Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/DAC88F94DBB711EEAE353630C4F9AE02.roa
File: DAC88F94DBB711EEAE353630C4F9AE02.roa (raw, json)
Hash identifier: YgWQSMvfiqVM4dKH6joZ6J9la7YYaIT5qaIx+wleij8=
Subject key identifier: B4:EC:F9:C2:3D:F6:5A:91:B8:55:16:E3:94:9E:FA:70:02:5A:6E:27
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0401
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/DAC88F94DBB711EEAE353630C4F9AE02.roa
Signing time: Sat 16 Nov 2024 14:21:14 +0000
ROA not before: Sat 16 Nov 2024 14:21:14 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 150862
IP address blocks: 157.10.42.0/23 maxlen: 23
157.10.44.0/23 maxlen: 23
157.15.108.0/23 maxlen: 23
157.15.110.0/23 maxlen: 23
160.22.106.0/23 maxlen: 23
160.30.20.0/23 maxlen: 23
160.30.156.0/23 maxlen: 23
160.30.192.0/23 maxlen: 23
160.30.200.0/23 maxlen: 23
160.187.122.0/23 maxlen: 23
160.187.226.0/23 maxlen: 23
160.187.228.0/23 maxlen: 23
160.187.246.0/23 maxlen: 23
160.191.54.0/23 maxlen: 23
160.191.138.0/23 maxlen: 23
160.191.174.0/23 maxlen: 23
160.191.240.0/23 maxlen: 23
160.191.244.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 22 Nov 2024 02:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1025 (0x401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Nov 16 14:21:14 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6738aa5a-9652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:09:bf:c4:15:3c:50:a2:88:85:7e:55:08:c6:
b1:d6:38:34:00:79:ac:b9:e3:d1:18:b6:8d:c1:4a:
55:23:12:9b:e6:04:e1:d3:94:c7:87:8a:c1:c5:0d:
d3:38:5c:7b:cd:fd:0f:3d:6b:3a:f6:6c:e4:c1:8d:
fb:a9:33:2d:44:ae:92:6f:dd:d4:55:d9:76:d4:c7:
36:f6:65:76:bc:ce:76:11:21:93:35:4b:c2:53:17:
f7:b9:f4:af:ff:14:63:fc:b6:32:ad:9c:6c:45:96:
69:da:b1:9e:3a:d3:93:71:eb:42:ff:85:8e:34:a0:
2b:2d:60:ce:a3:1a:db:3e:27:ae:76:87:ad:3d:da:
9f:91:ff:e8:19:ad:f7:7c:08:83:96:2f:94:d3:ab:
1a:79:f1:b0:8e:b4:40:4a:61:fd:08:54:48:d5:c1:
1f:12:81:52:cf:cd:4f:04:bc:72:40:9a:50:50:e3:
f2:f1:51:ef:a0:b0:ca:42:42:7d:f5:61:1d:f1:e3:
7b:91:d6:e9:8f:6b:4d:98:af:fd:ce:ef:d1:40:6f:
89:7e:f8:dc:90:27:7a:2b:f8:3a:4b:3b:f7:1a:61:
bc:87:35:b1:0c:0e:8d:a3:e3:97:47:f4:e0:54:5b:
e3:37:dc:f2:cb:45:56:b8:91:84:ed:0f:bd:aa:08:
92:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EC:F9:C2:3D:F6:5A:91:B8:55:16:E3:94:9E:FA:70:02:5A:6E:27
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/DAC88F94DBB711EEAE353630C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.42.0-157.10.45.255
157.15.108.0/22
160.22.106.0/23
160.30.20.0/23
160.30.156.0/23
160.30.192.0/23
160.30.200.0/23
160.187.122.0/23
160.187.226.0-160.187.229.255
160.187.246.0/23
160.191.54.0/23
160.191.138.0/23
160.191.174.0/23
160.191.240.0/23
160.191.244.0/23
Signature Algorithm: sha256WithRSAEncryption
93:38:22:6d:91:8e:2f:dd:7b:21:65:db:27:b0:a3:e4:f0:a9:
93:eb:90:e7:87:1c:4d:18:2b:49:38:72:d6:48:70:c9:39:83:
29:19:99:d1:27:bf:33:0f:0a:31:8c:a6:1f:c4:bc:5e:1c:9d:
a8:d1:1c:11:b3:ae:87:6c:3b:23:31:cc:f0:11:f2:24:83:93:
dc:dd:5f:4e:b0:92:de:3f:92:8f:8c:4c:78:58:c0:82:83:8e:
c2:a5:36:7f:27:e0:1a:fa:2e:e0:1d:2c:c5:8e:f3:d7:9e:8b:
8a:38:b2:07:2a:43:1f:bd:fe:37:be:c6:d4:dd:57:5c:c6:d6:
d0:6c:d7:e0:59:b1:a9:34:33:13:63:a5:31:d6:5b:13:78:2b:
80:34:c0:c9:8f:61:2c:3c:6c:8d:1e:d0:8a:96:69:94:b2:22:
c6:40:ba:0f:18:2f:7f:ae:da:6a:59:e5:81:ab:43:7d:78:6d:
b8:01:e7:f5:06:a8:8f:c7:e6:ab:4d:f8:38:69:47:d1:39:7f:
86:51:91:53:63:b8:07:f9:a8:93:7f:74:fd:73:05:15:1b:7a:
1f:ad:8a:6d:99:ab:0c:fd:98:06:a9:ef:fe:df:fb:5a:63:30:
dd:55:49:ad:6b:76:75:50:62:e4:f1:82:e8:81:d9:19:76:b6:
0a:60:4c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:40 2024 by rpki-client on console-fra.rpki-client.org