Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/3721BD14E20211EFABFD6C0CC4F9AE02.roa
File: 3721BD14E20211EFABFD6C0CC4F9AE02.roa (raw, json)
Hash identifier: KQGWtS4NrSW1rmApiBrVoU4wSloOpYZ6Y/O0uxdoG9w=
Subject key identifier: B3:37:9B:28:C9:EF:C1:D9:6D:44:0F:70:EC:8E:B7:A4:7E:EA:60:90
Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Certificate serial: 10
Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/3721BD14E20211EFABFD6C0CC4F9AE02.roa
Signing time: Mon 03 Feb 2025 07:41:02 +0000
ROA not before: Mon 03 Feb 2025 07:41:02 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 153568
IP address blocks: 163.61.44.0/24 maxlen: 24
2001:df5:6c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Feb 2025 07:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD34B
Validity
Not Before: Feb 3 07:41:02 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67a0730d-afd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:06:e9:8b:18:86:78:f9:30:b3:38:f2:5f:
84:d2:82:97:80:38:b6:48:c3:3a:e2:1d:62:32:29:
97:1d:b1:5c:2f:60:7f:94:ec:bd:4f:b9:47:4e:f1:
b1:89:a2:80:71:77:89:cf:ef:c2:8c:b3:67:35:2a:
6a:61:12:24:dd:40:f3:38:95:9c:ec:d8:22:77:f5:
57:de:90:ae:51:e7:16:49:0f:58:02:1d:c0:a9:2b:
e1:2f:c3:78:d9:d6:85:88:fd:c2:6e:99:ff:e8:5e:
34:75:54:bb:37:d0:73:d7:b0:33:cc:46:09:7f:a8:
37:2c:31:4b:4f:2a:98:49:6c:a9:2f:06:82:fe:b0:
1c:f5:65:36:c0:34:14:a1:5e:1c:c8:4d:95:0c:0b:
b4:f0:e6:15:7e:42:c6:1c:a5:b3:c4:cd:5b:20:d5:
74:53:82:5b:2f:3f:26:16:13:9c:13:8c:59:20:a7:
93:c5:57:24:c9:cc:dd:38:93:bb:8b:79:4c:d4:5b:
b3:f9:cb:01:0b:16:51:9c:08:68:af:05:ea:18:fb:
ee:52:ee:0b:f8:78:3c:32:64:ab:ec:78:9f:2f:0a:
b1:75:8b:77:64:14:8e:60:5e:a3:4f:b5:de:e6:c7:
13:ef:4d:c8:c4:cd:13:c0:fe:6b:d3:02:7e:7a:f1:
b8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:37:9B:28:C9:EF:C1:D9:6D:44:0F:70:EC:8E:B7:A4:7E:EA:60:90
X509v3 Authority Key Identifier:
keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/3721BD14E20211EFABFD6C0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.44.0/24
IPv6:
2001:df5:6c0::/48
Signature Algorithm: sha256WithRSAEncryption
26:f6:18:07:92:88:6d:86:b0:77:47:c1:9a:62:b0:f4:cd:82:
58:1c:54:53:a5:0f:f5:3b:c0:b0:78:33:7f:0b:01:7d:87:d1:
3f:1e:0c:f0:1c:80:a8:26:c5:7e:f7:8b:ce:b5:de:a3:a6:f5:
33:25:d9:e5:bb:c5:de:43:85:92:db:32:41:72:20:16:5c:d2:
5c:a1:c3:a9:46:bf:d4:cc:ae:27:28:96:2a:3c:1d:98:96:ba:
e3:7a:83:8d:34:c7:95:30:54:11:40:55:a6:3f:28:51:3f:49:
6a:76:d0:96:1b:87:74:dd:4b:f0:8e:91:0c:d8:a5:df:9f:ae:
2e:3c:21:c1:04:30:26:99:ea:22:7e:71:cb:04:51:2f:87:a9:
e7:e7:61:cc:d0:0e:e3:1b:b8:d6:98:17:d5:68:86:33:eb:72:
4a:08:c5:ab:63:48:a3:e5:5a:c2:bb:ea:2c:b6:46:00:06:5b:
e2:8e:67:50:84:30:7c:ab:d0:9f:ba:1d:02:94:04:ee:02:2b:
62:07:c1:12:4b:3d:4a:98:99:f8:02:98:c2:2e:c6:84:eb:7c:
f9:8f:c5:bb:dc:97:96:08:6a:d1:79:b7:fc:cf:26:0d:70:33:
2e:e6:88:7d:a1:1a:21:5a:b3:9a:70:0c:25:8c:74:8a:e9:fe:
42:95:6f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 14:27:08 2025 by rpki-client