Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/F92FF312967311EDB9F09712C4F9AE02.roa
File: F92FF312967311EDB9F09712C4F9AE02.roa (raw, json)
Hash identifier: rmV6noy/5QBciEts+3qrVAaQGdgXVne16BdNgS7orpw=
Subject key identifier: 89:CD:F9:EF:50:BE:14:C6:B9:F4:32:D3:EE:59:16:BE:CF:E5:B2:C9
Certificate issuer: /CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3
Certificate serial: 0150
Authority key identifier: 86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/F92FF312967311EDB9F09712C4F9AE02.roa
Signing time: Wed 03 May 2023 06:26:44 +0000
ROA not before: Wed 03 May 2023 06:26:44 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 394844
IP address blocks: 45.248.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 16:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3
Validity
Not Before: May 3 06:26:44 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6451fea4-a937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:a6:ec:da:48:f1:34:f9:1a:1c:f6:91:0c:
68:5c:9f:e1:bc:65:6d:04:f1:70:1e:7b:11:af:72:
6b:bb:d2:95:b9:dc:bd:03:36:43:6b:7e:e4:a2:12:
25:7c:de:26:c1:d8:54:ea:52:89:11:5f:51:cc:e0:
ce:98:89:bf:5a:cd:f1:8e:e8:fd:cb:0a:d2:fc:bf:
78:47:46:9f:0f:21:17:c0:eb:31:e1:41:7b:fb:df:
8c:ef:b9:bb:77:c1:7d:d0:03:0f:b9:3a:72:b5:c3:
84:53:97:c1:05:84:0a:ad:d3:bf:da:ca:e8:8d:20:
0a:2c:39:93:ab:49:39:48:aa:00:1a:9d:1f:6f:c9:
50:83:1e:a6:37:b7:bc:38:ae:9b:01:a2:6a:d0:13:
69:65:08:25:6c:8c:34:e9:ee:ab:2b:fd:4b:84:58:
96:25:42:eb:e4:fb:28:d8:db:e6:96:d0:31:0c:76:
46:71:b1:c1:81:7e:3b:9c:7a:9a:c8:48:14:10:32:
bc:ad:3d:d8:37:f3:28:7e:b1:db:19:0b:8f:cc:af:
f4:04:0b:ec:7d:d6:7d:1e:e1:e3:4f:fe:24:c6:08:
35:ce:d6:0e:a1:6d:8a:01:0a:4e:35:ae:69:bb:53:
e3:f1:67:bb:e5:28:23:57:95:bc:cb:b8:cf:7b:39:
2d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CD:F9:EF:50:BE:14:C6:B9:F4:32:D3:EE:59:16:BE:CF:E5:B2:C9
X509v3 Authority Key Identifier:
keyid:86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/F92FF312967311EDB9F09712C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.54.0/24
Signature Algorithm: sha256WithRSAEncryption
71:56:35:7c:79:01:08:2a:b4:aa:11:d0:cb:05:88:f8:f5:06:
d7:df:5c:94:96:fe:a3:fe:ee:2c:a1:31:d8:03:34:14:58:fa:
35:ad:bf:31:5f:4d:8b:a7:bc:dc:5a:3b:45:02:e2:24:1d:03:
df:bb:ce:d6:35:80:9c:0e:6b:d0:85:f7:f2:7e:cd:d1:c7:17:
51:4c:5b:56:ec:91:e5:17:e4:55:d7:47:fb:4a:e5:53:2d:c3:
88:84:7f:4a:6d:4b:18:4f:18:cb:b7:04:4d:cf:4f:20:f6:5c:
40:36:73:37:b7:bf:d1:81:45:92:83:99:da:9f:53:4e:0a:b1:
53:21:32:b6:80:d3:d2:37:24:b0:87:68:ce:aa:dc:f3:38:b7:
d0:7d:03:f6:04:92:34:88:29:73:bf:0f:7b:41:64:d9:d5:47:
0b:87:10:13:df:2d:e0:a0:ea:86:49:1c:bd:14:98:ca:40:d3:
7a:c2:d3:48:d4:54:40:aa:cc:d2:e4:0b:1b:09:54:a5:49:3d:
3f:b7:cc:b3:b1:82:e5:a5:8c:8d:a1:e8:cb:89:24:b5:b3:77:
06:e3:00:44:b0:18:ca:60:3c:68:63:82:c2:cd:5d:c3:5f:ec:
bb:0a:38:73:36:3c:1a:86:8e:b7:6d:f4:0a:9e:a4:77:b5:1b:
66:48:12:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 20:08:16 2024 by rpki-client on console-ams.rpki-client.org