Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/F515690CD26711EEB3025509C4F9AE02.roa
File: F515690CD26711EEB3025509C4F9AE02.roa (raw, json)
Hash identifier: lfMneqIDGH/AyM5ouR7XcHjcnK9Y2nDcPfCvT9262Qg=
Subject key identifier: FF:2B:F3:D4:58:91:E0:D7:37:DE:DA:84:55:AC:99:D4:3E:B3:7B:B5
Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8
Certificate serial: 09
Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/F515690CD26711EEB3025509C4F9AE02.roa
Signing time: Fri 23 Feb 2024 16:24:52 +0000
ROA not before: Fri 23 Feb 2024 16:24:52 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 152301
IP address blocks: 157.10.72.0/24 maxlen: 24
157.10.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 16:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8
Validity
Not Before: Feb 23 16:24:52 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65d8c6d4-b69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:7d:c7:09:ef:4c:35:5d:f5:d9:5a:f7:c7:
54:41:17:98:c9:d0:1b:a7:08:38:53:4e:6d:b3:ab:
85:d5:b6:03:7d:fe:3d:fb:91:c2:e8:a1:30:73:03:
0c:13:36:0c:82:e8:87:ed:9c:42:fd:55:9f:85:a6:
77:dd:86:c6:72:5c:93:f6:60:50:fa:08:2a:3c:fa:
e0:65:4d:b4:7c:60:2d:70:6d:af:9e:47:a0:61:c1:
37:16:da:1d:e6:94:7b:a2:d8:f2:49:65:5d:e4:79:
be:cb:6d:8c:32:c0:dc:fa:54:c8:06:b0:0c:fd:b0:
69:2e:62:93:58:33:5a:82:05:c2:95:4a:e6:83:46:
9f:8a:00:e5:b2:7a:71:16:f2:df:d7:b6:7b:96:26:
81:13:e7:20:fb:08:78:65:0c:cb:b5:0d:aa:2c:2d:
27:75:f8:96:f9:3b:04:bd:91:fa:1e:97:6d:55:ca:
ca:14:dd:d4:d5:ff:dc:32:d8:fb:b4:69:85:1f:36:
16:28:4a:a7:6e:6e:e1:0f:75:37:10:cf:af:dd:cd:
46:2f:e0:92:67:cb:f2:bb:cd:6e:27:6b:01:da:a8:
73:11:28:ba:6b:aa:0c:4e:d3:8b:a9:83:cb:c8:5e:
bd:7a:b0:c8:03:ff:4f:2e:b3:ae:4b:54:c9:34:58:
48:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2B:F3:D4:58:91:E0:D7:37:DE:DA:84:55:AC:99:D4:3E:B3:7B:B5
X509v3 Authority Key Identifier:
keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/F515690CD26711EEB3025509C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.72.0/23
Signature Algorithm: sha256WithRSAEncryption
39:14:be:9e:53:cf:5c:54:87:79:88:fb:99:0b:3d:8a:b9:09:
d8:e3:f0:15:eb:b4:11:1a:e1:4d:98:38:0a:ab:e6:d3:df:22:
72:12:24:96:b7:13:70:56:e6:ba:4d:54:0f:2c:ff:17:1e:f9:
0c:7c:09:b6:3c:84:18:e8:a7:e6:a1:f9:04:63:23:ce:9f:17:
4b:23:b9:d6:1f:24:c9:a3:ed:24:8e:bc:f3:00:b3:a6:2e:f0:
fe:77:e8:68:b2:e6:62:39:b1:79:69:81:de:b6:fc:6a:2c:44:
db:ed:4a:aa:4e:32:13:61:6e:35:ec:aa:d0:93:4d:58:0d:27:
36:b0:ae:07:36:07:d9:c5:33:77:95:f4:37:38:4b:10:b4:d6:
f7:13:12:7c:34:84:eb:16:dd:05:28:79:1c:62:8b:08:fb:29:
c4:78:d4:a5:d4:29:55:00:bd:51:ac:48:19:3a:36:93:08:dd:
9a:cc:d3:46:e0:7e:47:1c:84:04:27:8f:c8:d4:90:29:88:7b:
34:d4:38:dd:8a:27:2d:f4:74:f4:18:ac:5d:7b:d4:11:ce:21:
79:89:5c:27:7f:1f:90:b5:91:df:32:aa:e7:e8:ab:5c:c9:d7:
6a:34:08:4f:bd:62:2d:da:3d:99:8c:84:f7:01:7a:d3:17:6a:
6f:a2:34:5c
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NEVGOTExMC8GA1UEBRMoODcyQzkzNjg2NTZDNzc4MzU3QzJBNUE5OUJFQ0ZGRjY3
NzU1MEFDODAeFw0yNDAyMjMxNjI0NTJaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1ZDhjNmQ0LWI2OWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQClOX3HCe9MNV312Vr3x1RBF5jJ0BunCDhTTm2zq4XVtgN9/j37kcLooTBzAwwT
NgyC6IftnEL9VZ+FpnfdhsZyXJP2YFD6CCo8+uBlTbR8YC1wba+eR6BhwTcW2h3m
lHui2PJJZV3keb7LbYwywNz6VMgGsAz9sGkuYpNYM1qCBcKVSuaDRp+KAOWyenEW
8t/XtnuWJoET5yD7CHhlDMu1DaosLSd1+Jb5OwS9kfoel21VysoU3dTV/9wy2Pu0
aYUfNhYoSqdubuEPdTcQz6/dzUYv4JJny/K7zW4nawHaqHMRKLprqgxO04upg8vI
Xr16sMgD/08us65LVMk0WEjNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU/yvz1FiR
4Nc33tqEVayZ1D6ze7UwHwYDVR0jBBgwFoAUhyyTaGVsd4NXwqWpm+z/9ndVCsgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0RUY5Lzc1QTBDRDE0RDEz
NzExRUVBQTlGMTk4MEM0RjlBRTAyL2h5eVRhR1ZzZDROWHdxV3BtLXpfOW5kVkNz
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvaHl5VGFHVnNkNE5Yd3FXcG0tel85bmRWQ3NnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEVGOS83NUEwQ0QxNEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9GNTE1NjkwQ0Qy
NjcxMUVFQjMwMjU1MDlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAZ0KSDANBgkqhkiG9w0BAQsFAAOCAQEAORS+nlPPXFSHeYj7
mQs9irkJ2OPwFeu0ERrhTZg4Cqvm098ichIklrcTcFbmuk1UDyz/Fx75DHwJtjyE
GOin5qH5BGMjzp8XSyO51h8kyaPtJI688wCzpi7w/nfoaLLmYjmxeWmB3rb8aixE
2+1Kqk4yE2FuNeyq0JNNWA0nNrCuBzYH2cUzd5X0NzhLELTW9xMSfDSE6xbdBSh5
HGKLCPspxHjUpdQpVQC9UaxIGTo2kwjdmszTRuB+RxyEBCePyNSQKYh7NNQ43Yon
LfR09BisXXvUEc4heYlcJ38fkLWR3zKq5+irXMnXajQIT71iLdo9mYyE9wF60xdq
b6I0XA==
-----END CERTIFICATE-----
Generated at Fri Feb 23 22:22:35 2024 by rpki-client on console-ams.rpki-client.org