Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/497C858A498B11EF8663C87AC4F9AE02.roa
File: 497C858A498B11EF8663C87AC4F9AE02.roa (raw, json)
Hash identifier: eDLGnULBGIYP14yNDCUvsZILhPi5i6Y0BN1J0iYpR4o=
Subject key identifier: 21:D6:78:73:DE:AF:E9:86:0F:B8:26:8C:68:1C:29:1D:51:86:77:5C
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 3520
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/497C858A498B11EF8663C87AC4F9AE02.roa
Signing time: Fri 09 Aug 2024 13:53:38 +0000
ROA not before: Fri 09 Aug 2024 13:53:38 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 54702
IP address blocks: 175.29.0.0/18 maxlen: 18
175.29.0.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 13:58:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13600 (0x3520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Aug 9 13:53:38 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=66b61f61-0f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0a:1a:6a:7e:ba:b0:c6:fa:38:9c:ce:83:ab:
19:74:52:b9:9e:75:1e:db:5c:4e:d8:c9:74:6b:9b:
67:5c:e6:5d:db:d4:16:fb:8f:45:4c:80:b5:bf:9b:
9c:6e:bd:b2:7e:46:e8:d7:2b:dd:2c:89:e7:68:0a:
05:1f:f0:4d:b6:67:84:a3:6d:fd:bf:b8:b2:9e:c0:
29:da:9d:9f:d2:5b:ed:ac:a6:92:11:be:b8:d0:e1:
d9:09:fa:28:ad:e2:20:2f:ba:d7:0f:b1:62:67:14:
e5:a7:6a:8f:8a:b4:a9:93:32:86:ea:ca:9d:ad:4f:
7b:38:11:11:44:a5:de:f5:d1:8b:43:cc:8e:f3:cd:
ad:d4:03:de:9d:d3:d8:67:f9:e0:f3:3f:ed:2d:9e:
ae:81:6b:63:35:36:8f:7a:62:32:9d:1f:a3:39:6a:
6b:7e:9c:18:dc:1f:a0:e2:28:4c:4f:91:7a:53:20:
68:dd:f8:95:e4:82:24:ab:be:22:94:a8:8e:3d:df:
8b:8d:16:25:4a:06:12:66:8a:d6:09:ff:e8:fb:b7:
6d:cd:5f:6b:32:a6:20:36:e9:97:0a:0b:2c:f9:81:
ba:37:bc:6c:33:e6:58:9c:25:a9:c8:43:1f:7b:51:
99:98:e0:42:8f:58:ff:40:69:e7:41:88:52:9c:cb:
35:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D6:78:73:DE:AF:E9:86:0F:B8:26:8C:68:1C:29:1D:51:86:77:5C
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/497C858A498B11EF8663C87AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.0.0/18
Signature Algorithm: sha256WithRSAEncryption
07:b7:74:f1:82:c7:40:07:ca:18:81:de:6e:bf:6b:b1:11:06:
08:8f:86:05:5b:0a:98:00:cd:b8:a6:c9:8a:29:b1:b4:16:15:
95:61:8a:35:95:71:5c:be:ff:a6:2c:20:e3:fb:4f:9c:98:02:
47:4c:c2:fd:31:03:e6:b5:77:c2:06:1b:7a:24:8a:cc:76:91:
24:9f:03:77:38:a1:4f:70:a8:65:50:07:c1:2d:39:d3:18:4c:
6a:31:cb:e6:0c:f4:fd:34:ff:c6:46:a0:18:92:c2:b0:e0:f7:
a2:ab:70:d9:42:15:7c:2e:f6:c8:d1:9f:e9:75:19:f4:53:4f:
e2:f9:29:de:92:9f:31:a3:76:3e:1e:d7:f8:6f:f4:0a:2e:05:
60:e3:d7:f9:aa:00:6d:6b:c4:0e:6f:f6:94:ec:13:80:9b:c9:
93:3b:eb:2f:95:d0:e4:29:f7:5f:14:b3:a2:1a:b5:56:c8:50:
c0:3e:5f:df:98:91:a5:5d:6f:55:c6:eb:61:39:47:39:67:23:
52:36:a2:67:25:e0:5e:c3:b9:a5:c8:29:11:7a:b5:9e:d1:0d:
35:7e:36:83:59:67:23:f5:71:c8:4e:ac:d7:2c:bd:69:c8:ec:
00:23:de:78:b6:78:1d:82:a7:89:41:cb:75:ad:01:97:1e:32:
b6:42:bb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 18:23:57 2024 by rpki-client on console-ams.rpki-client.org