Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/00F9EE7867C311EFA6AFCF5BC4F9AE02.roa
File: 00F9EE7867C311EFA6AFCF5BC4F9AE02.roa (raw, json)
Hash identifier: dMVggv9Ywer7IyvVjDHTmmQJ1q60x5s9qTyvC85ESSU=
Subject key identifier: 06:44:8D:9F:63:66:A7:9E:23:B6:B0:44:36:66:18:BF:53:D0:F5:DC
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 0309
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/00F9EE7867C311EFA6AFCF5BC4F9AE02.roa
Signing time: Sat 31 Aug 2024 18:01:10 +0000
ROA not before: Sat 31 Aug 2024 18:01:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.113.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 19:22:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 777 (0x309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2
Validity
Not Before: Aug 31 18:01:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66d35a66-b4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:f5:2b:41:41:78:41:45:00:b6:1e:b3:c0:
cf:9a:28:c3:93:e8:91:f7:0e:7e:a2:9e:ea:8c:3a:
b3:30:2d:e1:bc:8c:03:3e:a2:75:fd:a5:d3:6e:3d:
9e:be:94:0e:6f:f0:3f:cc:0e:31:d5:ce:bd:77:6f:
a2:e9:e5:53:77:9a:07:6b:fa:8d:f2:bd:cb:ff:57:
01:b0:3a:bc:e4:ab:ef:28:5a:fb:b9:d7:3d:59:df:
e0:a7:85:a2:a9:f9:ab:d7:b8:4c:df:df:ee:63:57:
d6:d1:2e:97:dd:75:fb:34:66:3c:b6:3d:df:22:ac:
1d:e3:bc:fb:cb:5c:d4:c9:47:fb:a9:30:f2:7f:44:
8f:e5:a6:7d:30:e4:38:1f:ad:49:41:78:e8:b5:ec:
ef:f0:d2:6a:1a:1c:a0:bf:8b:22:d9:a5:e1:ef:fe:
aa:c4:da:1b:4b:1f:b7:71:b8:d5:ac:93:87:78:9e:
d7:4e:7e:1b:4a:f3:49:cf:7b:16:9c:e9:22:d0:aa:
e3:0e:13:1c:d1:45:23:93:ab:d5:7a:01:d8:13:a1:
38:0d:6f:a4:c5:02:55:75:8f:aa:c1:f6:85:7b:e8:
48:33:a6:29:80:52:eb:be:5e:31:11:7b:45:f4:b9:
ad:42:a5:d1:2e:94:63:bc:d2:c3:49:05:52:7e:1b:
c2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:44:8D:9F:63:66:A7:9E:23:B6:B0:44:36:66:18:BF:53:D0:F5:DC
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/00F9EE7867C311EFA6AFCF5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.113.82.0/24
Signature Algorithm: sha256WithRSAEncryption
41:6e:f2:5c:50:ce:40:e6:e8:20:8d:f8:ad:43:9f:a8:2b:46:
dc:d6:75:0f:15:b1:03:41:bf:6c:a8:da:7b:b4:52:20:67:8e:
9a:86:98:0f:f5:16:14:dc:62:ba:dc:8f:12:db:9f:37:ce:c1:
da:50:8f:17:90:0d:86:9d:9a:25:16:0b:38:72:57:67:73:67:
f3:5d:5d:bb:74:5c:05:78:49:dd:93:76:e9:c5:8f:47:e3:ec:
18:60:ec:b6:c9:16:66:86:f1:3c:66:4f:7b:88:35:05:ae:8e:
44:a2:a0:f7:e4:da:8f:b5:10:16:00:d8:8b:8d:37:ee:c8:eb:
e4:d4:69:85:97:c1:a5:0f:f7:47:e8:aa:cd:f0:a9:25:82:bd:
23:48:5c:a2:6f:e6:9e:79:58:b1:54:fd:bd:1d:1a:f7:40:e1:
fd:86:41:b0:72:18:ed:d5:cf:58:c0:9d:5a:01:62:46:61:3c:
f1:81:5c:b8:df:f9:2c:8d:b3:54:13:a8:ee:c6:9c:03:4b:09:
cb:69:a7:fd:86:39:ef:6f:2b:aa:35:f7:57:94:99:ce:92:f9:
39:28:37:8d:38:f3:68:ee:8b:a6:e8:3e:64:65:e9:13:ab:da:
74:d9:a6:26:be:0b:f4:2d:ed:90:b3:3f:5f:13:25:c7:16:8b:
c3:2e:8b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:52 2025 by rpki-client