Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/F174AED03A3911EB908EED26C4F9AE02.roa
File: F174AED03A3911EB908EED26C4F9AE02.roa (raw, json)
Hash identifier: q2JyO4sw+eFQDT53a8oTIh5GOPSbZ3+m9MyFDY/cZ1Y=
Subject key identifier: 05:0A:7C:75:58:AB:BE:C6:B0:44:72:87:04:B9:22:A9:D2:6F:0C:AC
Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial: 0604
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/F174AED03A3911EB908EED26C4F9AE02.roa
Signing time: Wed 31 May 2023 00:57:22 +0000
ROA not before: Wed 31 May 2023 00:57:22 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 62579
IP address blocks: 45.114.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Dec 2023 00:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1540 (0x604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Validity
Not Before: May 31 00:57:22 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64769b72-0e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:57:ec:2f:c9:87:c3:7b:47:87:de:68:1f:
f6:38:c7:20:ff:c9:59:ee:26:93:72:05:db:e3:ac:
3e:fb:7d:d6:90:3b:c0:17:a0:a1:7c:f5:60:21:39:
0b:39:57:36:69:14:3f:21:12:c0:45:86:91:2d:40:
83:ad:cd:2e:92:70:81:46:15:1f:8c:5a:d0:85:eb:
4b:a2:32:36:c4:4c:d0:14:10:77:54:7d:4d:52:0b:
03:a9:10:90:b5:43:41:c4:7f:43:00:47:8a:9b:63:
48:b8:fb:a1:cf:9a:26:24:b8:59:9c:e4:32:7c:b4:
24:63:3d:a9:b3:62:d7:68:b8:14:ab:df:69:b1:d6:
d5:27:5c:be:6c:14:cd:1e:08:79:a2:e9:c1:1b:23:
6c:2f:d1:9f:71:ec:83:30:6a:28:88:cc:e2:57:8b:
69:f5:d3:ba:4b:49:58:6a:da:5a:c3:95:86:f3:dc:
2c:ad:e0:1e:e7:83:16:05:65:32:72:d5:60:a4:c4:
c1:6e:af:c5:9a:3d:c7:20:fd:b9:b4:65:f4:4b:3e:
ed:1c:1a:d4:42:07:b8:24:6c:84:75:8b:5e:0a:da:
9e:e1:0d:8f:23:b2:d7:fa:b2:be:aa:ae:ae:a0:6c:
9f:a3:34:6d:6a:2b:19:0f:73:e6:c2:35:9b:be:35:
57:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0A:7C:75:58:AB:BE:C6:B0:44:72:87:04:B9:22:A9:D2:6F:0C:AC
X509v3 Authority Key Identifier:
keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/F174AED03A3911EB908EED26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.114.188.0/24
Signature Algorithm: sha256WithRSAEncryption
16:0f:d3:c7:1e:e7:68:92:d7:60:58:3a:dc:1e:33:a3:28:10:
74:be:5c:3f:74:9f:60:4e:05:fc:9c:13:7c:37:44:dc:42:3d:
6e:66:e4:b6:28:e2:52:31:19:18:ae:e9:87:8b:9d:4b:59:c9:
b5:b6:67:2c:dd:c1:7c:7c:86:04:d1:2b:01:e8:02:85:5e:15:
c4:01:1c:42:19:fb:1f:7d:4f:6f:25:aa:78:87:69:12:87:4b:
2f:ca:08:78:31:2a:18:8a:cc:95:01:36:11:e9:26:0a:f1:29:
f0:b6:8d:07:b0:6d:bb:f6:41:a3:1f:f9:fd:8c:52:6c:de:6d:
6b:3b:99:27:60:37:c4:ba:cc:3e:68:33:51:eb:3d:dc:06:72:
ef:ee:f0:36:e7:ec:c8:65:79:e7:0d:55:6c:da:5f:b2:8a:d3:
87:ec:8e:c9:71:e0:d2:40:0b:e0:cf:1d:60:cf:70:e8:9a:8a:
06:1f:fb:d4:1e:5f:c7:b9:c7:75:f6:80:bf:bb:ed:69:59:a3:
ca:92:a6:17:2f:44:25:b8:79:b8:ce:32:3f:e2:0b:be:0d:75:
6c:32:cd:44:3b:8a:07:3a:7c:6b:25:be:44:68:bd:53:90:95:
56:80:c5:7c:15:5f:f6:f2:0e:87:f9:b7:81:ee:ce:96:2d:60:
32:34:21:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org