Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128963/986B18648DFC11E990231648C4F9AE02/763AC5EC7A2E11EDAEA27449C4F9AE02.roa
File: 763AC5EC7A2E11EDAEA27449C4F9AE02.roa (raw, json)
Hash identifier: kYkCkR9z7qYZpSDdAlqe/D/hO/xKAlmmGNoJQ1dbKq0=
Subject key identifier: 3D:FA:1D:90:F9:AE:D6:5C:4B:2B:34:F6:00:9D:9B:9F:DE:66:02:4B
Certificate issuer: /CN=A9128963/serialNumber=7B5FB6970D374BFF75872EB87DBB4030437A6188
Certificate serial: 0D43
Authority key identifier: 7B:5F:B6:97:0D:37:4B:FF:75:87:2E:B8:7D:BB:40:30:43:7A:61:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1-2lw03S_91hy64fbtAMEN6YYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128963/986B18648DFC11E990231648C4F9AE02/763AC5EC7A2E11EDAEA27449C4F9AE02.roa
Signing time: Fri 02 Jun 2023 19:29:21 +0000
ROA not before: Fri 02 Jun 2023 19:29:21 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 35829
IP address blocks: 45.250.60.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3395 (0xd43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128963/serialNumber=7B5FB6970D374BFF75872EB87DBB4030437A6188
Validity
Not Before: Jun 2 19:29:21 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=647a4311-5776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:73:04:27:c1:43:13:e5:10:7a:ac:f4:91:
8e:14:46:25:e2:9b:dd:e6:48:00:90:2f:c6:48:00:
21:7e:e4:24:e7:b6:c9:fc:24:ec:f6:35:85:f6:54:
ab:3d:6b:84:5d:23:e1:81:c0:0e:73:c9:97:9e:38:
01:95:fb:bf:5a:01:94:2d:be:56:35:e1:d7:fd:5f:
ae:c5:75:72:2c:82:0e:a1:a1:61:86:fc:74:0e:08:
5d:70:1b:53:33:39:6b:97:2a:ff:e1:8c:94:fe:cb:
cb:57:fc:56:81:c2:10:a4:43:2e:ad:9a:d4:11:d6:
e3:df:23:eb:f5:dd:37:fa:5c:88:22:58:c7:95:76:
a6:21:e3:f0:57:44:88:25:26:0d:52:ab:db:28:5b:
e9:47:8e:ac:e5:65:26:b7:78:bd:b3:41:a7:ab:e9:
d7:11:7d:2f:6f:b7:5c:d1:36:a8:d6:9c:41:50:66:
9b:e5:b9:cb:54:b0:2f:1d:23:03:61:b0:39:0b:c6:
a5:6d:b6:38:77:13:2d:42:70:c1:f0:58:17:6c:9d:
14:bb:d2:c7:47:52:da:83:56:ea:6f:62:69:c8:67:
64:fe:ee:b7:40:01:b6:bf:a1:76:73:8d:6e:c7:fa:
97:78:2b:af:db:0b:10:8d:26:42:d3:d2:06:ef:b4:
74:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FA:1D:90:F9:AE:D6:5C:4B:2B:34:F6:00:9D:9B:9F:DE:66:02:4B
X509v3 Authority Key Identifier:
keyid:7B:5F:B6:97:0D:37:4B:FF:75:87:2E:B8:7D:BB:40:30:43:7A:61:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128963/986B18648DFC11E990231648C4F9AE02/e1-2lw03S_91hy64fbtAMEN6YYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1-2lw03S_91hy64fbtAMEN6YYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128963/986B18648DFC11E990231648C4F9AE02/763AC5EC7A2E11EDAEA27449C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.250.60.0/22
Signature Algorithm: sha256WithRSAEncryption
13:00:76:12:c8:1b:40:ec:28:70:23:49:13:f9:61:05:59:f6:
32:aa:97:4c:b9:31:8d:fd:ff:cb:ff:c7:53:cb:6b:ab:ac:d6:
a2:f8:bd:bf:6d:3d:66:00:78:c7:1f:40:85:a0:1f:09:6d:23:
8d:90:ae:e0:0f:4b:a5:68:e6:77:a0:84:a7:93:b3:2e:e5:80:
1f:dd:cd:b1:f0:d8:43:8b:6b:82:60:ae:12:f8:12:bb:a6:36:
88:ca:d6:2a:61:3a:61:0d:0e:bf:63:00:62:94:bb:4f:b9:f3:
46:61:fa:7a:7d:5c:af:d6:12:f0:03:52:db:26:59:f6:73:fb:
95:16:31:75:50:09:82:b9:d7:26:d6:5a:19:f0:da:1a:2d:64:
c1:38:50:16:7a:ec:5e:83:43:89:ac:b4:4e:0b:24:8a:73:47:
2b:ad:33:fd:e5:f7:f5:28:10:f2:14:4e:6f:7b:54:40:5e:98:
b6:d6:99:a2:ee:5c:b6:7c:1f:c9:c0:6b:81:68:57:03:cd:10:
c7:67:9e:68:52:dc:05:5d:f2:53:e2:28:d2:72:2c:7c:07:fa:
fd:1b:13:1e:25:14:73:9b:f9:67:d2:3b:02:83:52:bf:b3:cc:
b3:83:3d:25:fe:eb:31:43:0b:8e:6d:b2:61:d3:b4:3e:27:4c:
0f:6a:11:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 14:05:17 2023 by rpki-client on console-fra.rpki-client.org