Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/D6406BBCD7A311EE8B9C577CC4F9AE02.roa
File: D6406BBCD7A311EE8B9C577CC4F9AE02.roa (raw, json)
Hash identifier: WIfVvZT+V2Z1akkMsXQjkEbJurR3SnLoQoZ+2ME8w24=
Subject key identifier: B4:1B:AF:23:BE:26:50:3D:D6:60:20:6A:3C:33:1E:C0:16:5C:FE:32
Certificate issuer: /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
Certificate serial: 03
Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/D6406BBCD7A311EE8B9C577CC4F9AE02.roa
Signing time: Fri 01 Mar 2024 08:15:17 +0000
ROA not before: Fri 01 Mar 2024 08:15:17 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 135607
IP address blocks: 157.20.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 03:57:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
Validity
Not Before: Mar 1 08:15:17 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=65e18e95-8ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c9:f5:8f:d5:5d:41:fb:c9:b9:ae:e4:39:b0:
c9:e1:f9:13:14:a1:9a:b9:e7:3e:bf:1a:17:bc:bc:
bb:58:b5:c8:39:e0:5d:42:72:41:e8:8c:27:9f:87:
a8:48:0a:4e:1f:07:28:dc:6f:c6:ac:2f:53:39:97:
5c:19:64:05:b6:58:e4:8b:68:d2:00:b7:57:8e:97:
aa:3e:38:83:2c:e9:65:6f:6d:31:65:52:1e:b7:89:
98:fd:2f:43:77:8e:5c:9d:47:26:9d:90:13:3b:e3:
8b:e7:ff:fe:89:b3:18:46:58:a0:fe:ea:68:d0:13:
fa:45:3d:69:1b:43:ca:1c:9d:34:51:58:af:05:6c:
d5:c5:7a:71:59:86:94:a1:89:8c:b0:5d:37:c0:d2:
ab:d9:37:3d:d4:47:35:98:bf:98:65:ee:4c:2c:d2:
c1:29:96:07:9d:fc:9d:b5:eb:1c:45:ba:de:fd:4c:
f9:19:3d:ae:6c:38:7f:fa:1b:13:95:73:19:e6:1b:
7e:91:7e:d7:be:83:a0:98:ba:be:3c:54:e9:61:ab:
e8:24:c9:5c:19:88:36:66:de:d2:e3:5a:e1:ae:9e:
9f:bb:eb:c7:08:e6:1d:e5:d0:96:f7:11:20:28:7b:
01:1a:c0:8e:57:6e:8e:39:f1:c8:56:73:32:25:9b:
cd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1B:AF:23:BE:26:50:3D:D6:60:20:6A:3C:33:1E:C0:16:5C:FE:32
X509v3 Authority Key Identifier:
keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/D6406BBCD7A311EE8B9C577CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.142.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f3:b2:a8:06:83:18:0d:31:bb:4d:85:07:e8:fb:9d:cc:ce:
30:4f:66:eb:1c:a6:37:0d:42:fa:1b:40:11:d0:72:9f:6f:44:
4c:19:a3:42:ee:8c:c2:16:ed:ba:5c:58:d6:00:29:ee:05:62:
4e:b0:a7:fb:3a:3d:46:b8:89:1c:31:ca:cb:0c:50:76:c1:3a:
a0:99:37:79:03:ba:bb:d5:4d:46:2a:03:f0:7e:bf:2d:8b:0f:
74:70:c3:c4:b6:6e:60:83:1d:38:2c:5a:de:ab:7c:24:8e:fe:
a8:2d:76:ea:d2:03:d1:08:b1:39:79:2c:5d:76:d3:a5:5b:b5:
0b:24:ab:77:3d:ee:60:75:bb:72:67:9e:9e:fd:3c:fa:9c:bb:
ac:22:bd:5f:b2:f0:0b:ad:7e:c7:4b:7c:89:67:61:f8:7c:dd:
a3:d9:b2:63:76:c4:02:e1:f3:77:f3:7a:69:f4:28:92:19:ec:
20:f4:3f:e6:80:a5:ec:ea:06:91:1c:2e:ad:0e:24:35:a5:0c:
f0:1d:c0:09:07:4d:05:8d:3a:51:8b:2c:18:73:11:eb:a2:9f:
9b:3c:b7:b8:4a:df:08:1b:4d:c8:5e:6e:d9:60:ae:70:23:20:
f2:fd:17:da:37:72:85:73:95:43:0d:10:36:97:d4:cd:2a:b8:
b7:4c:5c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 06:46:00 2024 by rpki-client on console-fra.rpki-client.org