Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/1B72ED266A4411EFB7F9EC59C4F9AE02.roa
File: 1B72ED266A4411EFB7F9EC59C4F9AE02.roa (raw, json)
Hash identifier: xp+3qhePGe0G6l1hxlU8GfVGhgbB0LQ9vzUSL5GOfhM=
Subject key identifier: B5:58:BF:24:57:FA:82:99:E7:45:C0:0C:5C:6D:68:80:07:7B:41:5D
Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Certificate serial: 7C
Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/1B72ED266A4411EFB7F9EC59C4F9AE02.roa
Signing time: Tue 03 Sep 2024 22:30:22 +0000
ROA not before: Tue 03 Sep 2024 22:30:22 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 834
IP address blocks: 157.10.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 09:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A13A6
Validity
Not Before: Sep 3 22:30:22 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=66d78dfe-cb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:97:40:46:98:58:2e:59:ea:3c:45:ce:c7:
26:bb:2b:12:96:b4:72:c3:b5:e4:84:60:95:1c:71:
b5:90:9b:7d:1a:37:09:49:47:5a:6e:b1:98:e8:fe:
a0:6e:ce:7d:ca:13:62:ae:95:65:8f:4a:bb:9a:b8:
8f:2c:ae:6b:50:92:0d:85:ce:a9:c0:8c:70:db:cd:
7f:97:4b:b8:1b:f0:45:f5:62:7a:75:9a:e8:17:00:
ab:85:51:2b:29:9a:0b:d9:e9:60:32:be:93:3d:84:
58:7c:b8:66:50:06:36:18:8a:75:ee:5f:f6:bb:23:
b3:aa:84:0f:62:dc:25:54:79:5a:12:3d:98:1d:29:
37:e3:2d:8e:24:ce:8f:da:49:22:e4:69:97:fa:dc:
ee:9c:95:ee:23:79:85:d3:e9:35:36:2f:f9:cb:fd:
be:bc:ae:d5:08:3c:27:c4:b8:d5:05:ac:25:52:56:
e4:6e:06:c3:f8:1d:ae:ff:45:68:f6:81:8d:4d:9f:
6e:5c:6f:e5:5c:7b:61:8d:72:87:f9:63:75:83:3a:
bf:67:ee:e7:43:b5:17:65:37:f6:e9:25:fe:47:a5:
2f:ef:ba:80:14:45:24:58:e9:5b:a5:2e:2f:db:56:
ab:6c:5b:8f:1c:9e:40:18:06:d6:a8:e4:46:96:54:
0c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:58:BF:24:57:FA:82:99:E7:45:C0:0C:5C:6D:68:80:07:7B:41:5D
X509v3 Authority Key Identifier:
keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/1B72ED266A4411EFB7F9EC59C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.104.0/24
Signature Algorithm: sha256WithRSAEncryption
70:02:6f:41:27:b2:73:8f:a2:40:e5:b2:75:15:19:cf:91:f2:
78:d3:b7:61:50:2c:b6:3c:e9:55:5f:d6:47:68:97:d2:66:4a:
10:58:f8:0e:51:98:a3:ac:32:7c:09:07:04:28:5c:88:1b:5f:
ae:a8:3d:30:5f:ae:99:4e:c4:42:5a:c0:b0:9c:ab:31:b7:b3:
40:15:08:9d:3b:54:af:0e:42:13:28:fe:d4:3f:fa:74:d9:68:
d9:97:ef:6a:ac:28:89:e7:75:8e:f2:37:d5:b4:4f:03:67:db:
6d:94:d3:ae:99:d4:db:17:9e:1d:77:04:fb:e8:af:06:68:73:
e9:d5:75:5e:61:3f:1a:51:de:3f:b0:54:5e:a8:9e:62:9c:e2:
00:62:1f:80:7d:f0:d4:b6:df:33:5e:d8:5b:46:54:ae:a8:8a:
ae:f2:3b:bd:dd:f1:59:40:50:e4:c9:87:44:5e:b7:34:78:e8:
70:f2:c6:76:f6:82:69:ed:5f:b9:da:0b:93:78:1b:3d:20:44:
e8:7d:f9:e2:c4:79:c7:70:4e:9b:f3:b9:49:c7:4a:8c:28:ac:
a0:30:9f:68:aa:63:db:f0:9b:22:e3:ea:c2:9b:c4:63:61:c8:
f5:f2:4c:31:cd:2b:b2:64:f4:87:75:60:44:5b:c6:c2:47:55:
32:4d:06:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:01 2025 by rpki-client