Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/61197D78FBC611EEB9955A21C4F9AE02.roa
File: 61197D78FBC611EEB9955A21C4F9AE02.roa (raw, json)
Hash identifier: Yu67+oO8/kTjV9kF809TuqcFvB8300/eLYd04vQxASc=
Subject key identifier: 70:9E:DE:70:23:AF:2F:74:6D:DC:37:CD:35:75:E9:99:7C:AD:6F:D3
Certificate issuer: /CN=A91E4468/serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190
Certificate serial: 51
Authority key identifier: AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/61197D78FBC611EEB9955A21C4F9AE02.roa
Signing time: Tue 16 Apr 2024 07:53:15 +0000
ROA not before: Tue 16 Apr 2024 07:53:15 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 152149
IP address blocks: 210.79.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 05:46:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4468/serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190
Validity
Not Before: Apr 16 07:53:15 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=661e2e6a-e832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1c:89:cb:28:c6:9f:e3:9e:a0:cd:24:f6:ea:
95:bf:53:f4:ee:64:ca:10:23:1f:ab:e1:c5:96:ea:
48:74:41:84:ef:62:56:8e:75:d3:63:7d:a4:f2:95:
a5:1f:fd:cd:4a:0f:a0:12:6c:5d:7b:31:da:39:8d:
b4:df:2e:da:cf:6a:4a:9b:f6:ec:a1:0c:f9:5e:0e:
30:06:11:28:6d:1e:13:77:d3:ae:6b:31:52:83:cd:
cb:01:60:2e:19:5d:11:b0:c4:41:e4:1f:23:f7:d7:
d9:ff:84:59:5d:53:45:15:f7:0c:70:96:18:d8:9e:
b7:38:75:14:9b:e5:7c:b6:5f:1c:79:41:ae:bc:1d:
4c:0a:a9:99:2e:75:60:56:4d:11:92:b9:5c:b5:5f:
ae:83:df:23:7b:ad:4c:91:1d:5a:98:4b:bb:cb:a2:
8c:4b:8b:ae:d3:d4:42:c4:b3:6f:cd:be:9b:ad:d3:
94:14:f4:ae:7d:97:16:65:be:ce:14:ca:c4:3d:ae:
fe:23:af:3e:a9:bf:27:62:4e:d8:b2:d7:52:ce:f3:
1f:e7:70:82:28:de:ed:7b:e4:c6:4f:b3:ab:27:f6:
01:67:7c:c7:b7:3b:bf:49:5b:7c:28:21:e8:d8:47:
46:54:ea:0f:4a:7c:cb:68:01:02:73:84:b9:74:b6:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9E:DE:70:23:AF:2F:74:6D:DC:37:CD:35:75:E9:99:7C:AD:6F:D3
X509v3 Authority Key Identifier:
keyid:AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/61197D78FBC611EEB9955A21C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.181.0/24
Signature Algorithm: sha256WithRSAEncryption
76:99:7d:55:4b:42:99:1b:7c:00:4e:aa:63:df:bc:7d:0f:b7:
00:f1:5c:c0:86:96:23:c9:c6:63:17:6c:07:79:23:d9:b9:2b:
67:d9:05:08:57:55:15:c8:66:61:f9:84:00:ce:7b:ed:9c:50:
cb:58:c6:36:65:a7:03:69:b2:b5:7b:da:55:a7:5c:c2:d4:49:
83:d0:27:64:8d:ac:4a:8a:b3:36:fe:4d:96:10:b0:51:85:cc:
f1:ad:56:a4:da:d8:21:33:30:44:4e:99:a6:79:c6:73:47:6d:
58:56:19:f5:3b:ee:d4:5e:91:29:90:e5:49:8e:64:4d:4e:3b:
46:09:7f:a6:da:70:14:27:7e:00:81:d4:6a:d3:d8:5e:ae:cd:
a4:74:44:13:b7:06:43:39:86:ce:1c:70:60:51:f0:ff:46:1f:
d9:fa:6b:31:37:5a:64:e9:87:16:2b:8c:a5:d8:29:ce:2b:da:
9e:70:3f:c3:31:3d:6a:61:f5:05:74:03:7c:4a:62:82:1e:62:
5f:df:a5:6b:6f:0a:e1:fb:40:58:23:cf:0a:4a:9d:1c:05:0c:
8e:15:0a:8d:19:62:b0:99:cf:9f:65:b6:ae:ad:d8:64:d3:4e:
3c:26:fc:27:e8:ed:79:1d:4d:0e:2e:bb:91:85:0a:1b:26:4a:
2d:83:07:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 06:28:57 2024 by rpki-client on console-ams.rpki-client.org