Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/B7447DDE020511EF9142D32EC4F9AE02.roa
File: B7447DDE020511EF9142D32EC4F9AE02.roa (raw, json)
Hash identifier: ok/jqT9LWAnKBw91FngZeeHSkSeEPQy90QUc940ihD4=
Subject key identifier: DF:95:D4:63:87:78:08:50:1C:EF:E3:C1:52:1A:AF:FC:6D:78:E7:CE
Certificate issuer: /CN=A9197CBD/serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D
Certificate serial: 38
Authority key identifier: B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/B7447DDE020511EF9142D32EC4F9AE02.roa
Signing time: Wed 24 Apr 2024 06:41:45 +0000
ROA not before: Wed 24 Apr 2024 06:41:45 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 138622
IP address blocks: 157.10.174.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 09:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197CBD
Validity
Not Before: Apr 24 06:41:45 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6628a9a8-8b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:a8:5b:8a:88:90:11:81:11:02:4a:27:13:
34:aa:de:66:69:a5:8d:a5:bc:a9:7d:63:a3:7a:6f:
b2:c5:93:dc:8f:21:39:da:9c:6b:9e:93:96:42:ad:
bf:e1:d5:ab:a5:03:c7:56:95:e3:b5:a2:ed:eb:70:
2d:41:b9:ca:f2:c7:a4:19:a7:74:fe:07:1a:62:18:
cc:95:a8:5c:1f:44:24:04:9c:40:bd:d2:fa:51:91:
f0:d0:15:a5:d5:df:74:bb:93:38:0b:92:2b:ba:31:
59:5c:ab:d9:84:c2:62:36:15:23:3d:f7:86:23:37:
99:ea:68:ec:01:f3:70:00:6f:54:df:a8:3b:a5:51:
5a:52:5a:48:f0:ec:19:b5:90:a2:8b:7a:1a:ce:5f:
55:95:ab:9d:2f:cf:f8:7a:ec:6b:1d:15:95:97:32:
a8:9e:d5:0d:8c:dd:b0:7c:28:6d:15:38:2e:9c:83:
ae:4c:39:86:d4:d8:2a:16:8e:17:a0:42:05:22:d6:
2b:84:87:b8:7e:47:d9:be:21:d7:ce:37:a5:f8:48:
b6:a4:dc:64:81:4d:87:f9:3a:05:f0:d3:c4:e1:3c:
e4:5c:1c:4e:c2:26:85:75:af:05:0a:34:5f:cb:6d:
ab:0b:da:10:2f:5e:25:ea:5d:b5:77:85:bb:b0:55:
ba:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:95:D4:63:87:78:08:50:1C:EF:E3:C1:52:1A:AF:FC:6D:78:E7:CE
X509v3 Authority Key Identifier:
keyid:B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/B7447DDE020511EF9142D32EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.174.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:47:c7:62:68:8b:24:b5:99:61:f9:2b:43:9c:92:6d:5c:f3:
c4:f0:d2:16:fe:07:3b:dc:da:87:be:ce:a0:1d:39:c5:a7:30:
b9:43:64:db:76:5c:80:41:de:ce:18:fa:88:18:c6:7c:62:9b:
c1:ed:f4:a4:ba:f2:ba:cc:b0:4a:17:b4:65:58:15:fd:68:57:
63:cf:00:cd:92:72:a5:71:fd:72:13:5a:bc:ce:45:ad:72:50:
2f:6f:95:7d:f4:9d:b1:39:f4:62:b8:a6:13:30:26:6e:8a:03:
83:91:22:61:94:2a:d4:9c:c7:e6:10:91:95:73:50:10:11:9a:
8b:0c:d9:7d:7b:58:59:22:f2:34:10:4f:fc:a6:f6:62:f2:48:
9f:b9:b1:88:58:0b:ab:3a:29:3b:b2:2e:a0:d3:7b:c9:3f:c0:
06:14:f8:c8:63:6a:45:df:b0:b3:62:0c:83:80:25:21:9f:6a:
01:8d:97:cf:8f:c9:ce:36:3a:4b:9a:45:dd:50:c0:d9:24:31:
08:7f:bc:cd:df:1d:84:45:ab:bf:29:d0:a8:ae:3f:49:62:10:
5a:c5:d2:c7:e0:2a:f7:2c:01:19:0b:33:dd:9e:f7:d0:dd:a9:
86:d2:73:45:79:17:69:54:c3:9c:9c:81:53:63:4d:43:98:53:
40:41:91:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:52 2025 by rpki-client