Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/244B5CA82A6B11EFAAD1A542C4F9AE02.roa
File: 244B5CA82A6B11EFAAD1A542C4F9AE02.roa (raw, json)
Hash identifier: dAH9VOEIu7KQEWF2wdJ66+n9tJbSTt6uomDtp57CJFo=
Subject key identifier: A6:6B:A9:25:10:5C:39:DC:9E:CC:6B:0B:3D:78:30:E4:73:A4:66:05
Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9
Certificate serial: 4E
Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/244B5CA82A6B11EFAAD1A542C4F9AE02.roa
Signing time: Fri 14 Jun 2024 16:28:33 +0000
ROA not before: Fri 14 Jun 2024 16:28:33 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 9743
IP address blocks: 157.10.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jun 2024 17:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9
Validity
Not Before: Jun 14 16:28:33 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=666c6fb1-3460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:48:c7:e6:11:8c:3a:58:f4:09:82:c2:13:
83:fb:9e:71:d6:bd:57:10:8d:48:71:e6:d4:e2:df:
fe:08:03:24:b0:7c:b6:5f:41:36:62:66:36:ab:f5:
3c:e1:9e:cb:4e:85:86:85:03:0a:82:b6:62:61:a5:
11:ea:29:ad:ca:01:2b:ce:c7:56:61:1a:7d:02:9c:
0c:f1:d4:47:36:5b:f4:48:44:f1:e1:b4:53:cf:03:
f0:55:a8:86:66:8a:fd:e6:37:f4:0b:5a:76:28:9f:
85:87:fe:f0:15:a9:27:f6:53:07:c5:de:38:9f:53:
98:82:4e:bd:24:cc:7b:18:fc:39:86:70:d2:32:15:
bd:64:7d:62:25:ac:4e:12:a9:ee:08:b2:77:69:0e:
a3:85:61:01:bc:9d:58:89:53:95:35:38:f8:76:03:
e8:36:0d:e9:f9:04:b3:97:b9:8f:7e:45:a5:40:df:
21:f3:38:b1:ff:1d:ac:13:de:6b:f7:bd:45:63:d5:
05:6e:b4:9a:a2:ab:c7:58:a1:13:fd:3c:da:0f:68:
38:7a:1c:b7:30:4c:13:2f:94:18:d9:7f:8e:63:63:
3e:10:1e:50:c0:1d:4e:5d:df:ae:ae:a3:8d:f3:af:
f5:cc:a4:19:bb:e3:57:ce:a4:e5:34:f7:a4:84:39:
9e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6B:A9:25:10:5C:39:DC:9E:CC:6B:0B:3D:78:30:E4:73:A4:66:05
X509v3 Authority Key Identifier:
keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/244B5CA82A6B11EFAAD1A542C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.209.0/24
Signature Algorithm: sha256WithRSAEncryption
05:1f:31:de:83:96:94:5d:64:13:dd:98:99:b7:a4:07:4f:3e:
83:0d:7d:c6:1b:45:6e:52:1a:dc:94:a6:46:65:97:51:b2:77:
96:15:1f:a7:ab:a3:b6:5a:a4:03:04:66:88:45:12:17:b6:da:
f3:1a:83:92:c4:8b:b7:90:e5:8a:fc:46:48:46:6e:93:8e:ec:
c7:1d:ab:96:ae:5c:2e:1f:67:1f:ca:8f:81:cd:68:1e:4b:23:
53:5a:49:d0:2a:79:be:7c:6e:ac:8e:1d:ef:c5:69:27:5a:07:
6d:f4:f2:41:1f:1d:82:35:bd:12:5c:f5:ba:86:c7:a6:bf:57:
fa:9f:3b:14:5b:7c:79:8a:f4:8e:8b:11:81:01:91:31:ab:08:
69:1c:a5:35:4f:3a:d7:be:26:60:1a:23:82:45:e2:39:6f:43:
81:8c:36:4e:b9:84:31:27:00:ec:0d:69:a9:ae:fd:22:88:fc:
66:59:8b:17:e8:f9:21:fe:3b:48:18:ac:04:82:52:d7:37:07:
db:b6:28:75:40:82:84:a1:d0:fb:3e:7c:01:e5:d1:35:ea:80:
54:19:d0:a1:e0:42:bf:5c:cc:d2:48:6a:2d:ae:d1:95:75:13:
ca:38:f1:cf:85:fb:62:22:f7:c3:35:7b:b5:0d:8b:20:88:a7:
38:0e:c9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 20:18:16 2024 by rpki-client on console-fra.rpki-client.org