Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DEB262209AB011EF91F6B61BC4F9AE02.roa
File: DEB262209AB011EF91F6B61BC4F9AE02.roa (raw, json)
Hash identifier: MQ2peW5dFPXzpZUKhXPDybxpcGBPTk2QFk+EeR37/s0=
Subject key identifier: 24:7D:22:56:3D:05:D9:F3:27:4F:DF:FC:1E:E1:C4:B1:A0:6D:4D:68
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 35A2
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DEB262209AB011EF91F6B61BC4F9AE02.roa
Signing time: Mon 04 Nov 2024 13:29:51 +0000
ROA not before: Mon 04 Nov 2024 13:29:51 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 175.29.21.0/24 maxlen: 24
175.29.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 19:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13730 (0x35a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Nov 4 13:29:51 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6728cc4f-ddc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:d6:10:52:93:ae:f0:ec:4b:60:84:f1:5c:
a4:a1:93:df:4c:2c:f6:2d:3e:26:53:59:e8:0d:4e:
7f:f7:c2:09:e2:9e:77:65:a5:5d:b7:ff:e3:7e:bf:
20:08:ec:1b:be:d7:75:56:f9:c3:6a:d5:38:d1:a9:
ee:91:0c:fe:19:6b:5a:e7:3a:83:49:d8:58:b5:c5:
41:37:46:a1:34:e4:64:67:02:d7:c3:66:e6:91:80:
11:9c:1a:8f:2f:94:09:f6:00:b4:bb:9c:42:2c:8a:
21:ee:41:e4:70:12:5b:92:a8:c5:3c:56:30:26:a2:
c8:96:96:5d:ca:8c:17:01:9e:2b:44:45:5b:b9:91:
6e:1d:ac:a2:10:8f:b2:1a:e4:51:6b:f7:a0:19:5e:
38:89:7e:60:4a:a1:9c:9a:95:13:34:bc:08:d6:12:
e9:c6:8a:36:61:53:48:d8:ec:8e:74:55:9e:90:6f:
b3:7b:7c:22:16:65:04:a3:6c:bb:ee:b4:06:7a:96:
9d:59:84:1e:a3:3c:6a:58:03:a1:36:a7:86:9c:2d:
fc:bf:a4:80:66:7d:ca:66:9a:48:69:79:c5:02:e3:
09:0f:65:75:ec:e3:73:aa:e6:29:67:33:a9:54:33:
6a:10:2b:9c:d4:65:f3:3f:e9:e4:44:ac:1e:ed:8f:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7D:22:56:3D:05:D9:F3:27:4F:DF:FC:1E:E1:C4:B1:A0:6D:4D:68
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DEB262209AB011EF91F6B61BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.21.0/24
175.29.32.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e3:10:77:e5:5f:6c:4f:c4:4f:56:09:8c:ed:47:e7:c8:bd:
56:28:0f:f1:56:49:a3:a0:e9:6f:de:1a:a5:c0:94:66:e1:9e:
32:5a:e7:3d:6d:ae:d2:76:ef:5a:ce:51:80:53:28:18:46:80:
bc:70:32:e7:b2:8a:72:de:cf:17:43:f7:bc:00:6f:fe:33:9f:
e4:07:c5:ed:3a:0b:19:9d:21:e2:ad:e4:7e:06:0a:3d:47:d8:
f6:41:57:eb:36:58:49:19:95:e2:3f:3d:63:d6:73:be:4d:04:
dc:79:f2:d5:ee:d5:24:18:f1:5b:3d:39:8b:14:e2:80:c7:19:
24:b5:81:7c:e0:63:ce:f0:bf:e1:c3:fb:cc:27:8f:ae:97:ec:
f0:84:7b:f1:68:ce:8a:93:3f:67:69:d0:3d:ea:80:ca:b1:e5:
22:d4:ce:76:37:87:60:97:d8:8b:2e:67:7c:5d:dd:cd:cb:f1:
ee:90:05:fe:2f:e6:f7:7e:77:87:8e:47:fa:89:93:cf:ad:87:
73:79:aa:26:a9:05:68:3f:5e:1a:61:30:29:99:e4:80:09:dc:
20:16:81:53:20:30:53:c4:17:8d:58:93:09:76:62:a7:0d:06:
ec:7f:e6:97:f4:bd:7b:73:93:57:ee:4c:e7:60:8f:fe:8d:89:
8f:12:41:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 23:03:49 2024 by rpki-client on console-ams.rpki-client.org