Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/445426FEEABB11EF8666BA26C4F9AE02.roa
File: 445426FEEABB11EF8666BA26C4F9AE02.roa (raw, json)
Hash identifier: rL3630M27p1ucoDSgC8I/3WRFU9wEF0O+j9JxtN8VXU=
Subject key identifier: 4A:97:B8:F5:1A:9D:66:23:A2:8E:97:5A:0A:1D:7C:F4:35:7F:49:0C
Certificate issuer: /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225
Certificate serial: 15
Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/445426FEEABB11EF8666BA26C4F9AE02.roa
Signing time: Fri 14 Feb 2025 10:05:50 +0000
ROA not before: Fri 14 Feb 2025 10:05:50 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 9484
IP address blocks: 161.248.142.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 19 Feb 2025 12:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912142C, serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225
Validity
Not Before: Feb 14 10:05:50 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67af157e-dc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:c0:e7:c6:6b:f8:4c:74:14:1b:43:dc:61:
cf:78:86:bb:96:3e:9f:cb:5c:65:ef:62:45:07:b3:
80:82:ac:c0:c1:ca:a3:49:80:75:45:8a:50:21:ca:
3e:96:21:38:9a:1c:13:e6:ad:c1:b1:f1:75:8b:26:
e9:b3:f9:3b:89:7b:7c:e7:0d:6a:10:b2:68:bf:a1:
23:41:35:7d:bd:43:51:26:d1:7c:a2:ac:87:15:67:
d4:59:8a:fa:e2:a7:dd:64:59:24:03:a9:0b:5d:58:
00:71:17:39:49:a1:79:23:d2:fa:d5:71:c8:18:35:
c4:0a:38:6f:3f:53:91:c6:ac:4e:53:09:f1:1d:e4:
6e:c6:40:18:02:e8:6e:32:b6:85:d7:37:c7:d2:8b:
f9:3d:2d:96:08:21:e3:ae:ea:23:4d:8f:49:1e:c2:
1e:40:3b:0e:71:17:38:dc:c7:7f:ce:de:de:cb:9d:
ca:d9:c9:e3:a3:f1:0d:f9:de:1c:48:eb:2f:73:a9:
d1:57:03:ec:47:4e:c2:ca:31:39:83:c9:6a:02:73:
89:44:5e:c5:a8:eb:6a:cc:96:3a:0b:0f:c2:22:fd:
87:0d:34:0f:ff:0d:92:ab:5a:3a:7a:d0:69:3a:a5:
63:c8:f2:dc:e9:c7:c3:27:c2:cd:58:49:13:32:39:
0b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:97:B8:F5:1A:9D:66:23:A2:8E:97:5A:0A:1D:7C:F4:35:7F:49:0C
X509v3 Authority Key Identifier:
keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/445426FEEABB11EF8666BA26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.142.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:c9:9d:14:8f:a7:51:6f:29:74:78:ad:4d:66:35:09:5b:5e:
25:35:aa:7b:44:1e:d3:bc:4f:67:4a:0d:a6:e6:b7:cb:12:6e:
89:1f:5c:80:2c:94:ab:2a:06:55:43:68:ab:e9:2c:2f:d1:86:
55:46:63:04:a3:f9:ea:ca:0a:17:60:e1:a9:21:ef:1a:ea:93:
1e:ce:aa:22:09:b5:78:f3:ff:eb:ef:10:9b:c5:58:3f:50:98:
84:54:f2:dd:76:14:4d:c0:41:ed:d8:20:24:fb:e9:c4:b1:97:
bb:f7:5c:03:e7:33:88:62:26:74:60:44:0b:0f:71:bd:05:13:
9e:2f:78:15:de:cc:7e:9e:6d:f5:1e:e4:06:75:23:0f:90:4c:
24:e5:2c:91:cc:6a:a4:3d:08:ca:be:7e:54:c7:d0:1c:1e:da:
ac:b9:2e:a2:5a:a2:4a:bd:d8:2d:c0:c7:45:16:e2:72:73:b7:
94:be:69:e0:c7:c4:23:5c:19:78:7f:e6:1e:d9:22:48:5a:40:
b3:ff:8f:bf:07:b7:39:15:01:87:4a:45:ce:aa:56:73:1e:64:
81:45:1d:37:42:0f:37:bd:53:d7:d8:dd:28:81:3d:b9:d7:8c:
a5:b2:24:6d:d9:96:ff:55:76:5e:e2:38:b4:76:74:41:19:91:
fd:02:41:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:04:31 2025 by rpki-client