Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/E644384C820A11EFB50FE117C4F9AE02.roa
File: E644384C820A11EFB50FE117C4F9AE02.roa (raw, json)
Hash identifier: FHQgIowlfZDbQO57RCh3ZbNnTj9aD3jIFhP7ymnNH8E=
Subject key identifier: 56:92:B1:7C:E4:CB:B4:B6:03:B9:A5:A3:D1:1D:06:2A:48:22:32:E0
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 3571
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/E644384C820A11EFB50FE117C4F9AE02.roa
Signing time: Thu 10 Oct 2024 14:50:52 +0000
ROA not before: Thu 10 Oct 2024 14:50:52 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 3320
IP address blocks: 175.29.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Oct 2024 21:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13681 (0x3571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Oct 10 14:50:52 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6707e9cc-5725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:82:af:e5:7a:2a:12:cf:ca:99:e7:6e:e5:
bf:b1:18:c8:e5:b1:e8:ee:c2:e6:90:71:29:4c:fd:
1e:07:8b:60:8c:f6:db:bd:9e:e9:2b:a1:55:41:39:
de:2d:f9:f0:14:86:20:e6:da:c6:26:ca:5b:7e:03:
5a:ca:68:ca:42:59:94:e5:67:01:1a:38:b3:d3:e2:
fc:3f:51:83:8f:40:cf:e4:60:14:0c:46:a5:47:4d:
01:71:71:c4:56:bb:2e:0a:19:c3:06:12:cd:0c:82:
f5:9f:6d:e9:69:07:0b:d2:d7:e8:67:fa:e3:e2:59:
d7:ab:62:07:0b:b7:ca:a0:27:83:6f:fc:27:5a:e3:
62:39:ac:b7:41:6d:70:35:9e:1c:1a:4e:3d:39:6c:
f7:95:26:67:e7:ec:05:c3:cb:80:44:ec:92:81:e6:
0d:47:aa:9c:21:4f:8d:99:45:0c:c7:41:cc:94:2f:
af:7a:05:13:3c:f8:d3:d6:26:b2:8c:63:17:95:1e:
7c:ec:26:c8:19:b0:ff:a9:d0:92:d2:79:75:87:a8:
87:12:c8:c5:df:5e:7f:bd:3c:b4:38:75:c2:4f:0a:
36:b3:89:f2:bd:71:c4:12:e5:6f:67:9e:de:84:08:
eb:8f:3a:ee:80:73:4b:b7:7f:b7:aa:09:14:48:1b:
0c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:92:B1:7C:E4:CB:B4:B6:03:B9:A5:A3:D1:1D:06:2A:48:22:32:E0
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/E644384C820A11EFB50FE117C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.32.0/24
Signature Algorithm: sha256WithRSAEncryption
25:84:7a:99:5c:60:50:a4:be:af:1b:2b:dd:02:18:fe:e6:ec:
4e:e8:55:a1:13:78:2b:5a:5e:32:d5:ef:27:b1:9e:13:8f:6d:
6e:89:2c:a4:04:51:66:29:0d:6e:1a:f9:fd:54:83:b6:e9:ad:
54:a4:07:f9:7d:a9:55:11:d0:1b:00:ab:c8:a4:e4:81:bf:5e:
85:c1:ea:4e:57:7a:3b:2b:56:c2:b0:7f:74:d7:70:db:2b:e1:
a2:c2:32:fe:40:59:21:ac:7e:51:80:2f:8b:98:d6:3e:c9:75:
17:20:10:c4:bf:bf:fa:8f:41:5b:c4:5b:ac:cb:d3:cc:79:bb:
df:e9:67:db:01:a3:ba:3a:26:d1:0b:76:9e:c6:eb:8f:ab:52:
45:a0:ef:2d:e5:d1:b4:67:18:48:7f:a4:17:9e:84:08:a2:8b:
ae:11:98:de:12:83:fc:ca:f8:a1:5e:59:ec:c2:c8:4b:bc:b0:
f0:88:8d:7b:5f:a4:ef:4e:e0:e2:5a:fe:3c:45:35:4c:3f:59:
ff:ec:56:7e:03:a1:79:f9:12:34:30:89:2a:8e:91:32:59:8b:
46:58:fa:be:0c:9e:40:09:c1:49:56:ce:d1:53:d5:a3:ad:a4:
45:51:55:23:48:97:46:b2:fb:48:61:b6:24:06:5e:1a:37:e2:
4d:50:74:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 23:21:22 2024 by rpki-client on console-ams.rpki-client.org