Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/73C2AD24F76111E8BB70FD50C4F9AE02.roa
File: 73C2AD24F76111E8BB70FD50C4F9AE02.roa (raw, json)
Hash identifier: fVG8f3B+nUYn30ech0w8fMVws/QhPqNe4qtL4evt424=
Subject key identifier: 0D:53:1A:15:78:AD:29:F7:C6:19:C6:D2:97:E6:B9:D6:0D:22:49:C7
Certificate issuer: /CN=A917B12B/serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C
Certificate serial: 25E0
Authority key identifier: F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/73C2AD24F76111E8BB70FD50C4F9AE02.roa
Signing time: Tue 02 May 2023 16:32:32 +0000
ROA not before: Tue 02 May 2023 16:32:32 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 132724
IP address blocks: 45.114.220.0/22 maxlen: 22
103.19.244.0/22 maxlen: 22
2400:8380::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 17 Jan 2024 20:52:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9696 (0x25e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B12B/serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C
Validity
Not Before: May 2 16:32:32 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64513b1f-6d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fe:fd:fd:e6:b1:c6:b4:9d:d1:b0:d7:9e:a9:
31:db:2f:5f:6f:88:0d:b7:ad:51:42:39:a8:da:35:
ea:dd:44:f6:34:e4:e1:ed:81:ac:c6:7b:24:d5:3e:
9d:c4:30:94:ae:54:f9:c5:1f:cd:cf:4e:63:7c:fe:
9f:2d:62:db:7a:e7:6f:be:51:fc:49:04:30:d6:da:
f2:7d:76:16:1b:eb:a4:71:e5:dc:20:d8:03:05:7f:
c4:b7:19:29:00:89:2d:d5:a4:4f:77:d0:a2:b3:ab:
d9:1c:2e:a7:a3:a0:1e:81:f0:d9:1e:a1:ec:b7:19:
4a:c4:9a:55:5d:6a:82:6f:6b:95:ff:ca:77:dc:89:
17:32:98:98:4b:4b:56:9d:af:94:fc:1b:22:03:28:
f7:32:b0:d2:83:2d:72:a1:99:8a:d4:fd:b8:d1:d3:
e3:05:32:27:1c:80:ba:40:29:96:ad:38:9e:fd:12:
e5:fa:25:40:d4:cb:00:ea:c0:b1:a4:9f:0b:ca:79:
9f:e6:4c:32:4f:cf:a5:99:1d:0c:76:a9:56:32:45:
f0:39:72:4c:cb:cb:0e:84:e0:32:ad:b2:a9:35:e0:
99:dd:b1:40:49:de:f5:36:bb:83:c1:de:15:d9:77:
1f:96:84:ce:75:73:d4:04:66:d5:0c:a8:fe:d5:42:
e4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:53:1A:15:78:AD:29:F7:C6:19:C6:D2:97:E6:B9:D6:0D:22:49:C7
X509v3 Authority Key Identifier:
keyid:F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/73C2AD24F76111E8BB70FD50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.114.220.0/22
103.19.244.0/22
IPv6:
2400:8380::/32
Signature Algorithm: sha256WithRSAEncryption
1f:a0:4d:2f:50:70:c7:f4:fb:8d:f4:6b:fb:35:84:77:32:7d:
54:68:9f:1f:c5:f1:6e:26:b7:51:ab:77:3c:0f:e8:a2:be:f6:
26:8e:6e:52:37:29:07:0e:df:40:bc:1b:82:c5:35:7f:a9:46:
1a:c0:b1:8f:64:05:9f:7f:31:91:dd:eb:9e:9a:a6:81:bc:3a:
76:96:32:06:a9:f0:1d:ad:5c:dd:58:e4:10:b3:4b:77:77:53:
82:7d:1a:f9:ca:18:89:42:4a:db:a9:66:06:d1:df:51:bb:8c:
c6:98:56:86:c8:2d:d4:5b:f2:a2:d4:f4:be:04:85:66:cf:02:
f9:cb:53:99:70:70:bc:8e:36:f6:28:79:7b:27:20:51:8a:6d:
ea:37:11:a8:38:e4:05:c5:30:0f:ae:dd:dc:5c:1a:82:2e:30:
a4:da:eb:fa:bb:29:7f:87:f2:04:4c:4c:62:00:5b:64:5c:6c:
1b:e3:55:63:33:f1:62:f7:cf:00:91:22:ef:b7:4a:5d:d0:6c:
9c:f2:4f:c2:1d:3a:ef:12:43:6c:fa:cc:ea:d0:94:1f:40:14:
0c:49:aa:b7:7d:3b:5e:43:fd:44:f9:a1:3a:c1:bf:41:29:48:
3d:8d:e9:fa:30:9e:97:40:1f:cd:c3:e0:09:60:2e:04:81:9d:
6e:bf:ef:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 00:39:33 2024 by rpki-client on console-fra.rpki-client.org