Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/30C90B2251C911EEAFE48854C4F9AE02.roa
File: 30C90B2251C911EEAFE48854C4F9AE02.roa (raw, json)
Hash identifier: k1SCGs2TkEAwj7r12I9w5rvwV6d1s/Y3DHMgEqj51ww=
Subject key identifier: 22:DC:32:71:B6:E3:69:3D:AC:2E:FD:10:FD:9B:E6:8F:14:65:76:F4
Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial: 064E
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/30C90B2251C911EEAFE48854C4F9AE02.roa
Signing time: Wed 13 Sep 2023 00:05:04 +0000
ROA not before: Wed 13 Sep 2023 00:05:04 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.114.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1614 (0x64e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Validity
Not Before: Sep 13 00:05:04 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6500fcb0-8684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:49:6e:9d:ed:29:1d:20:cd:b9:84:ac:4b:
15:78:87:fd:94:5c:96:d2:a7:7b:36:d4:f0:71:88:
14:a3:09:47:83:48:1b:27:de:c7:a8:32:0b:87:c8:
97:01:8a:3f:6d:7f:3a:d1:ee:dd:eb:73:4c:51:b0:
5d:3d:46:65:65:c0:cf:5d:64:39:6f:57:e5:56:f0:
cf:41:a8:ef:e1:8f:60:20:9e:fb:22:42:f3:3f:07:
0c:57:2b:03:7e:d4:b6:12:2d:92:da:99:92:ec:ff:
53:f4:d7:37:c8:64:72:1b:d8:af:8d:8d:c8:cb:e1:
15:62:88:56:14:10:d5:2c:37:8a:42:01:e9:d4:6c:
a8:ee:e4:f2:1e:da:e8:bc:db:a0:53:c9:d8:8d:cf:
a7:c7:ce:70:91:f1:d4:a0:e0:b1:ec:91:02:de:49:
97:1b:4d:1c:77:9e:53:c7:8d:ae:a0:7f:ef:f4:7c:
71:e1:e3:2d:1f:a0:83:49:2c:70:5a:eb:7d:b6:02:
75:b1:d2:e4:94:2e:17:a4:9e:25:5f:52:a6:06:b6:
08:5a:a3:57:ec:14:01:44:7f:22:ae:6e:b7:de:fd:
a8:c1:af:62:46:6a:44:2f:50:88:e7:f8:70:73:c2:
b5:5e:f4:a0:b3:8a:e2:e3:fc:c7:a7:5a:46:cc:1c:
94:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DC:32:71:B6:E3:69:3D:AC:2E:FD:10:FD:9B:E6:8F:14:65:76:F4
X509v3 Authority Key Identifier:
keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/30C90B2251C911EEAFE48854C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.114.189.0/24
Signature Algorithm: sha256WithRSAEncryption
95:6f:7b:1d:96:80:66:aa:80:97:70:6e:6e:0f:55:c7:a1:65:
7b:f2:ce:4e:bf:3d:01:20:6e:49:e6:cc:db:7f:4c:b2:9b:a4:
06:4b:67:b9:b9:8c:ff:df:81:22:11:97:18:9d:c8:c9:45:e5:
45:7d:5d:8e:10:9d:0e:67:70:88:bf:5a:99:55:d3:8a:f2:7f:
03:22:7d:1a:95:24:d8:b5:d4:94:87:65:77:cb:8a:2f:b3:27:
54:24:29:bf:9e:9a:76:30:4f:33:ff:1d:8e:d5:68:1d:cc:ec:
1c:7b:ef:1b:65:a9:40:15:f8:c5:1b:9d:73:53:46:4d:fb:46:
21:a6:93:29:a3:e3:35:96:16:0e:38:72:cb:78:d8:c4:98:8b:
ea:6a:ff:6b:86:a9:47:dd:22:42:3f:eb:8b:43:aa:08:f7:bc:
6d:a4:23:5d:ed:9d:7d:b8:e7:c6:fb:a2:61:62:2b:e9:0f:dd:
78:1d:4f:37:a1:a1:ff:e2:bc:14:51:63:ca:ba:89:9f:2e:d3:
ef:9e:3d:1d:f7:c3:a0:22:b6:79:65:8c:cb:2e:db:e5:44:df:
ab:92:83:27:ab:fc:44:fe:0c:a6:ae:2d:f2:09:6a:47:d5:62:
3a:8f:0d:2b:fb:ba:ea:ed:63:2a:aa:7f:86:b5:06:34:db:e3:
22:44:51:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 21 21:30:34 2023 by rpki-client on console-fra.rpki-client.org