Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/FF74077ED53611EEB0976F1CC4F9AE02.roa
File: FF74077ED53611EEB0976F1CC4F9AE02.roa (raw, json)
Hash identifier: BI1nsvintaSNq2v7oGUXhFEofwNY7tu1HHLv96PLsaM=
Subject key identifier: 81:FD:1C:DC:A9:D6:1D:79:43:2A:B8:52:D9:8C:0C:0D:87:5B:45:F5
Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9
Certificate serial: 90
Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/FF74077ED53611EEB0976F1CC4F9AE02.roa
Signing time: Wed 02 Oct 2024 08:03:27 +0000
ROA not before: Wed 02 Oct 2024 08:03:27 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 152334
IP address blocks: 157.10.238.0/24 maxlen: 24
157.10.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 15:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9
Validity
Not Before: Oct 2 08:03:27 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=66fcfe4e-717c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:74:ee:44:91:e4:ce:85:9f:7d:8d:04:74:7e:
75:ba:75:93:28:d0:c9:ce:19:a8:dd:6b:10:93:98:
a9:16:3d:58:a7:24:49:f6:5e:a7:5f:b3:1b:c2:bb:
ee:55:67:9c:72:44:24:7a:69:34:de:5f:b2:23:6f:
2d:f2:e4:3a:65:58:69:74:e4:9c:21:d3:78:dd:31:
74:b3:00:bb:c4:7a:82:61:6e:97:32:22:69:c7:f6:
30:25:66:43:04:9b:45:f5:18:ab:9b:bc:74:c1:d3:
dc:a8:bd:6f:71:4b:c6:d2:cf:67:cb:d8:ad:54:53:
e6:30:f3:c7:82:71:93:5e:31:29:a4:3a:77:1b:3d:
fc:96:a9:0c:40:06:2f:38:83:9c:92:fd:8f:55:fb:
7b:99:ea:52:70:1f:de:42:88:42:38:3e:a2:d5:58:
79:c5:b1:e6:5e:21:d7:aa:ab:eb:f1:18:2f:e2:06:
d1:6a:fc:dd:da:19:e5:a9:04:e1:ea:c3:d4:33:a0:
1b:ac:02:fc:50:24:22:fb:60:27:60:7e:17:44:15:
60:41:59:f8:bc:2a:37:55:28:73:11:fe:64:38:e7:
92:73:44:2f:d7:5b:e5:59:a9:96:20:ee:57:56:9d:
88:75:d1:d1:ca:76:6e:7b:b9:1a:0b:f1:34:4b:bc:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FD:1C:DC:A9:D6:1D:79:43:2A:B8:52:D9:8C:0C:0D:87:5B:45:F5
X509v3 Authority Key Identifier:
keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/FF74077ED53611EEB0976F1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.238.0/23
Signature Algorithm: sha256WithRSAEncryption
05:3e:3a:f7:59:74:11:a8:7c:ff:40:73:1d:9a:97:62:f2:6d:
a4:b7:c2:ae:8d:77:aa:25:f4:87:40:cb:36:9c:d0:4d:b3:5b:
10:fa:49:75:ed:16:1d:ba:60:a8:78:79:39:81:ee:c5:47:a8:
5c:a9:62:e1:22:ef:e1:86:35:97:c0:62:ea:0c:b2:b4:0a:08:
57:32:9f:c2:41:a3:e5:2e:64:9c:dc:3c:10:a6:58:b3:b2:62:
e0:c4:33:1f:c7:dd:46:b9:a2:28:a6:12:cd:fc:6c:96:ad:c6:
de:7d:d2:c7:b9:b2:54:a8:53:1f:be:1e:45:70:50:cc:c2:ff:
89:c1:60:af:8a:02:50:6a:90:97:02:7a:de:30:d3:f3:9a:da:
a6:57:8b:4a:74:96:4f:ed:dc:63:5d:06:45:e3:00:c8:8f:5a:
bc:37:76:a8:9f:f9:0d:64:c7:75:05:16:d7:fd:90:9a:38:91:
e5:6a:e2:2b:53:86:92:54:1a:21:5a:4b:b2:78:95:78:a0:80:
90:96:bf:60:7e:4f:ad:22:f9:db:7f:95:30:07:d3:0c:c0:16:
d8:11:23:cc:11:82:00:ef:3b:da:7b:e3:6b:6a:29:ab:96:c1:
b0:01:7c:9d:62:a3:67:2b:2d:12:38:c9:a1:74:59:12:5c:e0:
28:7b:99:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 19:18:18 2024 by rpki-client on console-ams.rpki-client.org