Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5ECF0718795711EF9D74B64DC4F9AE02.roa
File: 5ECF0718795711EF9D74B64DC4F9AE02.roa (raw, json)
Hash identifier: 2AQJDllN4OkcQBTTD1yd7Z/AtMG2skBB66d+tWWS7+M=
Subject key identifier: 6E:4D:05:C4:FB:2F:03:72:89:2A:6E:07:3B:05:EB:21:14:56:02:38
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0316
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5ECF0718795711EF9D74B64DC4F9AE02.roa
Signing time: Wed 25 Sep 2024 09:52:14 +0000
ROA not before: Wed 25 Sep 2024 09:52:14 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 150859
IP address blocks: 157.66.12.0/24 maxlen: 24
157.66.160.0/23 maxlen: 23
160.187.74.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 01 Oct 2024 07:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 790 (0x316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Sep 25 09:52:14 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66f3dd4d-bf01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e7:af:c2:37:4d:8f:79:16:37:1f:e4:4f:15:
43:c3:26:c5:22:bb:9a:48:f8:19:38:95:4d:f0:6b:
c2:96:0b:c9:8a:1f:2f:46:b2:5b:42:85:f4:ed:45:
10:94:1e:dd:b0:2c:03:1c:d9:fa:4d:9a:a6:94:0b:
d7:fd:9e:90:32:24:d8:4d:7c:20:3f:55:00:46:63:
2f:01:45:ed:70:4e:82:29:e6:76:4a:e3:19:47:34:
40:20:f5:4d:51:3c:7b:d7:5d:ec:3d:e3:1a:7d:cc:
82:9c:f9:17:2b:fb:54:48:e7:87:5a:0b:e2:55:9f:
8a:bc:b5:6d:bf:2d:f2:ff:98:aa:64:eb:a4:ef:04:
9e:42:98:66:82:5d:7a:44:0b:95:9b:b4:40:1e:d9:
0c:56:d7:6a:5b:4b:bd:ef:42:4a:4b:e7:3c:99:26:
04:e8:ba:1f:a8:e5:89:cc:d8:33:31:f5:aa:b8:81:
4d:38:69:a4:0b:f2:98:59:50:81:7a:f6:af:a5:2b:
96:10:7e:ac:cb:84:d0:9c:24:4d:9a:d6:53:be:da:
e2:2c:5c:80:0f:90:c6:3f:4d:9f:3d:ac:91:64:ea:
71:55:0a:7c:42:f8:8d:25:c0:7b:4d:c2:f4:59:2c:
3c:db:96:b4:21:a4:c4:db:50:0d:e9:d8:27:eb:dc:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4D:05:C4:FB:2F:03:72:89:2A:6E:07:3B:05:EB:21:14:56:02:38
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5ECF0718795711EF9D74B64DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.66.12.0/24
157.66.160.0/23
160.187.74.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:f3:01:54:ce:e3:c7:7b:c4:8b:84:21:e9:f3:08:e8:91:da:
81:29:3b:06:a2:03:1a:86:a6:80:d7:c6:58:d8:fd:7c:d0:07:
6e:e6:71:41:e7:74:1e:3c:ed:f0:6f:55:82:d8:ad:d0:5d:ce:
92:f3:b0:b8:8f:ea:53:0d:51:3f:be:6c:6b:05:62:17:d1:2a:
77:10:53:69:52:19:d5:9d:e7:6b:92:b0:fb:b3:d0:f2:a8:ed:
25:15:64:63:e4:6c:39:20:36:26:9a:83:09:24:44:ac:c9:73:
66:9a:db:eb:73:df:87:ca:3f:f3:9e:c9:c2:0c:4b:be:36:29:
f7:be:a1:4d:b9:30:cc:8e:fa:3f:a1:8d:11:07:f7:c9:4f:32:
29:63:71:6a:80:dc:33:da:42:4e:42:2e:72:0a:95:e4:0e:15:
2e:d3:f0:29:0c:1c:61:79:dd:c0:db:b7:7b:f0:16:e5:6a:ff:
16:b0:87:25:0c:41:06:9a:85:9c:d7:4b:d8:b4:3f:8a:91:c2:
86:9a:35:59:e1:58:b8:59:05:e3:da:15:34:76:f9:6c:2c:63:
39:80:5a:06:6c:bf:03:64:37:48:d0:1a:63:bd:14:83:d0:db:
dd:04:01:b1:cf:f2:de:84:22:ac:78:5e:f1:fa:b9:a1:29:b9:
38:5b:28:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 09:28:06 2024 by rpki-client on console-ams.rpki-client.org