Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/DD5AECB2993211ECBAEF4461C4F9AE02.roa
File: DD5AECB2993211ECBAEF4461C4F9AE02.roa (raw, json)
Hash identifier: vq2EAHfJ7p1ZM+nDFNRuqCNof84vcoGZEbX0LXsO9lQ=
Subject key identifier: 7F:67:7C:B8:8F:B1:80:FD:0B:91:E3:25:C8:48:19:65:4B:14:92:B7
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3429
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/DD5AECB2993211ECBAEF4461C4F9AE02.roa
Signing time: Sat 06 May 2023 14:50:34 +0000
ROA not before: Sat 06 May 2023 14:50:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139088
IP address blocks: 115.186.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13353 (0x3429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: May 6 14:50:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64566939-5e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:82:16:0e:8a:dd:b3:84:df:7d:dd:c9:1b:
07:b0:98:7a:67:c9:e8:b5:23:c9:e2:d4:c5:61:f7:
80:b0:41:2b:4d:f3:4a:7b:f8:0c:91:49:c8:f0:a3:
a1:16:36:12:95:b8:49:2c:fe:a9:42:37:d7:d4:59:
7c:36:ac:3e:ea:59:38:ee:6f:5b:da:29:ac:5a:9a:
10:f4:55:a5:cd:5e:cd:54:9c:fb:52:c3:11:0c:5d:
c6:97:d1:4f:da:da:4e:3d:20:a3:80:e0:b6:60:50:
3d:34:44:f1:30:77:65:6a:40:05:ab:60:82:12:b9:
46:32:8c:3c:7b:38:6c:03:dc:2f:05:dd:76:32:27:
a5:09:ba:1a:82:ed:ec:49:f8:40:78:a4:b2:e5:d7:
e7:d3:4b:01:ec:16:23:2b:4d:ce:53:95:d7:3f:fb:
be:2c:ae:f2:97:75:8d:7e:31:8f:dd:df:36:9c:2d:
e8:1c:4e:0c:42:80:45:0f:6f:05:f2:08:35:6b:fd:
e3:02:8a:b0:b3:9c:fb:47:46:46:80:70:ed:9b:89:
bc:af:7b:3c:57:7d:67:05:92:7e:49:5f:d4:cc:2e:
93:09:ff:d3:da:ec:0c:e3:a3:5b:50:79:5b:09:0b:
09:ad:fe:26:4e:c5:44:61:f6:f0:f7:05:0e:a9:cb:
99:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:67:7C:B8:8F:B1:80:FD:0B:91:E3:25:C8:48:19:65:4B:14:92:B7
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/DD5AECB2993211ECBAEF4461C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.186.45.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:90:86:a3:25:1e:77:28:3f:31:bb:e8:63:9e:4d:08:1d:55:
6d:45:bf:8e:0c:77:52:28:b7:60:1d:da:77:0b:42:80:92:58:
b1:98:5e:b1:05:8a:59:22:39:b7:a6:59:fb:57:93:12:b0:34:
71:34:15:4d:95:19:5f:51:c9:f3:cf:e6:c6:3e:4d:54:22:92:
7b:20:aa:41:96:d9:83:f0:38:a0:e1:17:d0:0a:f9:3d:a1:c8:
47:50:4f:3d:e8:62:a2:fb:bc:be:f2:0a:cc:4a:5b:ae:e9:38:
05:cc:e7:af:a7:c3:8f:48:e8:26:7a:fd:ae:dd:8f:30:29:95:
ef:16:fb:84:61:21:bd:a0:f4:8e:dd:48:79:3f:10:b4:79:3f:
ed:12:84:f8:9d:ac:46:84:d0:ea:e9:fa:a0:a6:cf:24:45:f5:
fb:27:06:76:f2:b8:16:51:5e:81:48:93:52:77:77:5f:8e:d0:
98:ab:39:89:16:fc:33:66:d1:1c:a0:ac:57:cd:81:f1:2e:a7:
80:81:39:fa:10:5d:36:61:7b:eb:ea:16:98:1e:4a:18:7f:99:
0a:5e:d6:8f:5f:f2:36:62:28:9a:a1:ad:8c:fa:a4:0a:73:de:
73:22:61:da:22:8d:ff:a8:07:9d:71:41:b6:63:df:bd:65:6b:
84:d6:0c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 09:24:02 2023 by rpki-client on console-fra.rpki-client.org