Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/FB7A3DC284A511EAB3356318C4F9AE02.roa
File: FB7A3DC284A511EAB3356318C4F9AE02.roa (raw, json)
Hash identifier: cY1Y38eJTm1A4s1R6mv+KXICEi31IH+V6opY58OOBg8=
Subject key identifier: 08:7D:D4:08:0E:33:C0:F5:0B:5E:F0:61:79:EF:27:FF:42:A3:5E:AC
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 262A
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/FB7A3DC284A511EAB3356318C4F9AE02.roa
Signing time: Sun 06 Aug 2023 16:12:52 +0000
ROA not before: Sun 06 Aug 2023 16:12:52 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 138570
IP address blocks: 45.249.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 19:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9770 (0x262a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 6 16:12:52 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64cfc684-eb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e8:ff:6e:84:4a:ce:d1:a0:58:bc:f2:44:41:
ee:b7:7f:da:fb:0c:91:2e:c8:c5:76:ca:c3:06:df:
77:9f:73:dc:b1:43:e7:de:20:f0:e7:39:1a:0a:02:
61:84:bf:15:ba:a0:94:e0:1f:d2:e9:f4:87:39:11:
5e:5c:e7:90:5d:f3:6f:28:b9:23:c0:5b:98:5a:5c:
ff:ea:b9:cc:d9:6e:c8:45:07:cd:f1:8c:af:6f:b5:
eb:09:26:31:fa:f0:79:7b:a5:58:43:f2:6b:7a:c1:
56:1a:5f:82:f7:fd:cf:65:38:42:f1:cf:e9:9c:a8:
25:d7:11:dd:d4:19:cd:fd:b1:17:8d:2a:b9:bc:e2:
39:89:15:af:60:82:68:bc:cc:7b:f9:dd:a1:f6:5a:
94:11:15:e0:62:3a:c0:5c:29:03:73:c9:de:7e:35:
30:a9:61:da:62:e7:90:29:bd:ad:a4:3f:9f:be:83:
89:9a:8a:49:2f:2b:e3:25:1c:f7:3e:28:34:18:40:
cd:d0:15:63:4f:fc:ac:70:e3:10:32:4a:b0:ea:63:
b5:65:9e:5b:c0:35:34:14:8f:49:72:47:d7:73:1b:
1a:89:00:d5:1b:53:85:28:d9:55:34:42:6a:47:c2:
51:3a:37:ee:98:d0:d9:c0:42:f8:b7:23:73:d4:0b:
0d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7D:D4:08:0E:33:C0:F5:0B:5E:F0:61:79:EF:27:FF:42:A3:5E:AC
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/FB7A3DC284A511EAB3356318C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.249.88.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5f:61:e7:b1:6d:88:a8:ee:fe:ac:83:df:3c:8a:27:2f:e8:
ec:1c:a0:b6:24:99:8b:95:45:c9:5f:b5:63:35:36:76:33:1b:
2e:0c:3e:91:37:73:52:76:02:95:74:44:06:82:14:80:22:37:
a2:da:58:50:eb:90:d9:10:df:34:e1:41:bb:07:e0:91:03:53:
a7:b1:77:54:d9:23:ec:ee:5b:96:03:b6:5a:be:54:24:0b:1b:
3c:40:55:d5:14:f8:36:6a:b0:f3:ca:b5:eb:bf:c3:25:98:c6:
06:cb:7c:cb:95:3c:1b:6c:61:07:78:b4:13:1a:e4:46:53:2a:
98:79:2f:ae:0f:44:85:8c:76:f6:9d:c1:e8:5d:d0:1a:50:6a:
7c:3c:10:63:08:a3:b5:a1:8b:b7:e6:db:fe:8d:e5:34:d5:19:
ac:36:8b:08:66:58:64:68:53:be:f8:d6:bc:db:50:5d:54:ef:
51:4d:32:ea:15:9b:9a:53:63:29:32:1c:1d:02:d4:c3:0a:50:
1c:be:6a:31:f2:49:84:61:53:43:dd:8b:89:51:57:5c:3e:75:
ca:cf:e3:ef:3e:4b:0f:75:ac:45:6c:8b:68:d8:0c:f5:e9:13:
db:1c:59:b6:bb:c5:50:50:9e:e9:4a:14:f5:11:04:29:ca:55:
77:4c:ba:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 21:58:39 2024 by rpki-client on console-fra.rpki-client.org