Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/64651972014011EF8E97EF5DC4F9AE02.roa
File: 64651972014011EF8E97EF5DC4F9AE02.roa (raw, json)
Hash identifier: 9TUH1XYRPPEfy8sf73FPCzOj0SahDNR9vyOty5/FxV8=
Subject key identifier: B0:98:BE:C9:4B:65:3D:75:36:25:F1:53:31:0A:71:F9:75:20:67:92
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: DB
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/64651972014011EF8E97EF5DC4F9AE02.roa
Signing time: Tue 23 Apr 2024 07:09:15 +0000
ROA not before: Tue 23 Apr 2024 07:09:15 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 151921
IP address blocks: 157.66.100.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 19 Aug 2024 18:11:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Apr 23 07:09:15 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=66275e9a-8c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:a9:75:f0:5c:40:7f:c1:0c:4c:0c:c5:45:
3f:8c:65:fc:f5:f8:e7:c9:2f:fb:29:dd:eb:ba:cb:
b8:b9:42:c6:a8:86:c1:80:5a:9f:c9:22:9a:ba:a2:
2d:65:58:36:f7:fd:4c:d4:a4:25:90:35:e1:1a:06:
19:06:86:f9:28:d8:00:c1:20:ab:77:35:60:ac:01:
98:2e:e2:3d:c4:46:7b:18:27:3b:91:0c:54:46:54:
08:48:6b:43:e7:7f:a7:33:64:82:f1:0d:56:83:95:
72:e1:b8:76:23:4f:19:49:f4:77:d3:72:3c:b9:b8:
4f:c3:f8:3d:61:fc:59:f1:05:bf:eb:85:b4:3b:de:
24:68:d3:dd:aa:20:83:46:a6:21:c6:ff:e3:fe:7c:
4b:58:1d:4b:ab:39:0d:5f:2b:b4:32:ad:5b:3f:75:
f7:ef:da:c4:f7:95:43:eb:13:34:6c:be:c5:75:2e:
ce:cc:da:b1:38:cb:db:47:8b:55:06:23:cb:b3:23:
ac:e0:d6:a5:5f:78:80:0a:c9:47:d8:93:2b:ee:a5:
a6:79:ce:fe:d3:a5:f8:8a:3f:48:e6:1b:da:5f:12:
4e:f0:c9:5f:de:6c:3d:8b:db:78:3a:6a:ce:cf:ef:
28:94:b9:b7:ee:3a:fe:d0:11:af:e3:43:c9:e7:b2:
71:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:98:BE:C9:4B:65:3D:75:36:25:F1:53:31:0A:71:F9:75:20:67:92
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/64651972014011EF8E97EF5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.66.100.0/23
Signature Algorithm: sha256WithRSAEncryption
01:9f:c6:2e:fc:f4:06:7c:83:a4:ce:ed:54:69:68:0b:d9:c1:
39:bb:30:96:e3:05:32:93:60:3a:9f:a3:36:75:c5:ab:ff:2e:
47:d4:f4:19:12:67:9b:3b:ed:ff:a4:67:86:a6:f0:1e:f0:d1:
13:9b:e9:66:eb:cd:35:2b:af:b9:1a:09:53:7b:7f:77:9f:9c:
e7:08:95:05:07:1e:8d:f6:d0:ae:9e:0d:73:bc:cd:a0:17:b2:
d2:c6:5d:4d:12:fc:36:32:f3:26:a6:54:1d:02:3e:f1:94:2a:
ff:7c:29:a1:89:bb:ec:ae:0d:c5:9e:5c:89:08:cb:4f:bc:6d:
82:d4:e8:8b:2d:53:03:7b:bf:0e:9f:53:9f:2e:5d:1c:3a:76:
e2:dc:b8:12:bb:c7:16:51:9e:c3:0a:ee:a1:8d:f5:49:7e:66:
c9:6e:c3:4b:01:d3:d2:97:a5:8e:38:84:7a:0f:37:58:fd:cc:
02:73:10:12:58:79:3c:3e:2c:f5:f8:74:76:c1:a9:a3:d6:15:
07:9c:b2:02:78:0c:26:83:85:8d:1b:82:0d:d1:21:7c:08:bc:
84:7c:fa:f5:d6:eb:4c:0c:6f:be:2d:b4:22:f9:8f:ac:c6:64:
3d:21:73:70:e9:e4:31:82:b9:54:87:93:9a:11:a9:f4:d5:67:
b1:b1:3d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 20:43:44 2024 by rpki-client on console-fra.rpki-client.org