Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/4CF6B49C6E8411EFB768503EC4F9AE02.roa
File: 4CF6B49C6E8411EFB768503EC4F9AE02.roa (raw, json)
Hash identifier: DUzAz3cXMiFHqsDzu2k6tkx81zmjfkL4UePCF09Um3s=
Subject key identifier: 06:49:40:49:19:1F:ED:73:82:66:4F:A2:57:93:B6:EC:F9:0F:D2:46
Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9
Certificate serial: 81
Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/4CF6B49C6E8411EFB768503EC4F9AE02.roa
Signing time: Mon 09 Sep 2024 08:19:58 +0000
ROA not before: Mon 09 Sep 2024 08:19:58 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 133605
IP address blocks: 157.10.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 08:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9
Validity
Not Before: Sep 9 08:19:58 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=66deafae-1686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f4:2e:5e:61:4c:38:c9:d7:37:20:db:0d:46:
d3:53:52:67:29:4a:99:f3:48:87:af:7b:33:f8:67:
17:09:c6:32:b3:b0:0a:7c:50:51:02:3b:38:a5:08:
03:af:e8:c1:4c:5b:8f:96:a5:bc:8c:5b:f6:34:cb:
3b:f4:e6:2a:d2:61:8d:e1:a1:63:6f:3b:18:94:6d:
d5:e5:63:6e:fb:02:f6:61:09:62:a3:da:6f:2c:5e:
d3:8d:03:2f:f8:b7:54:54:0e:70:2e:bc:d9:a1:01:
17:74:e6:d9:3d:7a:54:64:bc:64:3a:fe:a7:e4:e8:
3c:5e:4e:3a:5a:50:9e:a2:1d:95:dd:26:8a:e9:04:
84:bd:0f:ee:cf:2b:4d:93:7b:ab:76:15:79:f1:ac:
96:e2:da:d3:36:56:56:32:d7:6a:04:dd:e5:fb:4a:
07:c5:0a:d2:8b:42:e8:fc:70:28:cf:57:8d:4d:6d:
2b:5b:a0:91:02:ff:a4:05:67:e9:b8:db:38:e4:73:
03:e8:d7:42:de:ad:8c:16:bb:66:f5:8d:0f:a6:db:
c9:bc:b4:fe:c4:06:f3:25:41:a8:08:39:93:58:a5:
a1:9b:44:bc:1b:d3:c2:4f:e7:c0:bf:35:28:fa:0a:
78:cc:27:7a:8e:b7:e7:01:2f:8d:d3:7b:c3:ea:37:
c6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:49:40:49:19:1F:ED:73:82:66:4F:A2:57:93:B6:EC:F9:0F:D2:46
X509v3 Authority Key Identifier:
keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/4CF6B49C6E8411EFB768503EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.239.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:bd:3c:cb:2c:c6:c3:37:71:7c:b2:31:84:be:d3:f3:8f:cf:
1f:ec:39:2c:07:86:61:87:ae:34:2b:0a:49:26:f5:ab:5b:27:
d8:eb:4b:ee:ab:43:a1:3c:63:fc:21:9c:33:c2:9e:65:cd:be:
0a:19:ef:7f:ff:6a:aa:7f:67:a1:8b:a0:df:39:bf:0e:35:60:
0d:19:76:be:75:e8:36:56:d2:89:c1:2a:e3:8b:62:88:2b:21:
cd:19:43:f8:69:9f:fe:16:41:ca:ca:4d:d0:cc:b7:7b:5d:88:
0b:70:6f:e3:c3:be:0e:06:45:d4:95:19:9e:d1:9d:d8:48:26:
45:13:f5:db:78:6b:20:aa:9c:19:27:6f:2c:02:41:42:5c:89:
c9:06:13:af:06:b7:f5:74:f3:9b:96:e1:26:4b:29:cf:cd:b7:
c8:d2:19:05:78:d8:9f:c9:b5:5d:17:eb:c9:01:42:fa:40:5f:
b7:01:f6:3d:a8:0a:09:2d:42:8b:07:09:ed:ef:0a:b9:2a:c5:
ba:e9:86:fb:67:5d:70:0a:ad:7f:a7:75:fb:b9:10:40:93:5d:
ae:87:73:97:43:b9:75:31:6f:5b:fa:1d:9a:43:42:b7:a0:81:
83:db:34:6a:91:da:71:93:f4:57:4f:04:22:61:fa:94:27:2f:
7b:2a:24:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 10:29:21 2024 by rpki-client on console-fra.rpki-client.org