Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/BB46FCE66E7411EF909DEB73C4F9AE02.roa
File: BB46FCE66E7411EF909DEB73C4F9AE02.roa (raw, json)
Hash identifier: pef/ssFzJ5c7+q8RklYhGS6OCIu8BoyqhvBxw18nrAo=
Subject key identifier: 2D:7F:69:E6:C3:C0:7A:EC:7F:62:81:A6:62:D4:CE:7F:74:5A:DD:26
Certificate issuer: /CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1
Certificate serial: 97
Authority key identifier: 54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/BB46FCE66E7411EF909DEB73C4F9AE02.roa
Signing time: Mon 09 Sep 2024 06:28:31 +0000
ROA not before: Mon 09 Sep 2024 06:28:31 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 63969
IP address blocks: 210.87.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 11:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1
Validity
Not Before: Sep 9 06:28:31 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66de958f-eb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:88:ff:85:25:8e:22:f1:0f:36:b7:c0:4c:
bd:21:c1:ee:52:47:31:f9:cd:fe:5c:9f:a9:cf:32:
b0:d3:00:b9:3d:d5:05:b0:28:a6:e6:bf:27:83:71:
92:4d:ca:e5:a5:25:67:51:4c:fa:ea:c7:1c:ab:bd:
b6:60:f3:08:32:d3:79:63:d9:d8:c8:87:d8:56:fd:
05:ef:4c:35:d1:ff:3a:40:9b:ba:fe:4c:2e:3d:ff:
f8:3d:37:f2:f7:da:9d:3d:0e:a8:92:32:12:7f:89:
c6:d2:66:80:37:36:12:42:11:43:25:49:57:2b:7c:
16:e5:0d:36:7e:d1:f0:b0:ee:8e:dd:a5:16:ad:d8:
35:c0:b8:88:f7:c9:9e:c2:98:8c:51:66:58:15:8a:
72:30:e7:1f:80:27:b6:b3:f7:09:55:cb:a2:99:99:
6e:bb:ac:e6:4f:cb:b3:83:06:0b:09:1b:b1:56:20:
5b:75:35:a1:55:df:bc:a2:9b:d8:ef:c4:af:6d:4b:
af:99:11:ee:0b:b7:a8:65:3a:28:c5:f8:8d:85:8c:
9b:e3:b6:b0:68:8a:28:c0:8e:1d:c2:34:40:70:aa:
e0:92:69:13:10:bd:e1:2e:27:28:1b:b5:d0:e7:b6:
63:26:15:f8:93:51:b9:86:b7:18:2c:e1:66:c4:b7:
5e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7F:69:E6:C3:C0:7A:EC:7F:62:81:A6:62:D4:CE:7F:74:5A:DD:26
X509v3 Authority Key Identifier:
keyid:54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/BB46FCE66E7411EF909DEB73C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.87.69.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f2:a8:a8:3b:33:67:75:8c:3b:ec:41:1a:d9:f3:6c:30:f1:
69:29:fe:0b:bc:42:8a:53:ca:c6:c1:f1:d5:46:e4:06:4f:17:
4e:26:3d:e7:80:ea:2e:70:ba:35:d3:64:80:a4:27:b7:be:75:
66:03:2e:d1:b2:48:53:15:b3:0c:09:5c:6d:09:2f:b0:d8:55:
cb:e6:cd:e7:bb:98:12:2a:44:b6:9a:43:52:b6:23:45:7d:c6:
51:9d:22:c7:64:7f:92:24:e1:f4:6b:0b:15:aa:1f:93:2c:b6:
cf:24:0d:72:68:72:d9:ec:17:b3:82:0b:92:d8:f3:96:b4:0a:
ac:4d:ea:8f:5f:bf:bd:df:34:4d:a6:e9:38:82:1d:a6:fa:08:
f0:90:2e:54:e5:63:02:23:35:7d:a7:02:31:ce:48:a6:62:f2:
52:76:ca:dc:47:29:0e:e3:ff:4f:df:a7:3e:30:8e:f4:e6:72:
ab:a9:97:89:1b:5e:3e:b3:b2:7b:e2:20:64:47:ba:01:47:b7:
1d:b3:93:cb:99:2c:eb:6d:91:f1:07:19:7e:15:c9:d9:79:10:
49:4a:c2:da:a9:29:66:df:22:61:38:22:72:5c:24:47:00:45:
0c:c4:c2:28:f0:9d:f1:b4:18:d6:3f:82:cb:ef:c3:a5:05:15:
e5:2e:43:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 15:01:50 2024 by rpki-client on console-fra.rpki-client.org