Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/FDC77D5C068911EDA290EA17C4F9AE02.roa
File: FDC77D5C068911EDA290EA17C4F9AE02.roa (raw, json)
Hash identifier: LeQBnJW6rbwOaoQ2PJ7R3fqAnjdR7zICdD3U0RqKr9w=
Subject key identifier: 0C:2F:43:54:FB:34:8C:6E:DB:06:67:94:23:DA:3E:D5:5B:88:EB:29
Certificate issuer: /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial: 09A7
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/FDC77D5C068911EDA290EA17C4F9AE02.roa
Signing time: Tue 02 May 2023 21:38:25 +0000
ROA not before: Tue 02 May 2023 21:38:25 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 3223
IP address blocks: 45.115.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2471 (0x9a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Validity
Not Before: May 2 21:38:25 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=645182d1-6ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5a:a6:c5:68:3e:26:14:3f:05:0e:ee:5d:22:
99:27:05:f5:ef:26:9a:6c:f7:dd:e4:84:24:6b:89:
1b:c9:a6:0a:37:97:9d:a1:ef:e5:0a:89:13:26:5e:
b7:82:58:12:19:2b:2c:66:cf:8c:37:30:3a:8b:38:
d6:06:67:5b:db:e5:12:ba:ea:d3:cc:00:01:20:b4:
2f:48:be:3c:71:40:40:56:67:50:1b:35:e5:69:ad:
57:75:0c:19:dc:4c:fd:78:29:c5:cf:18:ca:b6:99:
30:1d:d4:ab:a5:f3:dd:0e:97:a1:db:1e:3b:4c:c4:
4f:ed:00:0b:00:8b:e8:28:5e:dc:17:cc:97:0f:da:
ba:ca:4b:e8:08:f2:96:c9:5f:ef:df:61:e9:0c:22:
c1:34:fc:53:71:62:5c:20:2d:24:77:44:9a:77:12:
cd:31:5b:ff:d8:1f:ae:49:22:2d:90:0b:97:00:d4:
63:aa:82:c6:df:b5:8a:95:f0:4f:28:41:51:58:33:
97:86:ae:d8:ff:88:9d:a1:cd:7d:d9:a3:de:a3:d4:
33:06:c9:23:db:92:87:c6:e8:cf:51:7b:f7:e2:07:
40:65:13:90:38:79:e8:df:98:3a:3a:94:ae:23:05:
64:04:be:e5:ce:cd:9a:67:67:ec:ad:03:e2:26:f3:
59:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2F:43:54:FB:34:8C:6E:DB:06:67:94:23:DA:3E:D5:5B:88:EB:29
X509v3 Authority Key Identifier:
keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/FDC77D5C068911EDA290EA17C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:21:41:40:a6:a2:62:bb:40:48:eb:2c:f5:73:9f:ba:ba:57:
66:79:06:62:59:3c:56:38:ae:6d:76:d3:fd:74:d4:e4:20:b0:
c3:be:a1:14:fa:9a:81:70:d4:79:87:dd:d2:61:04:02:ed:d0:
53:d4:9b:a4:64:24:e4:49:60:86:20:1d:a8:17:46:be:97:7d:
52:8e:b0:d8:1e:a1:03:26:4c:72:c4:61:bb:b1:81:b1:0d:e2:
34:bb:5f:4a:fa:f5:44:21:53:19:8a:d2:65:19:df:96:e9:a7:
dc:7a:55:d9:c9:63:b7:56:1e:f6:62:6b:3a:88:50:0b:3e:80:
00:42:71:b5:d5:d5:8c:b2:ae:d7:d4:b9:40:84:d6:5d:ba:89:
e1:2f:b3:12:d5:b9:bd:19:e6:f7:63:b5:12:34:e8:60:94:6b:
65:11:bf:f3:39:10:6e:1e:bd:7b:26:50:d3:ec:79:0e:82:8a:
00:7f:b2:2e:f4:00:a2:dd:7b:8b:01:9d:20:37:3f:64:10:d3:
b8:28:f8:a8:d0:ed:05:62:2f:ed:b4:d4:41:d4:d4:1c:37:f2:
67:d4:99:d3:11:90:fa:89:58:1d:63:23:71:71:df:81:62:45:
45:d7:2c:68:3a:fc:d1:47:fe:5c:01:8f:86:7a:29:94:61:c2:
f4:01:0f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 08:02:51 2023 by rpki-client on console-fra.rpki-client.org