Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/72A4B3E4AFBE11EABFE7940FC4F9AE02.roa
File: 72A4B3E4AFBE11EABFE7940FC4F9AE02.roa (raw, json)
Hash identifier: xKDqwQQGuJbTf/0osTQiWVEnBHjp+KYt3EaSP8q25mw=
Subject key identifier: 2C:9D:56:BC:91:32:66:D2:1C:3E:E2:95:DE:20:BE:D9:97:07:4D:95
Certificate issuer: /CN=A91D83D0/serialNumber=1CB4BFD9C0A732BC8F4A60C8694C91F834CABC13
Certificate serial: 074B
Authority key identifier: 1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/72A4B3E4AFBE11EABFE7940FC4F9AE02.roa
Signing time: Fri 14 Apr 2023 22:39:30 +0000
ROA not before: Fri 14 Apr 2023 22:39:30 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 26496
IP address blocks: 148.66.128.0/19 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1867 (0x74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D83D0/serialNumber=1CB4BFD9C0A732BC8F4A60C8694C91F834CABC13
Validity
Not Before: Apr 14 22:39:30 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=6439d622-3ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:b2:c7:17:e4:46:6d:c0:24:60:d8:7e:33:
da:b6:e5:eb:ef:c1:05:3c:55:f6:e2:63:02:d2:fb:
c9:91:1b:92:c0:dd:de:9f:78:6d:3c:be:b5:75:6f:
0d:12:2c:d0:de:88:0f:ac:64:b0:07:1b:47:47:fd:
18:3e:96:3e:52:8a:26:d5:7f:b8:d9:f2:e6:fe:50:
43:57:81:be:3a:5d:4f:3f:75:d7:c6:06:69:c1:d0:
9c:dd:ed:c7:d3:a5:04:f2:db:b8:3c:e2:93:93:64:
38:ff:9c:08:d5:e8:63:e1:3b:08:7d:c3:10:f9:6b:
82:97:d5:a0:ba:d4:df:c6:bd:ce:e9:da:72:73:b9:
80:c8:e7:02:f4:5d:76:ad:b1:5b:a5:96:9e:43:9d:
bf:a1:55:d5:5b:8f:38:dc:20:6d:97:6e:b0:f8:18:
5a:d2:a0:81:1c:13:ca:be:db:21:44:9d:d6:34:2f:
4c:46:34:95:c0:65:30:a5:a9:af:99:d5:f3:52:be:
82:17:be:8a:4b:bd:33:b6:7a:82:3e:b4:cc:d5:d9:
45:a6:ae:fe:93:34:73:24:30:60:e8:c0:55:36:cc:
36:da:a4:d8:19:19:97:c1:83:f8:19:89:fa:68:32:
81:d0:51:b6:f7:ba:60:78:fc:d3:6c:a5:53:4c:7f:
4a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9D:56:BC:91:32:66:D2:1C:3E:E2:95:DE:20:BE:D9:97:07:4D:95
X509v3 Authority Key Identifier:
keyid:1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/72A4B3E4AFBE11EABFE7940FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
148.66.128.0/19
Signature Algorithm: sha256WithRSAEncryption
77:6e:0a:dd:90:7e:87:95:f6:26:37:a6:a6:8c:52:f6:27:cc:
67:e7:29:0f:36:1f:47:4f:d1:71:36:44:81:2e:44:f3:40:10:
25:01:c7:19:20:6f:36:eb:c2:62:3e:50:30:2c:af:b0:f8:b0:
35:ba:d0:32:02:4b:1b:62:7c:2e:7d:e4:87:3e:9b:0e:fd:ca:
0f:6a:7e:76:76:18:6b:da:55:5b:5e:6b:fd:65:60:49:71:56:
ed:f6:a5:cb:9b:30:05:10:cd:d7:9e:57:5c:b4:8c:f6:e1:35:
d0:91:7d:f0:20:20:9c:3e:ec:87:8e:99:8b:f0:73:82:58:50:
6f:2a:e3:bd:fd:8c:a2:90:84:3a:47:52:fe:17:4c:e6:0c:ec:
3a:46:3f:eb:1d:9a:32:8c:cb:55:57:f6:ff:de:5a:94:87:0b:
00:22:fc:c4:8f:a6:8e:e4:ce:c9:ac:7d:1f:f1:cf:ca:5b:6c:
0c:be:2e:27:00:fa:e6:48:17:79:a0:20:c9:8d:42:f8:85:37:
0a:33:ee:44:0f:0c:46:fd:5b:10:93:70:8b:3d:c0:1c:82:ec:
20:58:f7:d0:ee:5d:e4:c3:e1:a3:a2:87:86:43:2b:17:c3:10:
46:95:98:be:0e:bc:fc:3f:b6:95:b5:7b:61:93:4f:1c:3d:d8:
00:5a:35:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 31 19:29:15 2023 by rpki-client on console-fra.rpki-client.org