Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/1CB84774AF8E11EEB05A5D6AC4F9AE02.roa
File: 1CB84774AF8E11EEB05A5D6AC4F9AE02.roa (raw, json)
Hash identifier: NPHl4Yro/pm34yJe3c5hHSqWSHy35PQsGkjr/HU1Ka8=
Subject key identifier: 6A:F8:F0:D3:88:BD:CF:11:81:2F:A8:78:CA:B2:8B:C4:BC:F0:3F:E4
Certificate issuer: /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Certificate serial: 05
Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/1CB84774AF8E11EEB05A5D6AC4F9AE02.roa
Signing time: Wed 10 Jan 2024 08:05:35 +0000
ROA not before: Wed 10 Jan 2024 08:05:35 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 152322
IP address blocks: 157.10.134.0/23 maxlen: 23
157.10.134.0/24 maxlen: 24
157.10.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 08:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B39, serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Validity
Not Before: Jan 10 08:05:35 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=659e4fcf-066d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:e0:8f:87:61:a5:da:36:5c:51:45:56:42:
89:e5:cc:d8:40:1c:07:cf:2f:21:63:ac:29:fd:e1:
df:4b:27:fe:26:f5:fd:7e:c6:7e:f9:a4:88:f2:4f:
be:4e:e0:6e:9a:98:0c:14:e0:1f:b0:f3:04:8c:bc:
53:fe:88:3d:3d:08:16:02:1f:21:c4:0a:8d:2d:7b:
45:79:29:07:d0:ed:ba:a9:0a:4d:1c:b9:17:ac:77:
1c:9d:cb:ff:c2:f5:28:6b:ab:d3:be:cc:f7:eb:15:
99:cc:1c:a2:91:47:ed:84:f6:73:9c:39:50:73:3e:
ef:be:2b:9a:96:6b:20:80:cf:f4:a6:74:3a:53:26:
b4:2e:eb:9a:db:63:8f:a4:b4:51:14:15:55:fd:c4:
00:17:46:43:fe:c1:03:80:f0:e9:23:06:3c:60:3f:
db:b1:82:ed:6c:04:1b:ad:cf:58:ba:d7:fd:8d:5b:
de:46:d3:1b:9e:81:e3:99:56:38:df:3a:54:bb:4e:
bd:f1:49:5c:ee:e8:68:aa:04:9c:43:0a:74:7e:19:
cf:42:37:d3:10:aa:74:52:18:7b:8f:31:5b:83:fb:
82:27:20:9b:44:bc:c1:89:15:21:08:87:68:33:a2:
51:fc:66:a4:d8:41:de:20:49:e1:53:96:26:2c:da:
95:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F8:F0:D3:88:BD:CF:11:81:2F:A8:78:CA:B2:8B:C4:BC:F0:3F:E4
X509v3 Authority Key Identifier:
keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/1CB84774AF8E11EEB05A5D6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.134.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:41:44:ee:7d:c9:5d:e6:18:d5:1b:93:a1:f6:1d:16:56:03:
ab:f1:c5:bc:7f:bf:b9:0d:6c:ee:58:74:84:74:3c:10:2d:ba:
c2:41:67:f8:76:3d:d0:bc:5f:5b:49:db:61:be:83:57:f7:04:
12:21:46:5a:79:1e:71:ab:07:2b:05:1f:41:a1:ca:21:48:cc:
de:cf:0a:47:e9:31:6b:a8:4b:c6:ba:33:ed:06:e4:80:cd:6e:
cd:01:22:11:94:30:ff:68:44:85:0f:12:bd:7b:19:82:75:f5:
70:ce:b7:dc:d5:12:7e:59:71:62:54:c7:69:7c:f1:3e:38:83:
72:90:80:01:b0:fd:ba:30:ef:4e:a4:c0:88:9c:e7:04:71:e0:
72:b6:65:87:57:05:02:5a:dc:b0:10:dc:df:ff:dd:cb:03:5f:
79:16:23:cb:f6:cc:6b:72:88:8b:97:a6:2e:9d:32:84:e4:57:
28:62:91:93:a9:ee:3b:1b:69:c7:f3:0a:7e:a1:c5:b0:f5:b1:
0c:53:c4:6d:31:ef:e6:db:29:f0:9b:c5:bd:62:a5:c5:4e:1e:
66:6a:23:ec:c8:f2:3b:2c:c0:41:9b:52:60:49:33:3b:15:df:
89:d1:20:76:16:91:eb:43:7e:f6:6d:89:02:81:d0:1e:ec:ec:
7f:32:3b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:08:25 2025 by rpki-client