Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128963/986B18648DFC11E990231648C4F9AE02/B0E612908EE711E9AFB50F63C4F9AE02.roa
File: B0E612908EE711E9AFB50F63C4F9AE02.roa (raw, json)
Hash identifier: c6FJlxv+je4xUaKHaqGECbr+1Sdn2cH67zPCH/JMWgs=
Subject key identifier: 05:7B:7B:F2:40:A9:E7:A9:EF:55:EA:41:12:2C:CC:F8:80:8D:79:95
Certificate issuer: /CN=A9128963/serialNumber=7B5FB6970D374BFF75872EB87DBB4030437A6188
Certificate serial: 0D41
Authority key identifier: 7B:5F:B6:97:0D:37:4B:FF:75:87:2E:B8:7D:BB:40:30:43:7A:61:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1-2lw03S_91hy64fbtAMEN6YYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128963/986B18648DFC11E990231648C4F9AE02/B0E612908EE711E9AFB50F63C4F9AE02.roa
Signing time: Fri 02 Jun 2023 19:29:19 +0000
ROA not before: Fri 02 Jun 2023 19:29:19 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 14618
IP address blocks: 45.250.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3393 (0xd41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128963/serialNumber=7B5FB6970D374BFF75872EB87DBB4030437A6188
Validity
Not Before: Jun 2 19:29:19 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=647a430f-e7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a6:d2:62:8b:b9:72:35:67:e7:23:88:a9:e6:
14:8b:bc:8e:49:33:39:ce:32:0b:9b:f8:61:3b:dd:
0f:a4:44:84:be:b7:9c:c8:e9:a6:18:b7:d3:14:dd:
f2:7c:d1:00:18:aa:8a:62:b3:d5:56:3f:8f:dc:41:
48:c4:f9:a5:77:38:07:8e:7c:cc:0e:66:ad:2d:04:
34:f9:f4:58:88:ec:88:4a:1a:55:45:d3:63:be:57:
ad:ab:ac:eb:ca:c6:bc:a9:f5:57:ba:81:d8:18:09:
eb:36:e0:2d:c5:0e:43:2c:ca:11:37:92:2f:f9:5c:
68:1d:0e:5a:9e:25:b3:8e:de:cc:9d:29:f0:9c:9a:
46:83:f9:a5:a3:3d:19:85:27:20:2c:7d:d8:c7:3f:
1d:cd:5c:1a:34:e9:ae:73:a5:e1:3e:bb:65:29:f6:
5c:57:99:e8:b0:9d:83:04:5c:3b:42:56:1a:0b:24:
26:fe:93:e1:8b:b8:83:3e:c7:cd:5e:c8:b0:67:7e:
d9:af:88:57:ce:ef:26:b9:8a:db:d6:5a:ed:e7:da:
f2:d2:4f:2b:be:d4:ba:07:ad:4a:ac:f3:70:f2:eb:
86:34:f4:4b:6b:42:5d:c6:a2:de:41:4a:3b:f3:eb:
55:cd:2f:b3:0f:03:dc:56:c4:5c:2c:93:3f:8a:ee:
a6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7B:7B:F2:40:A9:E7:A9:EF:55:EA:41:12:2C:CC:F8:80:8D:79:95
X509v3 Authority Key Identifier:
keyid:7B:5F:B6:97:0D:37:4B:FF:75:87:2E:B8:7D:BB:40:30:43:7A:61:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128963/986B18648DFC11E990231648C4F9AE02/e1-2lw03S_91hy64fbtAMEN6YYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1-2lw03S_91hy64fbtAMEN6YYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128963/986B18648DFC11E990231648C4F9AE02/B0E612908EE711E9AFB50F63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.250.63.0/24
Signature Algorithm: sha256WithRSAEncryption
04:72:18:74:5c:e9:3f:58:94:cc:6c:de:c3:bf:f0:eb:1b:7d:
08:54:71:18:52:fe:25:1c:b5:de:42:f0:a5:09:8c:52:6b:87:
7e:67:ca:3a:d2:7e:45:68:cf:7f:9a:12:4e:7a:be:2b:7d:0b:
97:2a:96:c2:6d:7e:f0:bb:3c:45:13:7f:af:50:06:fe:0e:c5:
56:84:b4:39:ae:24:c8:0d:2c:a8:68:da:f2:88:a6:fc:00:df:
c8:42:4d:02:39:62:d1:3a:2c:16:60:36:fd:76:57:08:53:50:
55:c6:db:31:fe:18:fc:9e:80:50:3e:c6:1e:cd:63:ef:be:6a:
9e:df:04:9e:32:cb:d5:bd:d3:42:31:25:2a:c2:7e:4d:9e:b6:
09:d7:41:43:93:15:d9:28:2c:67:5f:ae:81:ca:77:9e:15:4e:
9b:b0:68:7c:ea:41:2a:2e:66:a2:34:50:6c:a7:8c:b9:6c:08:
07:d0:54:aa:ee:76:e5:80:2d:00:de:b5:f7:0f:15:52:fb:30:
d5:ca:10:fa:16:7e:85:79:1e:0b:3b:68:4c:fc:64:20:05:9e:
97:48:01:26:af:35:44:b2:26:7a:ca:3c:43:6c:d6:0b:62:08:
c5:1b:0d:20:20:5c:30:e9:79:d1:e1:c1:b9:35:08:8f:a6:01:
ce:a5:35:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 14:05:17 2023 by rpki-client on console-fra.rpki-client.org