Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/EEEFAFA4C76A11EE8FF5D777C4F9AE02.roa
File: EEEFAFA4C76A11EE8FF5D777C4F9AE02.roa (raw, json)
Hash identifier: on93H47/oqq6fnW/jrez39dWyLfrVpQW5dV6C4AChGo=
Subject key identifier: 0C:97:C0:2D:76:EF:C9:EC:B5:45:3A:8C:A0:41:01:57:57:4D:7C:A5
Certificate issuer: /CN=A91DE500/serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980
Certificate serial: 03
Authority key identifier: 74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/EEEFAFA4C76A11EE8FF5D777C4F9AE02.roa
Signing time: Fri 09 Feb 2024 16:47:39 +0000
ROA not before: Fri 09 Feb 2024 16:47:39 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 152469
IP address blocks: 157.15.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 23:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE500/serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980
Validity
Not Before: Feb 9 16:47:39 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65c6572a-f8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:34:5b:cc:17:a5:46:28:b3:f6:e0:ad:e6:
cb:24:71:d5:67:da:f1:45:f7:69:45:58:f2:dc:58:
24:40:71:d6:93:88:5e:4b:29:57:b0:54:49:e3:71:
9c:df:43:b5:b8:fa:7f:07:c9:92:e3:7a:d1:10:61:
86:5a:8c:fb:58:70:39:80:ac:a2:96:27:90:2b:b0:
d6:29:f4:86:2b:ef:da:82:b8:7f:6b:b6:64:53:a9:
e9:d0:85:41:70:d0:8c:57:cf:cb:04:20:20:e4:4f:
0e:fe:d0:63:f0:23:8f:15:fc:54:14:58:ed:a5:ba:
4b:cf:60:60:c3:2c:9b:b3:a1:01:8d:b0:69:94:94:
83:ef:f8:09:6a:9b:43:0d:05:8a:a8:9e:0c:55:9d:
2a:43:9c:f1:50:7c:06:24:6c:56:df:c3:4a:0b:36:
db:ac:52:8b:49:46:ef:49:5c:70:f8:f3:f5:9d:fd:
00:4c:a3:47:81:b0:2d:5e:1b:49:d9:dd:ae:5b:c5:
73:56:e6:7b:d4:2c:a0:ce:e3:7a:c0:11:55:7b:c0:
cf:bb:bd:ee:80:44:f9:68:bf:c7:ca:41:46:9d:0d:
76:18:f6:66:0b:9c:4f:2a:60:fa:de:cb:65:12:76:
6c:68:54:88:e1:a3:1a:91:87:75:0b:7e:74:93:ee:
e4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:97:C0:2D:76:EF:C9:EC:B5:45:3A:8C:A0:41:01:57:57:4D:7C:A5
X509v3 Authority Key Identifier:
keyid:74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/EEEFAFA4C76A11EE8FF5D777C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.196.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:78:c4:0a:09:d7:50:11:2c:0e:ad:ee:29:a2:d1:c0:54:29:
52:43:8c:2f:9a:eb:14:a0:56:4e:b1:9b:27:c7:b5:50:5d:b3:
40:b6:2c:34:9a:76:9f:4a:cb:52:23:48:a7:5b:1e:57:3a:94:
c1:31:cc:63:e8:5f:d1:a8:23:6c:97:cd:fc:2e:4c:37:1b:72:
8e:94:7f:09:d7:8c:9a:58:c5:8a:f9:47:7e:c8:c1:c7:c6:97:
d9:50:07:1a:4c:85:7f:7f:3a:71:b0:bf:47:97:fc:b6:ed:0c:
8e:e3:f0:53:3c:59:ce:bd:51:cb:90:c1:fb:d1:07:65:98:f9:
0d:90:7c:d5:d7:ae:0b:7a:3a:f5:f6:3f:5a:79:8b:13:da:1c:
ba:ed:32:f8:24:6d:36:c6:32:0b:8a:b8:2d:69:10:a9:54:67:
58:e3:be:76:45:07:d6:60:46:02:99:0f:45:96:ae:b2:aa:69:
72:99:c6:bf:74:f7:08:fa:7f:08:05:b6:be:bc:cf:da:d9:e6:
d8:bf:6b:d4:2c:d6:2b:d7:9b:14:d4:97:41:bd:14:ff:21:e9:
8c:db:52:8c:02:b9:ae:51:e4:e8:e2:7e:bf:f0:56:24:41:02:
f9:1b:f6:bd:b1:1f:99:32:ce:71:18:94:b8:f0:7d:70:95:07:
6f:78:1a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 01:29:00 2024 by rpki-client on console-ams.rpki-client.org