Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5AA01178D08311EE9A94AC1BC4F9AE02.roa
File: 5AA01178D08311EE9A94AC1BC4F9AE02.roa (raw, json)
Hash identifier: AjmmYP/qxdzi2SiJ2N9U+qjOdvapVBX59DOBSK3ACek=
Subject key identifier: 20:EC:E5:2D:37:A8:4B:C9:54:85:CE:4E:D6:4E:B1:67:FD:C2:25:88
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1904
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5AA01178D08311EE9A94AC1BC4F9AE02.roa
Signing time: Wed 21 Feb 2024 06:35:08 +0000
ROA not before: Wed 21 Feb 2024 06:35:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45820
IP address blocks: 157.15.132.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 04:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6404 (0x1904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Feb 21 06:35:08 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65d5999b-b124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:77:39:8f:d5:aa:26:c8:c2:5e:f3:5a:0a:
a1:17:29:88:bf:66:c4:8a:7b:07:ed:04:76:0a:9c:
69:a4:fc:12:fa:6d:cd:af:e9:e1:3a:5d:a5:28:79:
1c:a6:3d:77:f7:dc:73:e5:ad:ce:3c:34:1f:fb:f6:
96:40:3f:37:9d:ce:58:5b:cd:6c:50:73:72:a8:ac:
83:cc:a9:a3:6f:a4:bc:21:44:2a:09:1c:43:20:69:
85:07:e9:ce:7f:05:84:21:ba:1a:cf:20:ac:c3:7d:
ae:1e:76:97:0c:e0:d4:be:c2:0d:63:d4:d3:1f:f9:
3c:65:e4:9a:41:8b:6e:00:da:db:5b:a2:c6:82:77:
17:4e:65:d9:67:d2:e3:9e:58:c6:4f:7e:53:d8:bb:
d5:78:a5:58:2b:ec:d5:09:3b:7d:e8:9d:4f:a4:2b:
85:b6:0d:95:11:b5:bd:30:b4:1a:81:54:8f:d6:e8:
a2:26:ef:cd:c8:40:f5:a2:ad:86:c6:b4:26:c8:eb:
a1:26:49:00:f5:42:0b:4f:3b:f2:6c:47:12:e4:c2:
53:00:e4:59:2c:97:9f:c1:3d:0b:4a:f5:a7:a5:cc:
f0:78:7e:b4:94:01:86:76:0c:86:ba:5a:9a:ee:0d:
71:d5:ba:86:27:a2:e5:7f:1a:df:b5:71:18:54:53:
9d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EC:E5:2D:37:A8:4B:C9:54:85:CE:4E:D6:4E:B1:67:FD:C2:25:88
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5AA01178D08311EE9A94AC1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.132.0/23
Signature Algorithm: sha256WithRSAEncryption
40:9e:28:a4:ae:4b:0b:d0:e0:7f:4a:21:01:44:38:48:95:bd:
1d:37:c0:7f:1d:06:1a:86:94:7c:31:61:60:0c:b8:58:82:ba:
72:39:c3:66:df:0c:37:5f:16:e0:6d:ac:e1:50:4a:87:82:47:
79:f3:7b:6d:e7:7a:b7:5d:c2:c8:33:4b:56:6a:c0:b2:5b:23:
59:26:db:bd:7f:c6:81:f6:83:7f:30:36:50:00:68:42:1d:27:
9a:03:c6:3f:0a:81:2e:c8:91:42:88:5f:75:1d:1d:f5:fe:33:
08:83:d6:20:39:a5:eb:ef:d6:62:4b:a8:49:59:ac:c4:eb:fd:
ea:6a:82:9b:5a:52:fd:5b:cf:d0:68:58:e2:cd:c2:39:3d:c2:
9e:64:aa:5d:2d:43:f0:41:d7:80:6d:87:39:5d:5b:e6:7f:16:
39:fd:00:01:e5:51:68:0c:d9:89:99:53:cb:39:11:49:51:ed:
50:76:0a:79:8c:b9:72:41:a9:64:37:dc:79:02:92:d9:33:22:
a6:bb:3e:64:9e:c9:86:4b:68:10:8f:f1:e9:9e:f5:3e:ac:25:
7f:e7:88:c2:7a:dd:dc:d4:6b:62:5a:88:34:39:a8:3b:f2:6d:
95:a1:39:f0:66:0b:10:74:5e:d2:24:1b:8f:24:7d:cb:36:77:
f6:c3:8c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 05:17:01 2024 by rpki-client on console-fra.rpki-client.org