Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/EDBBB77CBBE311EFB8C1ED65C4F9AE02.roa
File: EDBBB77CBBE311EFB8C1ED65C4F9AE02.roa (raw, json)
Hash identifier: zqPe4m2UbxCaYoQFqlJc9gE69jyQho3RX5rLOoitIaI=
Subject key identifier: 1C:C6:CE:FB:07:29:97:FB:22:5E:B8:3E:1F:EF:F3:38:E2:BA:15:ED
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 35D0
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/EDBBB77CBBE311EFB8C1ED65C4F9AE02.roa
Signing time: Mon 16 Dec 2024 19:28:30 +0000
ROA not before: Mon 16 Dec 2024 19:28:29 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 61317
IP address blocks: 175.29.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Dec 2024 10:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13776 (0x35d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD
Validity
Not Before: Dec 16 19:28:29 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67607f5d-4c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:8c:1a:3e:d5:14:75:ae:fc:70:3d:f5:fb:
b6:fa:34:17:d1:2f:31:e7:d2:eb:a1:3b:96:1d:21:
84:b3:bc:7a:c8:ee:bc:a5:c4:43:5c:d4:3b:be:7e:
2f:cc:40:ba:58:23:52:77:93:9a:4a:46:2b:14:a2:
a9:29:17:48:69:4e:31:72:92:6e:de:fa:22:98:88:
4c:56:38:6f:3e:12:83:ca:5c:d6:a2:47:4a:d8:19:
59:ef:dd:79:7d:31:2a:92:3b:05:43:ae:de:dc:49:
cd:bb:7d:b1:65:16:62:53:ce:b8:f4:d8:ed:57:33:
25:c7:d8:44:4c:4c:04:9f:ab:dc:2a:c2:2a:3a:2c:
b9:61:6d:ce:9b:e8:49:85:23:36:22:0c:fd:3d:9e:
40:2a:21:19:cd:1c:f7:36:76:3f:9d:65:f5:43:0b:
10:1f:85:08:31:8e:0c:60:87:f3:57:b9:83:61:9c:
aa:18:a5:f7:04:17:c9:0a:11:a8:30:0b:9e:ac:68:
d7:3f:2d:8d:f5:9b:e4:58:78:91:19:cb:13:3e:f4:
74:dc:c9:a6:75:c3:14:a1:b4:0f:1b:7d:9d:33:dd:
51:28:4b:0e:d6:e1:9f:5c:a9:fa:00:e3:ca:d0:c7:
b9:76:f0:bf:42:ef:6b:a0:1e:c0:75:ee:46:7c:30:
9b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C6:CE:FB:07:29:97:FB:22:5E:B8:3E:1F:EF:F3:38:E2:BA:15:ED
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/EDBBB77CBBE311EFB8C1ED65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:a5:3b:30:ba:b7:bd:ca:68:5a:2c:1e:9d:ec:98:19:28:cf:
23:07:2b:a3:9d:fa:20:c0:e4:ac:c4:cb:eb:49:bc:b1:ba:9c:
68:0f:03:37:ef:d3:53:92:fd:75:49:03:2a:93:a1:17:52:34:
b9:1b:fe:af:69:f8:1e:d6:54:1e:7b:ca:f2:7e:b0:0c:71:7b:
3c:42:45:7f:7d:94:44:17:aa:e6:42:e8:c1:88:53:4b:f9:e8:
01:a4:fb:c3:25:ed:6f:95:9c:28:ee:83:50:a5:d2:56:31:7b:
f1:24:2e:ac:6a:55:ee:3d:5e:a9:c6:ce:af:c7:24:33:32:2c:
7d:44:4a:16:0a:46:68:77:1a:86:5f:7f:6c:d9:8a:9b:62:d8:
5e:0e:9c:4e:e3:e5:51:e8:97:3e:61:27:0c:12:0e:f9:ce:a4:
d0:ea:a7:e2:5a:d3:5c:a6:08:da:38:b2:2c:9c:d4:28:21:7b:
b4:14:cd:f6:28:d1:29:04:ba:32:f6:81:b2:98:82:62:1e:39:
37:40:d5:b9:fa:01:86:15:8a:14:a6:8e:c5:20:15:e2:40:5d:
e3:64:fd:3b:51:f7:85:5f:7b:cb:b4:17:95:6b:9e:95:fc:a9:
80:b1:ea:45:e9:55:26:ed:c4:5d:41:b9:c6:22:c5:0b:65:42:
61:07:b9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:48:18 2025 by rpki-client