Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/A15457A4B50911EEBD057F31C4F9AE02.roa
File: A15457A4B50911EEBD057F31C4F9AE02.roa (raw, json)
Hash identifier: BgYUxC1G9K/EWfgpPe5EN+67sOue+t3iw0OFtx+JyX8=
Subject key identifier: D7:89:5D:C2:EF:92:02:AF:25:36:82:C4:6D:13:9D:57:DF:FD:F2:C2
Certificate issuer: /CN=A914EC08/serialNumber=D1B8E671973559020F8703D17DCD892692E640A2
Certificate serial: F3
Authority key identifier: D1:B8:E6:71:97:35:59:02:0F:87:03:D1:7D:CD:89:26:92:E6:40:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/A15457A4B50911EEBD057F31C4F9AE02.roa
Signing time: Wed 17 Jan 2024 07:25:46 +0000
ROA not before: Wed 17 Jan 2024 07:25:46 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 13999
IP address blocks: 45.127.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 04:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EC08/serialNumber=D1B8E671973559020F8703D17DCD892692E640A2
Validity
Not Before: Jan 17 07:25:46 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65a780fa-5332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8e:fb:3c:72:5c:07:8c:38:d7:f2:83:6c:a1:
0d:04:57:e0:f4:55:68:72:ef:74:ca:35:b1:df:2e:
5c:ba:3d:9f:84:71:bf:5d:b5:d4:4e:62:b6:2c:e6:
09:ab:30:24:a6:a1:b8:ff:c6:e7:35:03:3d:94:d0:
4c:22:b8:25:d4:c7:c6:de:c9:ab:29:e3:ff:2a:f0:
7e:8a:e7:8c:e1:01:29:d1:0c:c6:29:cf:83:10:08:
6a:73:13:8f:5d:53:0a:4f:26:38:34:ef:a6:e3:59:
5b:6e:33:5a:4e:7f:bb:29:5d:38:51:12:13:3a:22:
3e:b9:b7:3d:47:a2:04:38:8a:9e:42:24:40:7a:2a:
80:2c:e1:0c:fd:8b:c3:79:a2:33:69:1a:9f:79:09:
82:90:43:bc:7b:bd:c8:7f:9c:41:0c:41:40:af:db:
b6:a4:5c:16:81:2d:f9:c3:1a:55:04:d0:e4:02:16:
8d:53:04:a6:88:89:1a:fb:3c:27:35:0d:f0:72:74:
69:ef:46:b3:9c:94:b7:b4:61:e6:11:48:43:0b:e3:
1e:d2:02:c6:51:0a:6c:d6:e6:9a:57:97:d2:b4:3a:
d2:c8:97:1a:f7:d8:1b:6a:12:b1:4f:b0:3d:b6:ff:
51:79:7a:57:a3:20:f8:f1:1c:1f:14:38:87:f8:e3:
87:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:89:5D:C2:EF:92:02:AF:25:36:82:C4:6D:13:9D:57:DF:FD:F2:C2
X509v3 Authority Key Identifier:
keyid:D1:B8:E6:71:97:35:59:02:0F:87:03:D1:7D:CD:89:26:92:E6:40:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/A15457A4B50911EEBD057F31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.127.192.0/24
Signature Algorithm: sha256WithRSAEncryption
25:9d:99:a0:8a:f7:7c:8f:5e:6c:09:85:79:ce:d5:6b:fa:a9:
3d:0c:08:ac:ac:31:ed:c6:ad:1e:5b:cd:44:3e:b7:59:33:d2:
4c:e9:32:06:8e:43:a3:74:4e:1c:4a:14:7d:d9:21:cd:c0:67:
55:c8:54:2d:0b:61:e9:cf:e5:09:1d:1f:81:cb:d3:b1:2d:c3:
cc:2e:b0:61:21:04:a0:8a:9e:58:21:6c:b3:54:41:65:96:9c:
08:c6:58:d3:31:6c:96:1b:fa:c3:51:86:d2:e6:d0:65:7f:ab:
33:ef:8c:14:0f:51:d3:fc:44:d2:0f:b7:dc:3c:f5:cb:10:1b:
e7:11:70:f5:c0:6b:db:6e:29:1a:f0:13:d0:91:46:58:f4:3c:
65:5d:cb:64:ce:6f:ae:7b:5d:c8:e0:92:f9:62:37:18:93:ca:
b2:54:97:10:fd:e4:63:6c:2f:45:f5:3d:97:2f:6d:40:42:c0:
53:f2:a6:ea:4b:6f:cf:8c:13:5a:63:94:3f:0b:e0:b8:52:67:
87:30:78:6c:d1:e3:66:f5:06:7d:da:55:f8:ae:4b:14:0f:a5:
30:7b:a3:17:73:86:14:e5:96:6f:48:c5:0e:cf:8a:d1:e7:0c:
4c:63:8e:77:24:8e:2d:1a:38:29:f1:61:84:f2:e6:02:37:2d:
29:ed:48:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 06:12:23 2024 by rpki-client on console-ams.rpki-client.org