Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/F090C65CF76411EE88806717C4F9AE02.roa
File: F090C65CF76411EE88806717C4F9AE02.roa (raw, json)
Hash identifier: KS86v7mF+6dJ+9U3ZOFBZb7JHV9eYXTP5IAlmJs4IDk=
Subject key identifier: 68:BD:AF:CF:6D:5D:6C:85:0F:FF:2B:12:9A:87:CE:27:E1:23:A9:D9
Certificate issuer: /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Certificate serial: 5F
Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/F090C65CF76411EE88806717C4F9AE02.roa
Signing time: Wed 10 Apr 2024 18:08:22 +0000
ROA not before: Wed 10 Apr 2024 18:08:22 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 152300
IP address blocks: 157.10.64.0/24 maxlen: 31
157.10.65.0/24 maxlen: 31
Validation: Failed, certificate revoked on Wed 24 Jul 2024 22:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Validity
Not Before: Apr 10 18:08:22 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6616d596-2088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:4b:48:93:41:ca:a5:e1:ca:6f:c7:03:20:
45:ff:db:7e:cf:9b:6d:e0:95:8b:94:4a:40:28:f5:
cf:bd:0a:50:e8:9b:06:dd:30:2b:0f:f4:58:58:92:
0d:ce:0d:d3:ea:3c:f7:cd:a3:54:54:38:40:c4:43:
c2:eb:c9:a0:d6:5b:9d:85:77:79:8d:0e:c4:8e:72:
58:61:22:01:0b:f0:a7:c0:11:ee:e6:b8:79:9e:af:
bd:0f:a4:82:9d:b7:87:fb:3f:6d:d3:e2:85:3f:ee:
6b:6d:82:79:0b:d6:50:fa:95:d5:ce:a4:dc:58:24:
fe:56:70:70:b2:9b:88:cc:db:80:32:0e:21:9b:41:
5a:c5:a9:ca:a5:91:f0:0a:ea:0c:0a:19:d8:e6:7b:
52:36:f1:25:bd:b9:be:73:a2:b1:97:95:8b:11:a7:
39:72:65:e3:43:8a:e8:23:d4:20:8a:a4:e7:f3:7b:
5b:ad:6e:90:33:66:09:74:07:10:df:71:c5:43:88:
0f:d3:2d:f4:9b:27:8a:90:df:c0:fd:a9:83:9f:a4:
39:b4:a5:fa:14:9f:12:5b:7d:d2:c1:a3:f4:31:02:
ef:fe:dc:31:38:5d:6e:8e:4d:9e:64:70:07:90:18:
9e:d8:c9:fe:8b:44:9a:43:ca:46:b0:08:82:9d:4b:
55:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BD:AF:CF:6D:5D:6C:85:0F:FF:2B:12:9A:87:CE:27:E1:23:A9:D9
X509v3 Authority Key Identifier:
keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/F090C65CF76411EE88806717C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.64.0/23
Signature Algorithm: sha256WithRSAEncryption
46:dd:1a:bb:8b:c0:a3:36:c3:91:90:2a:af:1b:f0:e1:9a:14:
4d:24:08:10:7f:19:f3:c6:cb:ee:c9:5f:4f:9a:11:5e:9e:3b:
6b:71:5c:cc:52:1e:97:07:a6:34:bb:58:7e:aa:f2:c2:6a:9d:
c2:30:61:00:18:ae:8a:4c:ce:cb:f7:19:14:62:61:27:95:25:
99:21:c4:b8:b2:e2:cd:b7:94:74:5a:bc:8f:54:27:02:59:9b:
88:70:8d:24:22:f3:40:73:1b:39:03:41:7e:24:b4:12:5c:e3:
e2:fd:16:db:43:28:6f:43:18:2c:90:d8:b2:67:a4:8e:d6:6f:
69:54:6a:ab:b7:72:4d:8c:9b:f1:e3:d5:bf:73:44:3d:44:0e:
e0:fd:44:87:cc:21:83:74:86:e8:ad:f5:56:f1:c7:d9:e6:71:
9a:dd:fd:1d:08:5b:c8:d8:10:f7:29:d1:6d:d1:5a:b1:94:5e:
eb:c6:c9:69:d8:d4:2c:c1:fb:1e:c5:82:92:19:19:0d:f1:ca:
eb:41:d8:42:c4:82:93:22:a9:45:8b:5f:4a:bf:ab:7e:30:83:
80:a4:9a:a3:24:63:26:10:ec:c2:de:7c:ff:50:d0:1b:5f:53:
ad:d8:33:e7:39:77:b7:b5:58:51:be:d4:f7:e5:2e:4e:06:2e:
61:89:d3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 00:10:05 2024 by rpki-client on console-fra.rpki-client.org