Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/ADAE2980A05B11ED9406DE26C4F9AE02.roa
File: ADAE2980A05B11ED9406DE26C4F9AE02.roa (raw, json)
Hash identifier: HbSOdsSqcF1G7gTxkDLodEUN/xpO2eZcH6QINJKf2So=
Subject key identifier: B1:45:77:3C:25:44:93:04:57:C4:95:E1:A8:62:72:39:59:EA:B9:76
Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial: 24F6
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/ADAE2980A05B11ED9406DE26C4F9AE02.roa
Signing time: Tue 31 Dec 2024 15:53:34 +0000
ROA not before: Tue 31 Dec 2024 15:53:34 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 132866
IP address blocks: 147.50.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 08:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9462 (0x24f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Validity
Not Before: Dec 31 15:53:34 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6774137d-412f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a3:29:87:8d:2f:4a:b2:fe:66:c8:84:48:0b:
c7:e3:c7:b8:2d:4b:64:63:f2:49:7a:7b:9c:d5:00:
1d:81:45:93:3c:05:42:d4:72:ef:77:a9:52:2b:f8:
3a:77:32:af:5f:ea:a8:6e:b1:34:1b:9a:13:82:4d:
ab:35:d1:6a:5c:ad:6b:62:77:9d:84:11:90:06:9b:
7d:70:74:1b:a2:be:01:d6:aa:77:a8:0c:51:1f:70:
83:d2:2d:b2:bd:1b:aa:70:2e:15:21:cd:5f:a9:f7:
08:02:43:75:42:4e:d6:cc:0f:99:e5:36:bc:48:a7:
9e:6b:8d:8a:e8:7a:d8:e3:22:4a:52:e2:2e:4f:67:
c6:38:54:5b:28:a2:20:77:1d:59:59:10:3c:f5:80:
c9:0c:7d:ed:6b:bd:f0:96:1a:b8:93:1d:b7:cf:10:
c6:fd:de:8c:e7:0d:77:2b:6e:13:4a:f0:c9:fa:0c:
ee:3a:38:83:87:52:bc:bb:a3:29:aa:1e:b0:5c:04:
4f:1f:79:83:93:af:e4:ac:65:b6:59:e0:35:71:cf:
21:d1:0a:d0:10:22:da:76:f3:26:fe:6b:30:7e:48:
7b:2b:0f:72:f5:d2:e1:4a:bb:e4:f1:34:1d:a8:5f:
7f:5b:8f:89:0c:4c:d5:3a:8f:7e:a2:51:98:81:52:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:45:77:3C:25:44:93:04:57:C4:95:E1:A8:62:72:39:59:EA:B9:76
X509v3 Authority Key Identifier:
keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/ADAE2980A05B11ED9406DE26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.50.193.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:50:c6:cf:c0:62:cd:79:ac:db:9e:a7:a0:81:f6:d6:db:f6:
df:3c:3c:67:24:5f:58:cc:a4:40:d0:28:03:21:fd:f5:1d:37:
f5:6e:aa:e6:eb:c2:86:a9:fd:38:92:dd:24:91:1c:15:43:45:
f7:15:78:82:74:e7:db:34:46:60:fc:60:f6:f1:33:cc:b1:6a:
0b:ca:db:25:57:34:65:6c:4e:73:d2:6e:db:fd:77:4e:33:c7:
8a:fd:07:93:f2:4b:3c:73:42:d3:9d:7b:12:79:35:50:9f:bc:
aa:a2:4b:0d:de:db:02:2f:66:fe:c6:a4:ea:08:0e:05:4f:a6:
74:71:4b:96:d0:30:85:65:ac:2c:ab:70:ff:87:dc:13:ed:81:
02:e4:71:9b:9b:4c:f1:14:c1:a8:af:b9:c2:06:3d:f8:26:fa:
01:97:36:61:22:45:56:4a:71:b4:14:05:7b:08:53:15:d8:fa:
d8:55:ec:b8:b2:2b:d8:b6:d3:c7:b6:f0:b5:67:27:15:68:af:
d0:ce:19:16:06:c4:51:46:90:93:58:cb:40:fc:0a:cb:ca:c0:
0d:05:39:12:20:93:dc:f3:21:34:57:05:29:ed:77:e0:7d:c6:
70:14:7a:a4:71:81:ed:d1:ba:a5:4f:25:40:ac:53:65:74:0b:
6c:c4:0d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:10:43 2025 by rpki-client