Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/AD72C892B30011EDB9077452C4F9AE02.roa
File: AD72C892B30011EDB9077452C4F9AE02.roa (raw, json)
Hash identifier: lNJCvJOFFbhEyaPJkYknXfB0tiS2v5lyDkk6RhWIJS4=
Subject key identifier: 93:52:68:39:0F:8F:73:B6:98:04:AB:A9:CC:A8:11:97:5D:C9:EF:73
Certificate issuer: /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial: 0576
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/AD72C892B30011EDB9077452C4F9AE02.roa
Signing time: Sun 09 Apr 2023 01:01:29 +0000
ROA not before: Sun 09 Apr 2023 01:01:29 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 55933
IP address blocks: 103.226.124.0/22 maxlen: 23
103.226.124.0/23 maxlen: 24
103.226.127.0/24 maxlen: 24
103.242.0.0/22 maxlen: 22
103.242.0.0/23 maxlen: 24
150.129.80.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1398 (0x576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Validity
Not Before: Apr 9 01:01:29 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=64320e68-a157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4a:eb:d8:1a:6f:f8:25:84:04:09:a7:37:ca:
a9:ad:54:a8:bb:e9:9e:01:89:02:fd:22:a5:bd:58:
0e:42:b6:f8:bd:f0:f2:97:44:7f:90:d1:78:db:6a:
0d:8f:48:f4:1e:9c:ae:c8:64:4f:1f:4b:a8:76:b5:
5e:9b:aa:ff:20:dc:0f:82:0e:d6:32:b4:bb:68:1f:
25:49:db:22:5e:a7:37:80:40:b1:f0:79:1f:1f:f8:
d0:e6:18:3d:dc:e0:06:2f:01:d4:1b:02:ff:c4:99:
4a:f7:52:3a:57:68:5a:95:91:1f:5f:7e:ab:73:2d:
df:e6:9a:0f:54:54:89:f2:dd:96:94:76:59:09:df:
ce:9c:6c:98:f1:e9:1b:c1:0e:43:9a:46:58:df:6a:
e3:b6:a0:c9:10:bb:61:03:e0:88:27:c3:0b:8d:05:
d6:9d:55:e0:1e:05:e6:1c:cc:d9:2c:39:4e:40:d0:
87:79:7d:6b:0b:c3:fc:05:ee:c4:00:55:1e:4b:54:
31:66:bd:da:ad:df:e1:be:01:1f:2c:f3:53:c2:65:
04:fa:4c:07:cd:77:77:02:7f:cf:72:49:f0:46:a6:
f7:ba:f0:6b:02:e5:76:d3:ae:d5:4f:79:e5:41:89:
50:ee:cb:c7:ee:9e:d7:e9:e5:0c:11:56:ca:68:e3:
dd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:52:68:39:0F:8F:73:B6:98:04:AB:A9:CC:A8:11:97:5D:C9:EF:73
X509v3 Authority Key Identifier:
keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/AD72C892B30011EDB9077452C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.226.124.0/22
103.242.0.0/22
150.129.80.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:c8:7a:89:6c:d0:5e:9c:d2:22:5f:0c:5a:0b:e0:e2:fe:db:
47:d1:ea:40:de:d7:d7:b3:81:19:ea:a6:ee:85:e5:79:be:3f:
52:4f:9f:b6:02:8d:79:e8:30:4c:3b:86:93:af:d8:04:26:9c:
97:60:0e:61:6d:ec:95:71:b7:3b:1d:9b:9b:36:2e:d3:77:a1:
ac:64:48:e8:a4:a8:79:84:b7:7b:d5:0b:53:24:96:58:95:77:
b4:27:9c:30:1f:e0:dc:9f:08:b7:80:67:9a:5c:64:01:8a:07:
5d:ee:a5:46:9f:8e:54:37:f9:7e:53:fe:9b:b4:53:b7:d3:4d:
d3:29:92:dc:63:63:38:81:51:83:8e:d8:0b:9c:0e:84:87:05:
12:58:e4:10:43:3b:a1:e8:bf:a7:7c:eb:08:6d:5e:fb:4a:f5:
5c:2f:cb:2b:51:03:82:70:72:e0:d7:5d:08:19:28:65:41:80:
9d:58:42:49:50:f9:d1:38:75:c8:2a:1d:74:f7:a5:ab:cd:a3:
ce:fe:12:e2:bf:08:c3:88:fd:fe:74:66:57:df:f4:21:62:5c:
b1:82:3d:18:b3:67:ac:97:0a:5a:6d:94:e8:33:fd:fb:25:eb:
6c:81:52:e1:1f:40:da:d8:99:6f:17:e6:09:8a:f7:6a:f9:c6:
da:45:bd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:36:11 2023 by rpki-client on console.sobornost.net