Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/26618A8E5B6E11EEB9E66626C4F9AE02.roa
File: 26618A8E5B6E11EEB9E66626C4F9AE02.roa (raw, json)
Hash identifier: knsfzzc8aJJ9dzHeft3DbLQOB03EncjG7g/ND+MHYzk=
Subject key identifier: 4F:C2:90:3A:0F:24:E3:8F:9C:30:2B:F0:B2:A9:70:5B:89:6F:3E:4F
Certificate issuer: /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Certificate serial: 1CDD
Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/26618A8E5B6E11EEB9E66626C4F9AE02.roa
Signing time: Mon 25 Sep 2023 06:38:34 +0000
ROA not before: Mon 25 Sep 2023 06:38:34 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 151624
IP address blocks: 45.251.128.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 11:36:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7389 (0x1cdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Validity
Not Before: Sep 25 06:38:34 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65112aea-0b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:32:6a:27:3c:81:b6:67:2a:5a:18:23:a9:
e6:b0:9b:56:f8:90:5d:08:c8:96:d2:b5:8a:94:07:
55:28:f9:36:fe:ef:7f:f5:cb:b8:8d:f3:70:9b:7f:
53:72:83:94:a1:a2:94:e7:a1:26:1c:4a:cc:7e:40:
23:cf:eb:17:5d:a5:0c:c8:f4:2f:90:72:c9:0b:4f:
e3:08:19:52:c6:69:16:a5:eb:1b:45:b5:67:c8:5d:
64:5b:b8:14:7c:1f:79:44:a4:6e:9d:6a:92:67:fd:
36:26:cb:ca:0b:cd:06:6e:f8:9b:88:a8:f0:08:53:
83:d6:1a:74:76:14:76:0e:93:c5:43:d1:59:a4:e5:
17:ba:e8:d5:32:12:38:9f:6d:41:c5:c0:80:ca:13:
65:4b:05:94:a9:00:20:ad:38:62:e6:f1:5c:a0:85:
b5:63:b8:e9:f3:6c:91:c2:6f:69:05:d6:d0:b6:e9:
e0:2c:98:1b:cc:31:aa:f3:d4:7c:70:bb:9f:4c:ff:
5f:ac:ef:74:1d:c2:03:0c:fd:4e:cd:5e:88:5d:e8:
4d:4b:23:6a:e2:9c:a2:f0:d0:96:fd:5c:ec:8e:44:
df:e0:44:55:25:49:21:79:59:d3:77:89:5b:23:09:
5f:cd:e5:66:ed:07:cf:c8:3e:de:d3:c2:68:85:13:
b5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C2:90:3A:0F:24:E3:8F:9C:30:2B:F0:B2:A9:70:5B:89:6F:3E:4F
X509v3 Authority Key Identifier:
keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/26618A8E5B6E11EEB9E66626C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.251.128.0/22
Signature Algorithm: sha256WithRSAEncryption
43:45:cc:a6:a6:e6:8c:c4:1a:24:d6:25:df:c2:8b:f4:0e:29:
3e:77:c3:9e:60:4d:08:c0:95:d7:44:46:ca:82:b6:2e:8b:96:
6f:59:74:a5:99:f4:c1:b8:46:21:40:71:8b:a2:64:5a:dd:66:
da:7d:92:8c:9f:50:82:2c:16:e8:f8:e3:95:cb:65:4e:e0:19:
5d:ce:07:e1:da:66:04:89:3c:6d:69:10:bf:b5:f4:3f:4b:07:
eb:51:30:c1:19:1a:bf:65:d4:9c:97:5b:f3:1c:d3:b6:d2:2a:
32:3a:ee:02:2e:ed:41:2d:b8:e7:33:0a:20:9e:17:48:94:fe:
3a:54:1c:a7:44:4f:ce:04:ba:ca:0c:da:f4:0d:45:8f:fa:4c:
57:d4:fa:e6:3e:aa:90:e3:31:ac:30:8a:86:70:74:df:b7:e1:
ee:1e:ee:3c:33:85:03:53:b9:4f:5f:1e:f3:ea:63:50:17:d7:
b9:c9:9c:dc:d0:01:01:48:3f:b1:96:51:6d:5b:dd:9a:e4:00:
58:b6:d4:60:11:5f:53:95:67:49:42:7b:a1:cb:e2:60:81:46:
fd:8a:e7:b2:1c:d7:93:09:2a:f0:ac:0d:f4:75:ec:57:38:e2:
59:2e:9e:3f:0c:e2:f4:61:05:5d:32:c4:8c:68:ff:72:2b:3c:
f0:41:69:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:41 2024 by rpki-client on console-fra.rpki-client.org