Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/B25B29BC2E6011EFB735F03CC4F9AE02.roa
File: B25B29BC2E6011EFB735F03CC4F9AE02.roa (raw, json)
Hash identifier: leTa9tlSc7oDWZqRKZf3JJ/Yg12Bfxj8T/tRga/gosY=
Subject key identifier: 10:2D:FA:70:CA:51:97:AE:7A:95:C6:73:15:21:CF:A5:30:1A:4F:79
Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9
Certificate serial: 57
Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/B25B29BC2E6011EFB735F03CC4F9AE02.roa
Signing time: Wed 19 Jun 2024 17:23:52 +0000
ROA not before: Wed 19 Jun 2024 17:23:52 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 63801
IP address blocks: 157.10.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 04:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9
Validity
Not Before: Jun 19 17:23:52 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66731427-88c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:22:54:e9:52:22:a7:7d:b3:e6:e3:36:84:
94:eb:5c:3c:7e:d5:ac:25:ab:cc:f9:16:f6:2c:14:
28:4a:db:ea:e6:8e:79:b0:ff:4f:73:c4:c5:b7:11:
e7:3c:e3:62:3e:72:ff:6a:0b:30:8b:4b:7a:88:45:
3d:3a:a1:ed:d9:56:4e:5d:a4:e4:e6:eb:6b:5d:de:
fd:3a:c5:51:74:a9:7a:06:b3:d3:cb:78:ac:76:a3:
da:90:70:75:69:14:a9:4a:84:81:d6:25:47:8b:60:
f9:8f:da:08:3a:d2:69:1c:71:b2:55:b6:a2:cf:61:
8c:65:fe:84:57:e1:ef:a7:fb:54:28:b8:fe:84:a1:
c1:6d:b4:7a:16:ec:f4:6b:78:80:f5:59:4a:81:d4:
78:e7:2b:e2:77:3a:13:9b:27:44:7b:ba:d3:d6:9e:
cc:b8:e5:44:ad:f3:85:9f:dd:ec:3f:16:11:6b:26:
95:1f:03:d9:14:ee:e8:e9:6c:a1:9e:3f:1b:0e:40:
9b:4e:ed:55:95:e0:3f:c2:4c:90:8b:2e:72:96:62:
2a:e2:8f:11:db:03:dc:32:c4:c3:eb:ae:bf:2c:5a:
9b:8e:c7:3e:d9:a4:7f:13:fe:02:f6:46:30:63:e5:
12:79:3f:1b:21:9c:cc:fd:90:ca:77:ce:63:0a:7c:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2D:FA:70:CA:51:97:AE:7A:95:C6:73:15:21:CF:A5:30:1A:4F:79
X509v3 Authority Key Identifier:
keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/B25B29BC2E6011EFB735F03CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.209.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a2:f5:21:3d:b1:10:98:48:2f:c9:de:e3:13:f3:ae:52:88:
a7:f3:b1:96:61:10:32:37:10:c4:c6:86:eb:a1:ec:d9:c9:0f:
55:f0:d6:28:46:bc:22:0f:48:e6:91:f7:07:4a:c6:9d:3d:2c:
49:45:16:12:9b:8c:f7:c7:81:11:66:1c:12:d9:6b:8f:cb:42:
0b:6a:76:52:11:62:3c:a3:9c:bc:f9:df:1e:d6:b4:40:b4:87:
15:3d:b7:a8:a3:e0:3e:ce:82:9b:dd:8f:25:c4:b2:bf:82:3e:
39:37:90:68:e5:d6:93:b9:39:95:d1:a1:ca:0c:bd:ff:1b:52:
e7:b6:0c:83:f7:7a:c0:c5:40:84:cc:24:00:d7:0f:d6:28:02:
fc:c9:9f:89:de:ce:f8:fa:c2:bf:c8:db:bc:27:9e:93:36:d3:
b2:70:60:46:cc:e7:f6:b7:04:06:44:23:40:87:46:f2:c3:8c:
86:ac:72:2f:4f:d7:da:53:7b:1a:88:f1:c6:70:94:a1:4b:2e:
33:2a:51:10:81:9e:f3:61:93:5b:ed:de:83:2e:8c:0c:60:24:
3b:a4:38:e6:24:28:26:54:5b:c4:d6:4f:b2:4b:e8:03:1e:28:
72:3a:ad:fe:a9:76:1b:d5:b1:63:9d:53:bd:54:d3:88:7c:d8:
25:14:3c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 05:55:20 2024 by rpki-client on console-ams.rpki-client.org