Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/1E998352068711EDA1C2070DC4F9AE02.roa
File: 1E998352068711EDA1C2070DC4F9AE02.roa (raw, json)
Hash identifier: IVpQJiQc2d5dfAKmcXSA+cF4wkkQ6g2bcCkjHdWPep0=
Subject key identifier: E4:20:EF:0A:E5:95:77:94:2D:92:02:17:C3:57:99:C4:02:DC:F8:4B
Certificate issuer: /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial: 09A8
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/1E998352068711EDA1C2070DC4F9AE02.roa
Signing time: Tue 02 May 2023 21:38:26 +0000
ROA not before: Tue 02 May 2023 21:38:26 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 45.115.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Nov 2023 12:56:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2472 (0x9a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Validity
Not Before: May 2 21:38:26 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=645182d2-4b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:95:6e:1c:e9:5d:df:d1:a2:f4:38:88:19:
e7:e9:32:2b:1f:33:ea:03:f1:c2:83:7b:83:60:f8:
95:17:d3:b8:e6:1b:43:13:a9:54:0c:e9:9c:8a:43:
b6:fe:86:ac:7e:d6:1a:fe:41:8a:bb:2b:89:8b:bb:
29:9f:64:d9:34:c4:d4:fb:33:e5:88:7f:50:2f:cd:
94:6d:d5:c7:35:0b:aa:7c:f0:84:42:b2:b8:17:91:
22:d7:c6:39:94:8f:37:3f:5f:6c:41:2b:98:a0:34:
70:5e:4e:c5:f4:38:c4:99:5b:98:e7:ad:ff:9e:82:
e5:2d:24:66:a3:57:94:9f:a9:58:1e:3c:8d:81:b0:
93:2e:5f:b9:cb:0a:25:51:7b:6d:e4:b6:f4:c9:ed:
8e:ea:a3:c8:8f:cd:23:7f:0d:28:13:2c:88:92:76:
5d:76:88:0a:80:6d:86:80:59:70:94:ec:d5:c9:13:
92:80:ef:ca:d0:90:e5:18:71:5a:b9:19:14:54:d0:
fa:d5:14:64:6f:b3:f8:f2:89:cb:a7:b4:aa:b2:51:
e4:97:21:16:02:37:64:5c:9b:b6:27:7a:ea:1f:5e:
01:70:94:6a:fa:50:2e:fd:51:6f:9a:0d:98:e8:a2:
f5:a7:7e:22:69:84:a9:5d:13:fb:78:58:6f:e0:11:
2a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:20:EF:0A:E5:95:77:94:2D:92:02:17:C3:57:99:C4:02:DC:F8:4B
X509v3 Authority Key Identifier:
keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/1E998352068711EDA1C2070DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.25.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:03:d3:e6:76:d1:81:db:21:c9:b8:eb:d3:3d:97:b7:6c:37:
f2:a2:43:ca:f4:e3:79:39:bc:ed:5c:65:93:83:a7:d0:7e:aa:
a7:5a:23:43:a5:4d:52:95:10:71:64:0a:38:81:d3:cd:35:4b:
29:45:27:62:55:38:75:58:fa:fa:7e:49:1c:af:7a:57:1a:fc:
a6:21:f9:62:cc:48:85:41:91:51:15:53:ce:da:72:99:46:f3:
7d:29:f9:f2:b3:2f:f6:c6:a4:32:87:b6:48:73:7a:ed:62:5c:
29:d7:cb:f9:dd:5e:07:83:1e:0f:d4:fd:66:58:1d:15:bf:2d:
63:5d:21:ee:6f:c4:29:10:e6:ba:d7:a2:de:a5:ef:65:fa:65:
ae:5a:f9:20:d4:d8:d6:25:92:a2:c5:69:76:a3:c9:51:07:f7:
78:36:3a:17:00:2e:60:93:6f:a8:b5:6f:3a:70:90:04:8a:1d:
8e:4b:35:b9:3f:39:25:e9:6a:44:de:e1:1e:3a:73:91:bf:c1:
6b:a1:a1:80:12:24:48:36:04:90:ce:8c:1e:ab:e1:a7:e6:4c:
a3:40:04:70:a6:f8:c2:ff:44:65:3c:d6:4b:62:a2:50:7d:02:
c6:da:8e:d5:3e:ea:a2:9b:50:99:b9:f1:00:75:bb:01:58:a5:
91:f5:04:cc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhCMkIxMTAvBgNVBAUTKDIwMjA3OUQ2QzlGRTA3QkYxODYyMjFEMUE5OTgyN0NC
RjZCMTIyQUUwHhcNMjMwNTAyMjEzODI2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDUxODJkMi00Yjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyLqVbhzpXd/RovQ4iBnn6TIrHzPqA/HCg3uDYPiVF9O45htDE6lUDOmcikO2
/oasftYa/kGKuyuJi7spn2TZNMTU+zPliH9QL82UbdXHNQuqfPCEQrK4F5Ei18Y5
lI83P19sQSuYoDRwXk7F9DjEmVuY563/noLlLSRmo1eUn6lYHjyNgbCTLl+5ywol
UXtt5Lb0ye2O6qPIj80jfw0oEyyIknZddogKgG2GgFlwlOzVyROSgO/K0JDlGHFa
uRkUVND61RRkb7P48onLp7SqslHklyEWAjdkXJu2J3rqH14BcJRq+lAu/VFvmg2Y
6KL1p34iaYSpXRP7eFhv4BEqEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOQg7wrl
lXeULZICF8NXmcQC3PhLMB8GA1UdIwQYMBaAFCAgedbJ/ge/GGIh0amYJ8v2sSKu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEIyQi9CRkREMjIyRTND
NDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3OFlZaUhScVpnbnlfYXhJ
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lDQjUxc24tQjc4WVlpSFJxWmdueV9heElxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzhCMkIvQkZERDIyMkUzQzQ0MTFFQUFFRTZGNzBBQzRGOUFFMDIvMUU5OTgzNTIw
Njg3MTFFREExQzIwNzBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtcxkwDQYJKoZIhvcNAQELBQADggEBAMcD0+Z20YHbIcm4
69M9l7dsN/KiQ8r043k5vO1cZZODp9B+qqdaI0OlTVKVEHFkCjiB0801SylFJ2JV
OHVY+vp+SRyvelca/KYh+WLMSIVBkVEVU87acplG830p+fKzL/bGpDKHtkhzeu1i
XCnXy/ndXgeDHg/U/WZYHRW/LWNdIe5vxCkQ5rrXot6l72X6Za5a+SDU2NYlkqLF
aXajyVEH93g2OhcALmCTb6i1bzpwkASKHY5LNbk/OSXpakTe4R46c5G/wWuhoYAS
JEg2BJDOjB6r4afmTKNABHCm+ML/RGU81ktiolB9AsbajtU+6qKbUJm58QB1uwFY
pZH1BMw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org