Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/406024D079AA11EF98079743C4F9AE02.roa
File: 406024D079AA11EF98079743C4F9AE02.roa (raw, json)
Hash identifier: SGlfV/8i4HXZbngv0ruPhUndCdFWOutzZCXz5NAD7mw=
Subject key identifier: 20:67:93:68:75:CF:3F:95:3F:2D:8D:33:90:B9:B1:72:9F:FE:88:E0
Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Certificate serial: 73
Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/406024D079AA11EF98079743C4F9AE02.roa
Signing time: Mon 23 Sep 2024 12:49:20 +0000
ROA not before: Mon 23 Sep 2024 12:49:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147006
IP address blocks: 157.20.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Dec 2024 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Validity
Not Before: Sep 23 12:49:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66f163d0-c012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:05:88:d5:54:3e:e5:74:7e:c0:06:2e:5d:
d0:21:51:41:c6:d4:5a:e5:bd:25:be:99:ca:be:5e:
e9:53:f3:f5:bb:32:c3:1d:80:72:41:b7:d1:7d:29:
a1:cd:42:2d:53:1a:57:5d:dd:80:54:77:b4:a6:0f:
1b:01:6e:90:62:ac:1a:df:3a:b0:ac:52:b1:b4:e1:
2b:f1:b1:7d:1a:b1:f9:09:3b:57:21:e4:17:a6:08:
de:29:cb:31:8f:bb:02:07:6c:7a:20:4b:73:da:67:
6c:c6:57:26:dd:f4:78:4d:ac:09:58:6d:23:bd:53:
31:d8:63:d3:6d:ef:b2:77:17:a7:29:d3:b3:1b:87:
ed:4f:94:f3:79:41:1f:8b:1f:97:31:6c:a8:5b:60:
fa:c5:c5:dc:16:a9:bf:f3:9f:83:5b:90:a0:6c:31:
78:0a:98:48:c9:f9:a8:80:ef:30:3a:53:d1:5d:53:
6f:5a:b0:45:99:84:55:3f:84:99:c6:4e:5b:6e:43:
f0:5b:32:f6:de:da:5b:cb:75:e4:8e:3f:cd:cb:13:
c5:ff:fe:27:d0:be:5c:fa:a0:c4:df:0f:60:de:b9:
9c:52:3c:70:cd:18:4f:04:0c:99:8e:d4:8b:7a:bf:
65:80:92:6c:59:bc:a6:d3:ff:00:4a:e4:df:ad:a9:
d6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:67:93:68:75:CF:3F:95:3F:2D:8D:33:90:B9:B1:72:9F:FE:88:E0
X509v3 Authority Key Identifier:
keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/406024D079AA11EF98079743C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.101.0/24
Signature Algorithm: sha256WithRSAEncryption
09:00:30:c9:b0:a7:bc:80:07:3e:86:f8:bf:06:be:79:ef:49:
4c:19:83:72:a4:d7:d1:ef:30:9c:c1:0c:19:16:64:ae:df:df:
bf:ad:ec:a1:b7:0e:a2:9f:b7:bd:2c:35:b1:3f:42:ce:2f:80:
06:47:ef:74:52:a9:cc:15:0b:11:a5:2f:9b:7c:18:f0:91:83:
18:a2:a5:c2:4f:51:3f:6a:34:00:2b:42:4a:d2:9d:13:57:20:
0b:4c:76:58:5e:69:4c:6e:65:df:82:b3:2e:39:d0:04:f6:9c:
b9:e8:0e:55:19:fa:02:38:71:6e:ce:f8:32:47:8f:0b:83:30:
cc:42:ad:1e:83:eb:72:11:81:df:5b:c5:b5:a5:6e:35:e7:ea:
1c:84:4a:38:2c:c5:3f:18:f5:fc:02:a8:29:ea:1d:ef:69:5c:
f9:06:55:e6:14:df:59:05:74:e6:bc:19:60:f8:c1:39:dc:04:
e8:92:80:18:b4:b6:60:33:59:ac:6c:ae:d7:2d:aa:26:30:51:
70:c3:cd:6c:41:98:6f:e8:5d:52:2c:2a:7d:76:7e:41:87:59:
28:89:ca:53:47:a7:86:40:9c:d1:e1:c5:43:67:62:4a:f4:b9:
86:c3:36:6c:ae:57:bd:e7:2c:95:1f:fa:a1:55:ab:e2:c7:29:
5e:95:b2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:10:44 2025 by rpki-client