Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/E9AB8256861011EFAAE9845AC4F9AE02.roa
File: E9AB8256861011EFAAE9845AC4F9AE02.roa (raw, json)
Hash identifier: TAibHCWzblKHdLqREdrug0sl41Cq4DjCYp4R2g2bse4=
Subject key identifier: 67:63:D0:9F:BB:DC:0E:E7:61:3D:0D:C1:AE:0D:64:DD:D3:59:7A:29
Certificate issuer: /CN=A9170EED/serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
Certificate serial: 06
Authority key identifier: 69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/E9AB8256861011EFAAE9845AC4F9AE02.roa
Signing time: Wed 09 Oct 2024 07:34:27 +0000
ROA not before: Wed 09 Oct 2024 07:34:27 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 64073
IP address blocks: 160.187.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Dec 2024 21:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170EED, serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
Validity
Not Before: Oct 9 07:34:27 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67063203-0e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:8b:5f:82:b2:55:82:86:f9:16:f2:dd:ab:
3a:83:d5:51:03:d6:a8:e0:5a:af:4f:eb:b6:69:1b:
cb:69:68:33:f8:2f:4a:0b:83:e6:ff:f8:79:73:b6:
5c:fb:e3:82:64:c8:c9:8b:2b:9b:35:02:16:c1:df:
0f:b2:32:fe:15:62:ec:03:ed:0a:bc:55:68:58:dc:
75:e8:17:f7:ab:cd:f0:f5:3c:bd:cd:1a:56:fa:d1:
e5:c0:f3:1e:41:22:b1:41:e0:c1:2e:19:63:80:88:
c1:17:f1:b1:3d:d4:2e:c0:34:75:eb:02:51:68:b3:
a6:11:94:2c:d1:a8:27:0f:a0:34:8f:06:f8:cc:8e:
51:0b:08:5b:e3:d7:20:77:7c:fa:43:44:6a:9f:ef:
56:5b:0a:d1:04:11:37:ad:97:63:f0:95:38:cd:06:
c8:02:7c:97:33:69:58:d3:21:67:4f:a7:86:06:07:
4f:57:9e:f4:cd:63:4f:c3:52:44:2f:11:11:ca:c2:
37:fc:d2:f9:3c:d2:7b:b9:22:06:27:0b:6f:84:71:
3a:d1:21:2d:7d:e5:8e:b1:5c:16:61:55:4d:bc:00:
e6:06:60:3a:58:56:43:96:84:b2:3c:87:18:38:8d:
18:dc:6f:8b:bc:3e:b6:73:0a:6d:fe:90:68:1e:f8:
3c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:63:D0:9F:BB:DC:0E:E7:61:3D:0D:C1:AE:0D:64:DD:D3:59:7A:29
X509v3 Authority Key Identifier:
keyid:69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/E9AB8256861011EFAAE9845AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.185.0/24
Signature Algorithm: sha256WithRSAEncryption
92:e3:bc:03:27:e5:20:6b:75:90:c5:cc:08:2e:65:02:b8:bf:
16:ae:22:8a:92:ff:b3:80:2b:00:31:1e:85:82:b7:72:c3:63:
0b:0f:93:fb:e8:01:18:66:93:b4:77:4e:b7:78:7b:d5:a5:7a:
8f:14:e5:a4:d6:3a:b1:10:a7:fa:5d:5b:ef:3b:18:6d:a6:9c:
c6:c1:3a:7d:b6:ec:2d:61:3b:7c:7c:13:8b:b7:a4:c3:c7:b6:
17:8f:4c:ff:ec:b5:2b:c4:29:84:fe:27:56:ce:59:d9:7f:bc:
38:1b:5b:51:4d:3f:4b:a7:20:c6:b4:4e:0e:4e:9e:3b:44:b6:
c6:29:6d:69:75:6a:76:bc:b2:30:29:41:6b:f2:05:77:f9:b9:
12:d0:5b:63:f5:15:dd:9e:3e:00:8b:81:dd:fa:9c:31:34:2f:
08:9d:b6:44:2c:f1:69:f1:41:bb:9b:e8:b8:80:95:45:d5:ab:
1d:07:74:ab:08:8e:82:e7:a6:c7:cc:d2:0c:26:f2:3f:65:02:
28:70:ef:dd:1d:0a:f3:31:ee:c8:a0:b8:c8:b8:a8:03:10:7a:
a6:89:a0:4e:71:52:94:06:91:99:c8:4d:e3:7f:b4:45:4d:53:
cb:ea:95:9d:c6:6e:50:b9:bd:e8:32:04:7e:26:85:34:80:87:
21:99:6b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:18:28 2025 by rpki-client