Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/15F0D772F1FE11EFA97DBF44C4F9AE02.roa
File: 15F0D772F1FE11EFA97DBF44C4F9AE02.roa (raw, json)
Hash identifier: zkkWnuAjGWyOwnrM0PcJO5QvtlGg9EvCgB6QLxq05io=
Subject key identifier: 3E:66:13:58:E2:1C:83:87:8E:C8:8A:47:4D:E9:01:FD:C7:E0:01:BF
Certificate issuer: /CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366
Certificate serial: 344D
Authority key identifier: 69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/15F0D772F1FE11EFA97DBF44C4F9AE02.roa
Signing time: Sun 23 Feb 2025 15:51:47 +0000
ROA not before: Sun 23 Feb 2025 15:51:47 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 4775
IP address blocks: 175.45.176.0/22 maxlen: 22
175.45.177.0/24 maxlen: 24
175.45.178.0/24 maxlen: 24
175.45.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 11:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13389 (0x344d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183010, serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366
Validity
Not Before: Feb 23 15:51:47 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67bb4412-b9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c6:26:63:1a:02:06:2c:70:3a:09:fd:6a:e0:
5a:ad:be:d8:c2:6c:db:d2:88:ac:57:0a:96:ad:f8:
d0:5f:12:de:98:63:1e:fc:89:dc:cd:c1:ae:25:23:
25:33:f2:8e:e1:20:61:a2:9f:18:5f:82:04:7d:74:
27:f2:a2:78:b8:d3:7f:d3:e5:cc:0c:57:64:b6:49:
b0:6f:dd:7c:d0:43:16:e1:d0:2c:fd:af:20:09:8f:
f3:68:df:13:e5:e5:7b:ff:e8:5c:36:f5:3d:4e:ed:
48:58:7e:10:d4:95:cd:d2:0d:3d:2e:0a:2d:b7:32:
4d:aa:df:97:bf:e8:4a:84:f4:8e:5b:3d:cd:11:57:
3d:72:eb:e2:59:c0:67:28:c8:96:5d:2e:ee:cb:13:
15:22:31:e9:7b:a3:16:be:e4:e8:a0:17:e7:e2:ab:
a0:a2:2e:e0:57:a8:58:6b:ff:f6:18:51:61:d2:21:
f3:66:24:2a:f7:43:55:70:86:34:70:44:7b:fd:30:
b2:75:5b:df:db:f5:bf:3f:c1:c4:3b:97:3d:d5:ed:
91:b0:fd:4c:b9:8d:4b:1d:2a:e4:93:94:a4:3a:9d:
3a:d8:3a:b7:99:c9:bc:6b:93:13:79:f1:d0:67:79:
59:38:f0:08:12:25:32:ec:59:25:fd:9b:5b:2a:a1:
74:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:66:13:58:E2:1C:83:87:8E:C8:8A:47:4D:E9:01:FD:C7:E0:01:BF
X509v3 Authority Key Identifier:
keyid:69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/15F0D772F1FE11EFA97DBF44C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.45.176.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:0d:04:13:02:ec:78:d1:8a:18:c6:f9:3c:c7:f3:12:13:cb:
6f:1b:fe:1d:39:63:46:83:c0:e0:79:ef:02:ce:d4:11:95:25:
ef:84:81:18:5e:5d:ef:9d:82:61:c7:4e:a5:94:42:e6:07:6a:
90:57:b9:74:cc:68:e1:b6:13:2c:8a:80:29:0e:60:84:66:81:
a9:2e:dd:9e:b3:10:99:6f:d2:cd:0a:97:b3:10:64:6d:0f:54:
65:f1:b4:23:e8:da:8e:07:3f:c4:a1:ae:75:85:7c:15:43:ec:
58:63:1b:e9:29:4b:13:ad:01:eb:d8:c7:51:4f:a4:14:fd:75:
c9:c4:03:de:ed:e8:c1:70:eb:c4:aa:6d:e7:da:42:80:f7:ab:
27:10:fc:dd:13:12:49:17:fe:e5:23:d1:08:76:75:f6:4f:f8:
7e:30:da:9e:04:e0:2f:ef:93:f7:69:fd:b2:21:1b:77:48:95:
38:83:81:de:40:19:d7:db:93:04:8c:b8:e9:86:a1:a3:e0:73:
8c:8e:1c:b7:0f:64:42:79:2b:19:06:44:04:43:e8:17:3d:44:
69:d5:04:b4:d2:2d:93:c2:13:c2:c9:7d:2d:5e:b8:bf:e6:a2:
ec:ec:6e:d9:c1:7f:dc:ab:d2:2b:64:5f:6e:02:e4:5b:7b:f8:
b6:ce:34:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:56:21 2025 by rpki-client