Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5B0AD104DBB711EE9697432FC4F9AE02.roa
File: 5B0AD104DBB711EE9697432FC4F9AE02.roa (raw, json)
Hash identifier: vmTOlcWmbRaaavVYduhse5ghIMtH18syg/0sS53IrR0=
Subject key identifier: 17:52:51:7D:AA:AE:6A:5B:7E:51:31:F9:35:12:E5:80:F8:40:4F:98
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 03FB
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5B0AD104DBB711EE9697432FC4F9AE02.roa
Signing time: Sat 16 Nov 2024 14:16:06 +0000
ROA not before: Sat 16 Nov 2024 14:16:06 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 150820
IP address blocks: 157.15.38.0/23 maxlen: 23
157.20.62.0/23 maxlen: 23
157.66.252.0/23 maxlen: 23
160.22.172.0/23 maxlen: 23
160.22.174.0/23 maxlen: 23
160.30.190.0/23 maxlen: 23
160.187.120.0/23 maxlen: 23
160.191.176.0/23 maxlen: 23
160.191.242.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 22 Nov 2024 02:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1019 (0x3fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Nov 16 14:16:06 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6738a926-88b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:e3:5f:df:d7:09:8d:83:0b:ff:46:cf:8f:
17:c2:4d:22:fb:de:f8:0f:15:a0:2e:9b:e7:49:92:
f3:4d:81:fb:ad:0e:c7:69:ad:27:41:ad:91:db:4a:
01:f4:ad:4f:cd:01:34:ce:32:d3:36:f2:27:1f:d4:
bd:5f:9a:4e:21:ce:2f:eb:2f:fb:8d:a9:fb:42:c9:
77:10:5f:af:3f:17:89:74:a0:d9:fe:f8:cb:16:12:
4b:8f:75:30:c9:3f:fa:55:d9:e4:97:b8:33:9e:39:
66:5b:b0:4b:d3:65:5c:06:2e:2c:43:73:bd:1f:90:
33:42:47:4b:24:02:fc:71:e4:97:6e:11:06:0f:a3:
09:b0:90:08:ef:b6:34:cb:65:3d:8b:9d:a7:ba:33:
64:da:54:3f:7a:d1:b8:30:8e:9b:e0:e2:57:44:41:
2e:c7:9d:86:53:36:a4:1c:08:b5:c7:3e:05:db:b2:
ef:4d:25:d6:fb:97:17:6f:f0:31:3e:ca:21:cb:53:
8c:5e:f2:ee:6a:68:05:d4:2e:38:1d:f7:58:22:f4:
78:69:7a:80:0b:20:5e:7e:03:30:d0:2e:95:b4:f1:
cf:d7:e3:8c:65:c6:28:3a:6d:4e:cd:4e:de:62:8b:
7e:b8:78:ef:6d:8b:68:08:ab:8f:ef:32:1d:22:2f:
38:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:52:51:7D:AA:AE:6A:5B:7E:51:31:F9:35:12:E5:80:F8:40:4F:98
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5B0AD104DBB711EE9697432FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.38.0/23
157.20.62.0/23
157.66.252.0/23
160.22.172.0/22
160.30.190.0/23
160.187.120.0/23
160.191.176.0/23
160.191.242.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:14:3f:d6:59:bb:54:5e:8a:b0:8f:2e:e2:6c:f8:46:94:59:
95:6a:56:a1:16:70:fa:7a:b4:67:45:8d:bf:3f:e5:6d:39:ae:
b8:91:39:18:ce:a6:7a:cd:52:6e:3f:3b:f4:00:87:df:ac:a3:
5c:bb:79:20:09:49:d3:9b:81:cf:6b:a0:ca:fb:e4:be:63:38:
9b:1e:5f:5a:db:3a:f6:5b:bd:c3:6c:dc:d2:92:59:01:ca:8d:
5c:b4:f6:59:dd:c4:38:a6:86:1a:7e:c0:57:bb:e6:aa:62:07:
cb:69:a4:b0:95:b0:03:e4:bb:65:0d:c8:cd:33:3b:5f:59:1a:
be:7d:d6:be:04:d2:3d:fb:9c:11:32:5c:a2:63:73:2f:a0:42:
19:4c:cf:57:c3:8d:7a:b4:8c:93:99:73:c7:00:c5:e9:d3:0f:
0c:94:04:47:d6:1f:10:64:22:ce:c7:e9:df:b6:4b:e0:de:64:
97:8a:10:81:b5:17:c7:a5:4f:2f:3c:32:b7:30:42:c2:a7:b9:
ee:f8:6e:00:a2:bc:0c:60:15:c0:9f:1c:63:6d:bf:9d:65:18:
35:67:e5:91:c8:bc:90:72:89:bf:eb:a6:ff:fb:78:d1:d6:02:
e6:62:59:13:51:70:59:2b:82:21:fc:84:84:c1:ea:73:15:70:
95:c3:74:7b
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgICA/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjQxMTE2MTQxNjA2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzM4YTkyNi04OGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAparjX9/XCY2DC/9Gz48Xwk0i+974DxWgLpvnSZLzTYH7rQ7Haa0nQa2R20oB
9K1PzQE0zjLTNvInH9S9X5pOIc4v6y/7jan7Qsl3EF+vPxeJdKDZ/vjLFhJLj3Uw
yT/6Vdnkl7gznjlmW7BL02VcBi4sQ3O9H5AzQkdLJAL8ceSXbhEGD6MJsJAI77Y0
y2U9i52nujNk2lQ/etG4MI6b4OJXREEux52GUzakHAi1xz4F27LvTSXW+5cXb/Ax
Psohy1OMXvLuamgF1C44HfdYIvR4aXqACyBefgMw0C6VtPHP1+OMZcYoOm1OzU7e
Yot+uHjvbYtoCKuP7zIdIi84TwIDAQABo4ICvzCCArswHQYDVR0OBBYEFBdSUX2q
rmpbflEx+TUS5YD4QE+YMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNUIwQUQxMDRE
QkI3MTFFRTk2OTc0MzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E
OjA4MDYEAgABMDADBAGdDyYDBAGdFD4DBAGdQvwDBAKgFqwDBAGgHr4DBAGgu3gD
BAGgv7ADBAGgv/IwDQYJKoZIhvcNAQELBQADggEBAK0UP9ZZu1ReirCPLuJs+EaU
WZVqVqEWcPp6tGdFjb8/5W05rriRORjOpnrNUm4/O/QAh9+so1y7eSAJSdObgc9r
oMr75L5jOJseX1rbOvZbvcNs3NKSWQHKjVy09lndxDimhhp+wFe75qpiB8tppLCV
sAPku2UNyM0zO19ZGr591r4E0j37nBEyXKJjcy+gQhlMz1fDjXq0jJOZc8cAxenT
DwyUBEfWHxBkIs7H6d+2S+DeZJeKEIG1F8elTy88MrcwQsKnue74bgCivAxgFcCf
HGNtv51lGDVn5ZHIvJByib/rpv/7eNHWAuZiWRNRcFkrgiH8hITB6nMVcJXDdHs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:02:53 2024 by rpki-client on console-ams.rpki-client.org