Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/93A1B2EE284C11EF91D50C0FC4F9AE02.roa
File: 93A1B2EE284C11EF91D50C0FC4F9AE02.roa (raw, json)
Hash identifier: MdXjZbjXSMuzHDxqYLEkuchNqa3lPgg0yYIlWbOXfx8=
Subject key identifier: 78:22:DC:C1:9F:02:2B:7B:76:D0:83:84:4A:25:FB:F7:A4:1D:C1:75
Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Certificate serial: 4C
Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/93A1B2EE284C11EF91D50C0FC4F9AE02.roa
Signing time: Tue 11 Jun 2024 23:44:43 +0000
ROA not before: Tue 11 Jun 2024 23:44:43 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 834
IP address blocks: 157.10.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jun 2024 19:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A13A6
Validity
Not Before: Jun 11 23:44:43 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6668e16b-9b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:5f:58:d1:08:e6:de:fb:09:c1:dd:22:dc:
b4:29:13:31:d2:4a:93:92:de:5e:32:1c:55:db:ad:
0c:cd:5f:14:e4:c7:dc:b7:4f:65:04:32:be:44:f1:
28:a2:78:d0:cf:2b:ad:9d:40:8d:de:cc:a8:c3:b3:
61:76:53:fd:78:44:2f:09:c2:84:18:b6:e9:ad:f3:
17:ab:fe:c1:25:8b:b8:de:a7:bd:a6:da:00:8a:f8:
b0:9b:58:ec:57:f1:92:ab:c4:1a:71:58:3a:5c:b5:
a2:51:ce:37:94:8f:8f:b2:c0:b6:57:98:83:5d:99:
d9:30:b1:f4:fe:71:45:2f:c6:d7:47:cc:2f:a2:9b:
95:c7:fb:36:bb:64:69:12:04:81:8d:e5:8a:3a:3c:
2e:37:95:01:f1:00:6c:cd:35:37:41:f0:61:ff:75:
52:42:2a:a6:31:65:1b:1b:ab:4e:2a:c0:2d:b3:67:
24:e0:c6:a9:33:07:97:2a:74:a9:c5:90:9d:ca:48:
e7:3a:49:62:9f:6b:1d:e0:9a:33:d6:74:36:f7:11:
a4:35:86:3b:3e:6c:dc:45:98:f6:e1:d6:13:61:b9:
ae:ae:f0:d9:68:b0:40:5a:d7:84:e4:35:14:78:d5:
d3:5d:c0:58:8f:70:d5:bd:32:6c:54:b1:be:fa:a7:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:22:DC:C1:9F:02:2B:7B:76:D0:83:84:4A:25:FB:F7:A4:1D:C1:75
X509v3 Authority Key Identifier:
keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/93A1B2EE284C11EF91D50C0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.105.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:da:0d:53:5e:e9:ef:6d:18:a6:34:c8:cb:69:b2:e3:ac:a1:
af:76:39:c8:a9:8b:89:aa:15:97:e7:32:65:79:49:8c:60:ba:
1f:03:25:16:39:be:9a:f6:88:ea:46:45:b0:a4:e9:68:7f:a8:
ca:25:2c:9f:54:6d:de:08:84:2b:b1:3d:f2:32:fb:71:1c:ef:
43:fb:3c:c1:17:2a:2f:6b:3c:ff:a8:5b:58:f8:50:1e:35:4d:
42:1e:27:aa:92:87:28:e5:e8:31:33:22:0e:d9:f3:9a:de:6e:
19:72:f2:8a:a2:ba:00:ff:53:bd:7a:31:2f:97:b5:bb:14:c0:
b9:c8:ea:f3:ef:9f:f8:6f:52:d1:fc:6a:a0:0f:8d:f8:84:c1:
2f:d9:3a:97:df:5f:31:05:b3:a5:35:cc:da:46:db:d9:55:d4:
e2:32:7e:88:d5:ec:80:86:03:dc:b6:28:c9:4a:e2:82:f4:77:
d0:c2:63:a2:20:1e:0b:12:46:29:a2:73:56:4e:29:eb:05:a8:
48:69:dc:d2:8b:7e:59:04:af:e6:c3:3e:79:e7:b5:04:d0:9b:
3d:ff:58:7c:2d:b6:07:f2:30:77:fd:6d:dd:c0:2e:eb:43:84:
4c:09:00:98:b5:3d:4f:7d:5d:ed:ed:89:cc:07:7a:9c:51:92:
21:06:1c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:44 2025 by rpki-client