Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/44DD0B00F42811EB93675638C4F9AE02.roa
File: 44DD0B00F42811EB93675638C4F9AE02.roa (raw, json)
Hash identifier: AoXfgb6ITwIMrwSqBB30lIyO/7Mba8rSwhZUEoxdjK0=
Subject key identifier: A9:A4:76:3C:36:FB:9E:79:82:23:2E:40:18:4F:FC:A1:82:AD:90:11
Certificate issuer: /CN=A9123072/serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4
Certificate serial: 068C
Authority key identifier: B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/44DD0B00F42811EB93675638C4F9AE02.roa
Signing time: Thu 30 Nov 2023 23:10:52 +0000
ROA not before: Thu 30 Nov 2023 23:10:52 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 55720
IP address blocks: 185.135.72.0/24 maxlen: 24
185.135.73.0/24 maxlen: 24
185.135.74.0/24 maxlen: 24
185.189.240.0/24 maxlen: 24
185.189.241.0/24 maxlen: 24
185.189.242.0/24 maxlen: 24
185.189.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 14:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1676 (0x68c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123072/serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4
Validity
Not Before: Nov 30 23:10:52 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=6569167b-3fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:5b:a7:01:9f:e1:8f:56:98:b0:cd:7b:6c:
a9:ea:72:d4:9b:ad:79:8c:29:05:e5:c9:6a:be:da:
e8:8b:65:6e:ba:53:95:0e:f6:5a:46:4e:f1:a7:df:
8d:c8:95:f3:e4:ae:53:af:8a:4f:e2:06:4a:2f:3f:
c6:47:68:2d:b2:7f:ad:d3:2c:42:af:ea:f0:19:8b:
d5:ed:3c:0d:29:40:3a:66:f8:e0:f8:dd:74:5a:0e:
69:af:68:1b:07:c7:d1:60:ac:51:09:2d:c0:a6:f0:
1c:de:38:02:e0:69:41:c3:52:0e:6e:46:06:35:3c:
c3:68:6c:09:cd:5c:8e:eb:31:fe:51:5c:e7:32:f1:
f2:06:2b:13:9e:70:7f:04:3a:df:60:6b:f8:11:2e:
7a:52:15:c1:03:e0:38:b6:49:18:10:6f:94:73:b6:
9a:3e:32:51:a6:40:93:e9:27:68:1e:a5:43:60:8c:
34:cd:f3:0d:9e:a0:23:df:95:2a:c1:8d:32:7b:ae:
f6:b2:74:c4:d6:b9:5f:ab:53:66:da:57:9d:f7:fa:
78:c6:06:a2:9a:1c:10:01:cb:e4:4d:f7:40:12:54:
f3:10:7f:8a:1e:0c:20:c0:b0:db:97:04:0a:62:d4:
83:93:d0:5a:11:ea:b5:40:84:31:62:30:2d:45:6e:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A4:76:3C:36:FB:9E:79:82:23:2E:40:18:4F:FC:A1:82:AD:90:11
X509v3 Authority Key Identifier:
keyid:B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/44DD0B00F42811EB93675638C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
185.135.72.0-185.135.74.255
185.189.240.0/22
Signature Algorithm: sha256WithRSAEncryption
e9:e1:d8:52:9c:a8:a6:14:87:f4:ff:a4:75:1c:9a:a0:8b:95:
e0:93:d8:f7:52:22:62:ca:f0:3b:cc:c8:f4:77:a5:b5:eb:f3:
c6:88:ea:65:19:3f:78:f7:e1:e7:7b:6b:4c:0f:9a:cc:76:60:
65:81:38:f0:4b:be:0d:ed:52:4f:18:16:ff:70:bc:5c:02:2d:
3f:04:1d:63:0f:68:e8:24:3f:bb:ef:77:8b:dc:a7:3c:c9:e1:
74:f1:bb:46:31:08:43:f3:d1:e7:8f:05:d1:6c:e3:a2:40:11:
24:58:5b:43:0c:75:50:60:9d:f9:fc:5f:39:3f:a2:73:52:ff:
cb:2b:2d:8e:20:3a:2b:9a:5f:26:5a:a8:1f:1a:8c:6d:38:ca:
04:41:a7:a0:17:6a:ef:78:09:5c:1a:57:91:4b:d5:20:1f:5b:
66:b4:a3:43:07:ba:e4:4e:3b:ca:27:94:b8:d8:0f:2b:39:77:
5b:30:7a:02:2e:08:9e:ed:8f:29:44:e6:d0:c7:8e:9d:13:6e:
6b:3d:6f:9c:95:48:34:1a:8d:c3:6b:19:68:c6:d8:29:cc:d8:
8f:04:f9:59:c2:01:31:74:9d:5e:3f:50:1c:84:98:5e:6d:a7:
72:1e:88:95:8d:15:0b:c1:94:3c:f9:ff:ff:f8:48:c3:b7:eb:
85:1e:22:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 19:13:24 2024 by rpki-client on console-fra.rpki-client.org