Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/23830F527DCB11EEB9150234C4F9AE02.roa
File: 23830F527DCB11EEB9150234C4F9AE02.roa (raw, json)
Hash identifier: esbguvNbTDqLBXfU1dWv7AwKtnR89oeN78wFM8ZT+T8=
Subject key identifier: 82:94:90:AC:0A:B0:0A:04:07:D6:CD:8D:AF:E7:19:BE:D6:1D:71:5A
Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44
Certificate serial: 31
Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/23830F527DCB11EEB9150234C4F9AE02.roa
Signing time: Wed 08 Nov 2023 00:09:52 +0000
ROA not before: Wed 08 Nov 2023 00:09:52 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 151633
IP address blocks: 45.249.226.0/25 maxlen: 25
Validation: Failed, certificate revoked on Thu 09 Nov 2023 23:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44
Validity
Not Before: Nov 8 00:09:52 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=654ad1d0-4969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:73:4f:be:9a:60:cd:11:f6:33:15:d2:24:
21:40:4b:4f:03:a2:b7:95:b2:cd:f2:e3:37:84:83:
83:a4:b5:11:26:b4:7c:10:27:e8:00:b3:2a:45:b2:
e4:c9:3e:40:83:04:4f:e6:64:6d:1b:49:54:e9:d7:
68:42:d9:d1:7d:fd:47:14:6d:e8:25:d8:0d:8e:b6:
7b:2d:69:ab:3c:4a:bb:60:4e:5c:f1:4d:23:ec:d2:
d7:e1:d4:0c:98:cb:e6:8f:a4:77:88:0f:3a:99:5c:
28:32:0a:5d:66:c4:ac:56:c7:07:2c:de:be:a0:d5:
88:c9:fc:79:05:d5:ae:a8:ab:12:10:b1:db:14:24:
2e:32:02:72:40:64:63:ef:ae:83:85:44:d2:be:14:
7f:87:4b:b3:34:6a:f0:cb:c0:98:8f:a7:9b:5f:23:
c4:46:0e:37:c8:95:9e:d9:f1:f2:8d:4d:34:14:ea:
65:5c:4b:05:e8:ee:c1:33:7b:b2:31:b6:02:2c:28:
8f:d4:a3:5d:bb:af:6f:86:41:08:c6:43:1b:05:d9:
78:ab:a2:76:8e:40:f6:8b:2d:2b:70:47:d5:20:ae:
5b:4c:66:34:49:da:88:fb:a8:8b:e3:55:50:52:e8:
d3:9b:3e:3d:46:f4:7b:f5:3b:6c:3c:44:d2:4b:50:
2c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:94:90:AC:0A:B0:0A:04:07:D6:CD:8D:AF:E7:19:BE:D6:1D:71:5A
X509v3 Authority Key Identifier:
keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/23830F527DCB11EEB9150234C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.249.226.0/25
Signature Algorithm: sha256WithRSAEncryption
56:c4:7a:57:41:d4:75:91:ca:27:bb:80:d7:c3:64:e7:45:ee:
81:50:d5:33:e5:12:07:51:e1:be:74:dd:33:0d:97:4d:b8:96:
b6:3d:f0:9b:ff:c8:d5:3f:50:7e:90:dd:39:0d:c5:90:a8:4f:
11:1e:6e:79:07:1d:c6:17:e0:3a:cc:ee:93:63:eb:ef:36:66:
fd:d2:99:ab:5e:56:5b:5d:8d:d6:4e:6d:97:8c:6c:a3:f8:b5:
6d:93:58:23:2f:b1:30:36:e7:6e:cf:1f:b5:bd:ec:42:32:69:
5e:25:12:b4:68:67:a6:e7:0b:2d:57:fd:07:20:44:56:b5:aa:
48:4b:8d:e6:ed:8d:d6:a8:30:58:79:79:11:c7:1b:d2:cc:64:
cf:11:b6:a4:f3:a3:cc:3d:8b:a0:a0:5f:5a:34:cc:88:b2:0c:
ad:74:d4:13:7d:d3:2b:93:36:93:42:76:59:f2:dd:5f:25:6d:
e3:67:de:69:9f:18:cf:75:81:2a:52:ad:f1:4e:07:ec:18:a0:
14:4a:50:3a:b2:e7:60:7c:3e:d6:d9:66:61:d8:77:b5:19:62:
f2:0e:17:e7:6f:b7:9d:57:05:b3:b3:96:bb:82:e6:ab:a0:35:
87:e7:67:ff:63:1d:a9:b2:26:e9:db:8d:4a:5a:69:98:a8:bf:
ed:2c:a7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org