Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/D3A71402940811EEB378C933C4F9AE02.roa
File: D3A71402940811EEB378C933C4F9AE02.roa (raw, json)
Hash identifier: isIu0fCDCUk9Tvh/2NFpVETtpWKPjqFnkGpOey7mi1I=
Subject key identifier: 55:40:98:C0:2D:41:87:CF:2D:32:DC:DC:F1:E0:1D:FD:01:9A:22:48
Certificate issuer: /CN=A9180386/serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63
Certificate serial: 020B
Authority key identifier: B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/D3A71402940811EEB378C933C4F9AE02.roa
Signing time: Wed 06 Dec 2023 07:26:53 +0000
ROA not before: Wed 06 Dec 2023 07:26:53 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 58453
IP address blocks: 45.255.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 09:14:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180386/serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63
Validity
Not Before: Dec 6 07:26:53 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=6570223c-ea7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:92:eb:9a:35:f3:ad:a3:08:2a:db:42:bc:
91:ac:4a:fe:48:2b:de:4d:82:e9:69:68:dd:22:93:
82:3c:70:26:1a:4d:23:95:ec:93:5a:a0:4e:a6:d3:
a1:38:23:37:88:23:38:08:8d:d7:10:4f:26:e2:63:
1b:d1:98:f1:08:72:e8:6b:5c:2d:28:4e:61:c1:ac:
3e:8d:d3:55:39:ae:61:63:d0:66:83:aa:02:ff:5e:
02:f5:6d:6e:ea:f3:0c:77:f9:b1:97:b4:e6:8a:1e:
04:2a:30:d3:38:f0:5b:d1:6b:6f:27:d2:79:9f:84:
3a:c0:ad:81:4c:6b:6a:ce:3b:62:ef:f7:95:84:c6:
82:76:6e:26:6e:f7:e3:50:10:fe:52:6b:1b:64:e9:
34:de:1f:d1:2e:6a:32:a4:a3:43:bb:31:c1:a2:10:
4f:52:2b:3a:cb:2e:c2:02:98:34:aa:3c:84:a4:f7:
1a:7d:e5:1e:6d:18:f6:01:58:c3:d7:0a:2d:f4:88:
70:99:0f:d1:b7:4c:30:dc:1b:81:be:41:1e:a8:a8:
33:43:bc:a8:28:91:6b:69:98:8e:bc:83:19:42:ac:
ee:0d:60:d2:c0:dd:73:e1:9e:02:8d:0d:b8:04:81:
60:d2:7e:26:ba:96:3a:32:84:82:20:f8:73:29:26:
e2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:40:98:C0:2D:41:87:CF:2D:32:DC:DC:F1:E0:1D:FD:01:9A:22:48
X509v3 Authority Key Identifier:
keyid:B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/D3A71402940811EEB378C933C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.255.125.0/24
Signature Algorithm: sha256WithRSAEncryption
83:a2:8a:b4:7e:b1:09:cd:4b:a9:90:e8:90:01:19:0f:0d:11:
f9:4b:b3:52:08:bb:5e:53:09:aa:73:3a:14:79:86:fd:56:21:
6b:8d:93:51:c0:ef:bc:c9:50:d0:b7:f1:73:79:7b:f4:32:e8:
ea:93:9a:4a:b4:ce:0b:56:ef:fc:04:50:0b:a9:ee:14:7e:59:
94:be:2d:23:ed:cd:0e:74:53:64:16:6b:d4:ef:ae:96:c3:3e:
22:f0:e4:44:9e:c9:d1:72:bc:d4:04:2f:27:82:2e:ee:97:66:
6d:13:2f:39:a2:74:ff:c7:7c:7d:d5:7e:33:f3:0e:77:a9:fa:
57:70:13:49:63:c9:89:d4:51:cd:4f:ac:73:99:d9:32:a9:f1:
a5:df:e0:5b:e2:2f:47:e5:82:3b:c3:32:68:76:ac:74:96:0f:
ed:86:76:ce:69:62:4b:3a:0e:c8:7a:db:2e:9c:21:09:00:48:
67:bd:74:09:e8:30:01:5a:06:05:6a:3f:dc:5f:58:6f:be:69:
27:68:13:a3:7c:1d:91:7e:72:d1:60:82:f2:1d:1b:2b:0a:57:
8c:9b:f4:d5:51:24:55:d1:58:b3:a9:45:be:cb:3d:33:5c:31:
64:a5:6a:62:4e:da:11:ae:62:e9:6e:90:a3:f7:fd:07:46:e9:
ab:d6:20:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 14:08:52 2024 by rpki-client on console-fra.rpki-client.org