Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/F3343D30C08C11EEBE671980C4F9AE02.roa
File: F3343D30C08C11EEBE671980C4F9AE02.roa (raw, json)
Hash identifier: eFT6+au8Q/SiJYBO/M7+FDHPoIcuSyIISwEtUak/BRg=
Subject key identifier: 31:7A:D2:DB:97:85:D3:D0:29:F0:FA:39:CB:D2:32:5E:46:45:35:4B
Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Certificate serial: 02
Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/F3343D30C08C11EEBE671980C4F9AE02.roa
Signing time: Wed 31 Jan 2024 23:03:30 +0000
ROA not before: Wed 31 Jan 2024 23:03:30 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 49608
IP address blocks: 157.10.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 19:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Validity
Not Before: Jan 31 23:03:30 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65bad1c2-ba43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:18:e1:f0:14:58:0e:cc:32:1b:75:e4:10:
c0:53:78:4c:86:36:c2:0a:f3:c5:90:57:a1:06:cd:
16:99:0f:29:b4:9b:c3:19:9b:e2:57:de:f8:d9:bd:
24:38:6f:23:55:b4:61:cc:c8:4b:d5:07:2c:8a:bd:
aa:64:3a:08:9b:0c:fb:4b:eb:34:18:63:e2:00:80:
95:6e:0c:8b:76:37:db:4b:ee:5f:9d:73:5b:bf:94:
36:b4:8f:b3:91:58:95:65:21:d2:d7:09:23:04:9c:
79:51:75:48:73:ad:08:d0:6c:66:84:ea:52:ca:86:
34:26:8b:20:84:4e:5e:2c:2a:25:e6:ec:a7:74:4f:
f0:63:6c:b8:c4:b7:08:02:78:9d:00:8d:ba:36:93:
89:7d:54:da:96:4d:ea:ff:d8:62:3f:75:96:51:d8:
9d:4e:38:ad:9c:7e:35:68:7c:fc:5d:70:33:06:c3:
69:d6:43:77:cd:f6:67:bb:f7:02:27:66:bf:88:eb:
ac:c0:a8:bb:e0:72:66:49:8e:9f:30:6e:77:62:b9:
aa:d7:81:6c:f0:e2:d7:77:b0:bd:84:73:48:6a:79:
89:24:b0:b1:f6:80:d2:5e:23:4d:08:4f:bc:83:6d:
a3:40:f2:a4:63:24:d7:cf:57:a6:7c:09:80:f6:76:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7A:D2:DB:97:85:D3:D0:29:F0:FA:39:CB:D2:32:5E:46:45:35:4B
X509v3 Authority Key Identifier:
keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/F3343D30C08C11EEBE671980C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.105.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:5f:3d:bb:60:b7:77:48:74:55:02:7a:90:0d:83:87:8e:8f:
f5:be:f8:e8:5f:5e:6f:48:7b:41:f5:bd:ee:42:d8:e4:5e:a4:
9f:79:d9:15:75:85:f0:45:03:3c:18:97:e7:82:dc:bc:3e:3f:
95:c6:e3:60:f5:da:1c:e1:9b:30:39:e4:51:b6:c1:bc:90:b3:
58:f0:da:ac:12:92:e1:58:7c:01:0f:12:4b:17:f9:3e:70:54:
f7:00:ee:ee:e6:9c:83:10:b3:a2:2a:14:fb:62:9a:ce:b2:30:
39:6f:4a:3f:01:9d:04:6f:5c:eb:38:f4:a4:73:98:01:45:29:
8c:ea:39:f8:97:ab:93:1c:02:8f:36:1d:8c:33:20:2c:2b:54:
a0:67:98:07:91:5f:d1:01:f7:a5:18:26:d7:e7:a8:c3:f6:3c:
ef:6f:0a:c4:9a:e5:ed:af:94:93:5e:94:1b:8d:68:a5:7b:12:
54:9f:91:d4:28:53:de:3e:f9:3d:49:cc:da:15:81:91:a9:e8:
57:d1:bc:e9:a6:6b:4e:a6:c8:2a:6d:a7:5b:6b:07:6b:54:8d:
ef:a1:39:c7:82:44:c8:0d:7c:29:7a:24:15:20:e2:87:ea:90:
27:8a:08:5d:d1:19:05:f8:b8:7d:70:d7:4c:da:52:34:53:9a:
5a:98:34:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 01:00:56 2024 by rpki-client on console-ams.rpki-client.org