d:4c:24:90:0d:71:f7:52:f9:94:2b:01:6b:d4:bc:36:de:
95:12:8d:f4:9f:d7:8c:68:92:ee:09:0d:63:48:72:c5:39:c3:
03:8d:8b:29:5c:72:3f:dc:4b:2b:f5:e2:8a:b8:e4:92:18:59:
5f:a3:71:b4:eb:e1:15:34:c4:dd:f2:3a:15:4f:02:84:d0:28:
74:bd:d8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:03 2024 by rpki-client on console.sobornost.net