Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/05A8B38482C011EE850C4F63C4F9AE02.roa
File: 05A8B38482C011EE850C4F63C4F9AE02.roa (raw, json)
Hash identifier: LMoB8I1euv+63gPLnLVXZXmudKifbK3frD9P1mZeL3M=
Subject key identifier: E8:81:24:EC:2A:F9:5F:AB:2B:51:F7:9F:26:CB:7F:9E:C7:1E:6E:A7
Certificate issuer: /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial: 0A7D
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/05A8B38482C011EE850C4F63C4F9AE02.roa
Signing time: Sat 04 May 2024 20:58:54 +0000
ROA not before: Sat 04 May 2024 20:58:54 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 396356
IP address blocks: 45.115.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 07:09:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2685 (0xa7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Validity
Not Before: May 4 20:58:54 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6636a18d-ae71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:24:f6:37:06:bd:55:78:f9:0c:ae:56:cb:
b7:fa:fd:20:4a:07:79:12:4b:08:e4:25:22:e8:b9:
08:7e:ba:bd:fe:49:4e:bb:54:cb:82:52:0e:0d:ee:
3d:7b:fb:4d:01:e3:c7:7c:52:3a:90:54:c0:23:a4:
0b:f5:99:6d:4e:ef:73:3c:e9:79:b1:f5:60:2f:ca:
cb:6f:11:6f:c5:24:1e:3f:b6:36:3f:fd:9e:13:52:
01:61:07:3e:74:28:eb:f1:b0:42:f9:8d:2f:f7:a1:
93:33:42:8c:08:cf:5a:83:79:76:ab:cc:ce:f0:4c:
9f:c7:46:9e:45:f7:22:26:51:f9:9b:b0:01:1c:19:
68:95:8f:ae:3c:7a:3c:43:03:b9:40:d5:17:12:8f:
28:02:34:d7:c2:9d:19:42:4c:94:dc:6e:07:6e:ae:
2b:3d:8a:48:ed:c0:c7:a8:aa:8c:03:ff:f0:b7:60:
34:1e:86:4f:da:f1:04:f9:dd:a8:b2:48:e5:de:cc:
5f:80:43:e9:04:c4:f2:8c:61:ba:1c:e6:91:f8:10:
8c:ea:16:6f:7e:b2:85:f0:45:52:00:ab:2e:81:f8:
f0:b9:54:d0:e9:b4:81:3a:b4:c6:0b:75:1f:80:a2:
dd:8c:cd:5c:27:ea:17:7b:87:61:c8:52:5f:6a:d6:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:81:24:EC:2A:F9:5F:AB:2B:51:F7:9F:26:CB:7F:9E:C7:1E:6E:A7
X509v3 Authority Key Identifier:
keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/05A8B38482C011EE850C4F63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.26.0/24
Signature Algorithm: sha256WithRSAEncryption
11:0d:15:52:c1:4b:62:b3:96:f1:8a:c7:3c:42:7c:94:1a:9d:
ad:a6:e8:1e:5c:88:7e:70:1a:f2:03:18:58:c7:9c:45:31:d5:
ac:95:1c:54:ef:2f:62:d0:10:62:9d:26:15:7f:3e:7d:82:45:
5f:f3:65:38:f9:4d:31:f9:f9:a7:e3:7e:1c:84:71:63:cc:f5:
4a:d9:86:33:d0:95:c4:da:36:ec:2b:db:97:08:e1:9e:f5:26:
c7:92:3b:79:01:a0:32:92:1f:39:71:31:b2:85:12:57:94:89:
14:d7:2d:95:6b:45:78:0a:3a:bc:e9:d7:ee:68:eb:cc:d9:74:
42:6d:f1:1e:20:0b:73:ac:46:16:63:f9:90:24:5d:08:cf:02:
f5:45:fd:ff:d5:6b:09:ec:66:36:6c:6c:af:3f:2b:ff:ef:26:
52:2c:27:ca:77:9d:ec:c5:5c:d1:0a:e4:57:c3:37:d5:a0:7c:
6e:39:90:44:1c:8a:6f:f2:37:9b:ff:fb:56:d3:e4:eb:a8:7d:
59:8e:19:14:7f:62:85:f0:55:8e:d7:f5:91:c1:51:34:fd:5e:
3d:ae:37:16:3b:8e:5c:6e:8b:58:fd:85:18:83:31:8a:2e:00:
70:92:e7:55:3d:20:68:d0:f3:1e:36:1d:ac:fc:e5:48:e3:a2:
00:16:d9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 09:30:00 2024 by rpki-client on console-fra.rpki-client.org