Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/89F791B635AF11EB8957AD18C4F9AE02.roa
File: 89F791B635AF11EB8957AD18C4F9AE02.roa (raw, json)
Hash identifier: 3jazjxrJDHHBfpyyvJTQGBG2UfPBPIMs7Y+MQgscOC0=
Subject key identifier: 8E:ED:80:07:E7:CC:78:B7:87:01:AD:5C:46:2D:B6:12:AE:A2:FB:E5
Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial: 0457
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/89F791B635AF11EB8957AD18C4F9AE02.roa
Signing time: Fri 20 May 2022 00:46:32 +0000
ROA not before: Fri 20 May 2022 00:46:32 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 21321
IP address blocks: 45.114.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1111 (0x457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Validity
Not Before: May 20 00:46:32 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6286e4e8-9ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:97:d3:79:09:3a:28:2f:1b:7f:3e:fb:b9:89:
aa:63:10:ae:5d:b1:3c:43:79:e0:e3:6f:b2:59:e1:
5a:bc:34:75:c4:fc:9d:b4:e5:14:70:b7:40:49:67:
76:79:40:4a:33:9d:dd:cc:36:d3:5b:52:91:12:02:
ab:39:d3:1e:2a:cf:24:1d:3d:02:dc:af:dc:4a:4e:
ca:2a:a9:0a:1c:7c:39:59:39:a1:0e:82:4d:52:f7:
40:9b:37:62:b5:f2:58:4d:b2:fa:1d:54:94:31:cf:
26:bd:3b:91:c1:a0:53:9f:61:df:7c:f3:79:00:e0:
03:8d:ba:78:3a:81:5b:74:ce:ec:f1:f9:81:50:56:
5b:5d:57:41:ec:41:04:74:33:4f:2c:94:0f:6e:37:
af:a3:ac:36:68:19:c6:22:58:0f:6a:45:bf:8b:c9:
9f:db:97:2d:32:10:87:69:6a:76:de:bb:aa:c6:09:
a3:68:58:38:e8:3f:8a:98:67:94:0f:a9:61:d9:a5:
4c:e6:4e:90:84:ef:a1:b3:e8:85:4b:f2:1d:f4:c1:
c4:e4:de:20:38:0c:1e:8a:05:f3:63:dd:44:c8:e7:
45:93:29:f0:1b:3a:94:62:a5:e0:ce:97:f5:cd:f2:
d9:a5:56:ed:7c:58:fe:e6:4d:f4:0e:72:52:85:8b:
ac:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:ED:80:07:E7:CC:78:B7:87:01:AD:5C:46:2D:B6:12:AE:A2:FB:E5
X509v3 Authority Key Identifier:
keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/89F791B635AF11EB8957AD18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.114.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:40:cb:c5:93:31:6c:4d:53:58:ea:01:b3:3d:47:f2:84:74:
bf:78:55:ea:5c:0d:cf:34:e6:e1:4d:39:3f:85:47:57:f0:55:
13:9b:9b:fb:74:b1:f8:d2:e5:7b:c6:4a:58:27:c4:3c:67:08:
b0:49:2e:f4:3a:88:50:b5:43:ea:52:a7:81:8c:8f:e7:fc:5e:
90:88:13:18:a6:f2:55:20:c9:70:27:94:98:76:23:8f:ad:0f:
30:af:b6:d4:c1:26:ce:8c:18:58:b6:86:96:38:35:af:7e:5a:
4d:73:15:0a:53:55:d4:37:61:51:ca:81:05:a3:c3:5f:13:df:
9d:6f:1b:30:5e:fd:74:d3:99:45:b9:14:a4:a2:d0:f6:c7:1c:
95:74:d0:75:fd:8e:27:e5:0a:4c:2d:9b:83:98:52:5c:23:2f:
3e:16:49:14:ff:f9:4b:e5:a3:73:50:95:eb:8f:21:3f:65:fc:
c2:64:44:d5:8c:41:cc:16:25:de:71:67:af:42:c6:b9:eb:b6:
20:af:58:7f:b9:57:6e:82:97:b4:83:96:97:01:06:70:59:48:
a1:22:5f:2a:e6:5d:92:2d:01:fa:fd:db:69:7c:9f:fe:25:db:
cb:fc:3a:3f:95:ea:8f:96:6b:25:1a:f7:da:23:64:67:35:39:
d2:7e:33:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:43 2023 by rpki-client on console-ams.rpki-client.org