Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/659788D4CEF011EEA4B52F29C4F9AE02.roa
File: 659788D4CEF011EEA4B52F29C4F9AE02.roa (raw, json)
Hash identifier: FnAhlq+zTqZMp59clH0kh/oyuwZRS6PGbFtgnx0Ycuw=
Subject key identifier: 00:C2:36:62:7A:45:F6:70:12:BD:23:8B:64:29:A2:85:30:59:84:5F
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 18F3
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/659788D4CEF011EEA4B52F29C4F9AE02.roa
Signing time: Mon 19 Feb 2024 06:30:39 +0000
ROA not before: Mon 19 Feb 2024 06:30:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149537
IP address blocks: 157.20.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 07:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6387 (0x18f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Feb 19 06:30:39 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65d2f58e-5b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:d9:fb:05:30:49:87:db:c5:4c:65:af:bd:
f1:70:1d:7d:59:6d:e7:45:a5:02:12:dc:44:56:19:
12:35:53:de:0c:63:4a:d8:f7:42:66:75:a8:f3:c8:
6b:bc:6a:d2:8f:1d:2a:34:12:00:db:c3:04:49:11:
0f:6b:60:86:8d:34:45:71:a5:53:25:1f:df:f4:9a:
ee:62:89:18:e5:ef:66:89:1a:53:d4:02:67:bc:42:
28:86:44:43:90:30:d5:a6:38:36:2e:6b:03:a8:d0:
7e:11:82:c2:dc:ff:8c:83:d4:4c:2a:7b:8d:0c:24:
24:e7:16:4a:e2:de:c1:37:03:67:3c:b4:7a:d7:ce:
ae:20:e3:20:80:a8:d8:7d:fa:7d:ca:89:30:81:0e:
87:f5:ca:0f:fc:ac:27:23:64:54:42:74:e1:70:5c:
30:ee:89:85:d7:b7:38:2a:89:c1:94:b4:15:24:b9:
74:59:e7:56:bf:9b:04:30:e0:1f:93:3f:a0:de:fd:
14:b0:ec:f6:f9:88:41:2d:fd:87:cd:c6:e6:c4:53:
a8:75:c4:64:6a:62:24:89:bc:b4:14:85:db:d3:09:
e5:8e:6c:00:1a:46:b0:d1:ef:a9:d3:36:c2:64:48:
c7:fe:ba:08:b1:e3:f9:af:a8:6b:c2:ee:bf:dc:b3:
a4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C2:36:62:7A:45:F6:70:12:BD:23:8B:64:29:A2:85:30:59:84:5F
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/659788D4CEF011EEA4B52F29C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.51.0/24
Signature Algorithm: sha256WithRSAEncryption
65:2a:17:80:01:ef:dd:6e:c1:51:ee:d8:ce:c6:f2:df:31:a9:
89:35:46:29:46:9a:2a:83:4c:76:6a:72:87:a2:c7:9c:27:36:
d4:42:ff:4a:38:26:96:92:b8:b9:d9:58:2a:56:b4:d1:48:77:
f0:7f:31:85:eb:dd:a1:ad:2b:89:e3:49:d2:1b:75:75:6b:3f:
83:9a:3d:f1:5e:ca:4c:f8:9e:20:3d:4f:6d:e8:ce:7e:22:1e:
65:92:be:f1:7e:54:97:b1:f1:bd:81:12:a9:29:6f:60:1a:46:
c5:99:64:c2:69:e9:c8:ba:c5:5c:a1:8e:90:b1:66:58:89:e1:
a5:fd:e8:ae:48:37:12:4d:64:0c:2c:7d:4d:cd:00:fa:ef:4b:
ce:6a:a1:35:d7:f1:06:c6:6f:b0:c3:8f:cd:53:53:52:bf:83:
60:e0:6e:53:90:ce:93:e7:c6:cc:1e:3f:15:b0:6a:5d:1f:9a:
57:52:e4:90:3c:fe:b7:fd:e8:09:4f:23:50:2e:9c:b9:38:1d:
34:ac:87:83:b6:4f:e2:b1:e6:e0:30:48:9a:4a:4c:ff:8f:9a:
67:c7:e9:7d:0a:b4:3d:7a:7c:a0:04:e8:ea:af:b3:c1:27:c6:
31:b5:2b:41:d4:f1:45:0d:6a:27:ed:e9:e9:b1:5b:d9:c7:6e:
fb:e2:af:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 12:16:53 2024 by rpki-client on console-ams.rpki-client.org