Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/21E2BFDAD2EF11EDAE3FC25FC4F9AE02.roa
File: 21E2BFDAD2EF11EDAE3FC25FC4F9AE02.roa (raw, json)
Hash identifier: RfZRe5AfoKnKc25VqJJfbDOYdwAKOjs/dyXEfs3NpZg=
Subject key identifier: EC:88:0C:B4:6C:F6:3B:D5:58:E3:C3:75:DF:5C:39:AE:14:7B:11:7D
Certificate issuer: /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
Certificate serial: 25
Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/21E2BFDAD2EF11EDAE3FC25FC4F9AE02.roa
Signing time: Sat 03 Jun 2023 08:17:28 +0000
ROA not before: Sat 03 Jun 2023 08:17:28 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 134190
IP address blocks: 45.117.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 07:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
Validity
Not Before: Jun 3 08:17:28 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=647af717-ceeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a2:4b:35:59:0b:ac:a1:61:07:79:4e:a8:b5:
76:eb:6c:2a:1e:0b:f9:ac:bf:95:37:73:83:f9:d2:
02:04:51:a3:a1:f0:9b:9a:f8:60:73:30:5d:da:de:
55:aa:49:9c:0b:ca:ba:69:bc:f6:d6:a0:59:cb:7b:
89:2a:17:da:a3:e0:2e:e7:86:f5:00:a1:73:ff:fa:
ea:df:82:a6:f3:c2:c2:4b:3b:12:37:bd:ae:24:bb:
6b:ca:36:21:1d:ba:02:bc:52:00:69:e1:9a:74:bd:
6e:45:24:ba:87:68:37:88:f8:43:65:94:da:df:65:
d4:73:91:20:38:9f:cb:a4:67:7f:f9:49:b2:ec:f4:
0e:b1:01:c1:9d:84:e1:1e:2c:5b:25:d0:29:36:0f:
d4:53:d2:b1:e0:71:a8:13:5e:c3:7f:9c:04:1e:b2:
d5:22:fc:ba:0d:d4:51:19:9e:30:a6:34:46:ff:f2:
a9:06:14:9d:86:ef:6b:90:f8:0b:9d:aa:db:75:dc:
ea:6a:89:f1:2f:0d:c9:0c:1f:37:f2:f3:b0:38:15:
17:b2:d5:7c:90:d2:a1:7d:68:5b:60:2a:bf:84:53:
60:b9:61:dd:e1:0c:97:c2:5f:ef:02:0a:1f:a4:ad:
6e:26:1e:fe:a6:e1:cb:12:f9:5b:39:d7:be:8d:f9:
57:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:88:0C:B4:6C:F6:3B:D5:58:E3:C3:75:DF:5C:39:AE:14:7B:11:7D
X509v3 Authority Key Identifier:
keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/21E2BFDAD2EF11EDAE3FC25FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ad:51:b8:22:5a:a2:83:00:bd:09:03:4c:e7:5e:7a:31:d8:
f6:b1:67:21:e5:99:c5:22:62:71:b6:0c:9e:fa:20:45:2d:d8:
c8:66:8e:e5:a3:82:8a:c5:61:b4:64:64:3e:6a:8e:7a:97:8d:
ed:1d:9a:e0:c3:1f:69:84:19:1b:97:a4:35:bd:e9:83:64:8f:
72:9d:bf:0f:25:d9:a8:62:7f:3d:06:20:04:dc:d0:ce:fc:5d:
ca:b4:f0:e8:05:42:b1:5d:19:2b:0e:e9:81:81:7b:fb:25:fa:
b0:97:6b:d9:b5:cf:1b:77:bc:8f:88:55:92:2c:61:e1:12:ea:
58:b2:35:dc:47:01:f3:7e:43:9e:5f:ec:2e:47:58:3c:c8:85:
4b:4e:11:0f:db:af:c0:57:35:61:9c:24:90:73:67:e3:df:ef:
df:da:d3:0a:ba:54:3f:84:cb:af:52:b9:81:fb:da:7d:27:d8:
73:37:00:5c:b6:4e:3a:73:08:70:b9:bd:97:f0:07:4a:fd:ff:
95:79:fb:23:b3:79:24:57:7f:a2:ec:b5:5f:f6:af:41:51:52:
35:56:46:8c:02:a3:d2:7e:14:17:1c:fc:7b:ee:3c:6c:17:79:
3e:fe:ef:02:0d:79:65:7b:f3:6e:b1:e8:87:18:1d:27:bd:52:
a4:b3:6c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:44 2024 by rpki-client on console-fra.rpki-client.org