Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/A244D92411E111EFBEBDD04FC4F9AE02.roa
File: A244D92411E111EFBEBDD04FC4F9AE02.roa (raw, json)
Hash identifier: Sn/X8QwI7RWARUV5M3ib9s4fogqlJ/WgTeiO4skend4=
Subject key identifier: 09:39:10:A7:62:E3:27:2A:1A:84:08:87:F2:63:5F:72:D6:51:2E:C3
Certificate issuer: /CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
Certificate serial: 44
Authority key identifier: 34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/A244D92411E111EFBEBDD04FC4F9AE02.roa
Signing time: Tue 14 May 2024 11:03:46 +0000
ROA not before: Tue 14 May 2024 11:03:46 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 140362
IP address blocks: 157.10.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 02:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
Validity
Not Before: May 14 11:03:46 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=66434512-5b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:64:33:6e:8c:1f:3a:de:67:5c:31:fe:58:
a2:72:f7:21:61:64:eb:f9:73:fa:8e:d1:f6:e8:0d:
b6:fe:15:c8:95:cb:7a:09:81:dd:30:61:d5:22:57:
ce:1b:39:3f:cc:1e:73:08:ed:3c:96:d9:52:18:fb:
8e:1e:d3:54:50:48:53:55:a5:fc:44:3a:b1:bf:db:
f4:19:f1:a6:82:7e:15:31:37:fe:06:fa:de:bf:17:
29:37:dc:35:d0:85:a8:6d:63:a2:9c:99:97:c2:75:
37:d5:b5:da:85:33:6a:85:88:e3:17:c3:e0:3c:4a:
11:54:d9:1a:ab:7b:91:53:27:69:d1:51:1f:6e:0a:
be:a8:6c:46:80:24:41:61:cc:5f:67:55:44:d5:9e:
93:3f:8a:c9:d5:5c:3c:af:4e:8e:d5:4d:e7:b1:5a:
7c:4f:22:1d:97:93:67:92:5b:d3:e5:ef:4d:49:31:
dc:2b:58:b8:01:9c:2b:42:35:2e:56:d6:b4:e0:64:
9a:01:01:be:c4:f6:3a:de:d7:80:9d:d3:c7:89:ba:
77:ec:5f:a5:91:c8:f1:81:b9:60:10:07:2b:22:07:
e7:34:3a:45:55:7f:eb:04:f8:b4:11:47:f4:60:94:
dd:5b:fe:60:6d:72:07:77:ba:7f:6c:c7:b1:71:4f:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:39:10:A7:62:E3:27:2A:1A:84:08:87:F2:63:5F:72:D6:51:2E:C3
X509v3 Authority Key Identifier:
keyid:34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/A244D92411E111EFBEBDD04FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.251.0/24
Signature Algorithm: sha256WithRSAEncryption
74:01:31:32:9b:bd:a4:af:b0:59:e7:53:fd:c3:c3:4e:06:94:
0c:bf:e4:ab:85:e6:b4:ae:96:14:48:7f:47:80:5d:94:30:c9:
05:d1:75:c5:38:94:52:b5:4c:99:79:f0:b4:d2:9f:00:64:c3:
97:80:f9:2a:2c:39:ce:2c:51:9b:88:ed:c6:65:4d:f9:b4:c0:
23:16:0f:42:cb:5e:c0:e0:20:85:1c:ae:47:9a:41:7a:60:d5:
86:c7:aa:7f:5c:0d:18:39:e0:be:3b:17:b6:05:72:d2:28:b5:
2e:6f:2a:0b:ff:83:19:f2:d0:cf:29:9c:fa:47:b6:cf:87:ed:
9d:ff:8b:d6:d5:f8:8e:6c:1a:20:e7:1c:f2:48:c0:f3:2a:73:
03:99:87:c0:89:0d:d6:52:6e:66:22:df:8f:da:83:80:6b:9a:
eb:b7:da:6d:32:b0:ce:b3:7b:1b:36:40:c0:7a:d4:91:8b:51:
e7:85:30:45:29:0d:8e:c0:7c:36:92:e8:99:26:c0:e5:31:67:
1a:e7:12:3c:3b:89:c5:18:58:39:92:04:c1:9d:3a:80:b7:d9:
bc:a9:4f:e0:a4:2c:ed:76:a0:12:37:7a:da:73:2b:01:55:ce:
83:2a:2b:a6:e7:e5:58:aa:3c:16:a6:da:37:7b:95:08:78:b4:
c2:cb:c9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 04:25:47 2024 by rpki-client on console-ams.rpki-client.org