Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/706CE91ABB6411EE915E560BC4F9AE02.roa
File: 706CE91ABB6411EE915E560BC4F9AE02.roa (raw, json)
Hash identifier: zGvfCgVofN5zkVccmbQk+wSIBD8oRSLu/Ain8iH10xk=
Subject key identifier: C4:88:82:84:FB:5F:3C:F5:21:C6:DD:A4:DA:99:43:F4:4D:BE:78:8E
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 18BE
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/706CE91ABB6411EE915E560BC4F9AE02.roa
Signing time: Thu 25 Jan 2024 09:30:56 +0000
ROA not before: Thu 25 Jan 2024 09:30:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151739
IP address blocks: 157.15.12.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 04:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6334 (0x18be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jan 25 09:30:56 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65b22a4f-2fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b1:53:7b:82:d3:2d:8b:61:bb:65:60:cb:2d:
7a:62:d9:14:2c:c3:86:54:02:ae:da:1a:e5:24:24:
ba:d0:1d:f5:65:68:7e:e6:9c:36:4e:d7:cc:86:13:
10:64:4b:08:bc:60:38:97:7b:ea:b4:ae:71:03:3b:
20:90:b7:8a:2c:4b:5e:21:f7:fa:8b:b8:d1:ef:b2:
82:6e:cf:54:f0:23:d3:e7:d7:8a:61:c8:b0:1f:f0:
ad:43:7c:aa:8c:9a:e4:c0:7b:79:8b:0c:df:cc:db:
70:aa:b1:73:3d:22:5f:8d:b9:ff:f6:3d:91:77:a7:
a7:b6:86:64:89:71:f8:73:22:38:46:b9:a9:0c:c2:
0c:8b:f9:3a:eb:b7:a0:cd:21:ef:02:22:36:52:25:
4c:8d:3c:92:70:26:7d:1c:54:58:15:a4:77:79:e7:
09:b3:96:2f:ed:83:94:87:ca:99:e9:8b:ab:e6:e2:
e1:02:57:fd:df:fd:4c:14:b3:e5:8c:16:25:42:e0:
96:a0:d9:d1:ed:ff:53:f8:58:8a:38:e3:7b:d1:b4:
89:6e:2e:f1:33:1f:75:19:5e:09:23:8b:55:5d:d1:
9a:9c:91:9b:0d:d8:5f:37:84:83:69:25:a9:0e:b7:
80:ee:ca:10:de:ad:72:b8:f2:29:4c:14:74:d8:52:
80:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:88:82:84:FB:5F:3C:F5:21:C6:DD:A4:DA:99:43:F4:4D:BE:78:8E
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/706CE91ABB6411EE915E560BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.12.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:5f:8e:b3:02:20:57:71:45:71:f0:de:3a:12:9f:95:4c:0e:
85:3c:fa:3d:b1:8e:05:a2:eb:82:87:66:8f:c1:4d:5b:5c:12:
da:40:8d:2d:0e:c3:0b:60:ce:70:5b:d0:de:19:e6:db:24:a0:
8c:70:95:90:cc:76:c9:9f:b8:d1:25:e2:0c:ce:11:82:df:9b:
40:cd:10:1a:a1:0e:d2:68:c1:28:82:fb:66:e5:11:fc:73:31:
8d:aa:b9:2e:ac:be:0d:73:d7:23:8a:36:9d:34:a0:86:79:70:
49:ac:29:f1:49:71:17:ca:c0:29:9a:16:e7:70:ad:f0:20:aa:
74:3b:ae:95:67:fa:b6:28:18:03:dd:2c:57:09:bc:2b:9f:1f:
02:b2:b7:2e:e3:20:78:1b:a5:1d:59:71:8b:42:90:14:07:84:
7b:5d:63:27:af:c8:f2:d1:65:8d:7e:56:ac:2e:ec:a0:6a:1d:
12:73:c0:c5:3c:de:4d:9d:b1:bb:f6:18:17:89:e0:8c:0b:38:
86:80:08:fa:35:57:7e:7f:a4:84:df:af:fb:ac:b3:0d:44:58:
f5:67:ae:69:c3:38:db:49:76:8e:33:da:39:42:43:1c:68:2d:
9f:9a:be:45:4f:62:1b:03:f1:48:8f:61:7c:07:39:2f:8f:1b:
12:5e:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 06:52:00 2024 by rpki-client on console-fra.rpki-client.org