Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/01A300B2A33211EF8B3B5160C4F9AE02.roa
File: 01A300B2A33211EF8B3B5160C4F9AE02.roa (raw, json)
Hash identifier: 5phc+M699dgz4h2YgU0G6UIItlnzpvSJ9U9VWSqls4Y=
Subject key identifier: 09:60:8E:C6:3E:02:09:E3:C0:C4:6B:E0:3A:D4:18:54:2C:51:67:07
Certificate issuer: /CN=A911691A/serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7
Certificate serial: 04
Authority key identifier: 74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/01A300B2A33211EF8B3B5160C4F9AE02.roa
Signing time: Fri 15 Nov 2024 09:14:24 +0000
ROA not before: Fri 15 Nov 2024 09:14:24 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 153453
IP address blocks: 160.250.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 18 Nov 2024 06:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911691A/serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7
Validity
Not Before: Nov 15 09:14:24 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=673710f0-405d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0e:56:58:a8:b1:e6:9a:de:1f:6b:65:12:f1:
0e:6a:56:db:46:5d:87:ee:73:ac:2e:1c:85:4d:a9:
83:cb:d2:f4:07:73:17:43:41:56:f5:02:38:fa:d1:
ad:59:b0:e1:af:da:3a:d5:12:5a:b8:6a:63:46:64:
b8:db:3a:64:04:63:ed:92:0c:16:f3:4c:e4:eb:4d:
7d:f8:a1:eb:0f:39:c3:0b:b8:a7:6d:0c:4f:25:45:
8c:8f:6f:f7:bd:b3:f5:d8:fa:67:cd:58:a7:26:56:
71:75:53:39:2c:00:53:72:12:c3:40:14:b3:01:ab:
71:e0:0e:ea:92:72:c2:f6:41:5a:9b:1e:a5:c1:bc:
34:cd:58:a8:13:5a:16:c1:1b:18:96:0d:0d:0b:57:
2c:03:3b:77:4d:ac:a1:e2:f5:e0:e7:5b:1e:4d:16:
11:db:49:e4:9e:4a:65:f5:54:c0:0f:80:1e:d0:4d:
e8:0e:4c:62:46:a0:fc:d7:21:fd:2a:67:af:e8:e6:
f2:be:5c:9c:19:04:de:f7:52:4a:0b:e5:69:67:73:
5c:15:8c:91:52:7c:ad:02:f2:60:a6:6b:7d:0e:00:
66:3e:e8:e9:6b:52:d8:74:89:8e:ba:4d:23:c4:79:
1a:d3:63:f6:ae:ad:f7:da:50:8a:3c:55:3a:d2:d9:
63:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:60:8E:C6:3E:02:09:E3:C0:C4:6B:E0:3A:D4:18:54:2C:51:67:07
X509v3 Authority Key Identifier:
keyid:74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/01A300B2A33211EF8B3B5160C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.10.0/23
Signature Algorithm: sha256WithRSAEncryption
73:c3:ca:73:2e:1d:a1:f6:4c:f5:a1:0f:5c:cb:0b:6c:35:41:
ae:f7:0f:be:d1:4f:e7:f6:b6:73:89:78:3c:57:7e:0c:3a:68:
d8:aa:f9:76:d0:d2:d7:4e:5a:72:2d:53:2c:7c:cd:83:3e:47:
2a:20:4f:df:4e:e3:ee:63:47:1c:9a:d4:04:5e:ed:15:ce:ad:
4a:c5:3b:91:a2:f8:8b:cf:c9:c7:14:4d:69:f1:99:6d:83:a1:
e8:b6:01:75:37:87:08:90:74:f0:58:ac:90:48:94:c5:f1:90:
31:bd:6f:a3:36:e6:98:6e:ff:8e:03:90:f2:ae:7a:dd:f0:a1:
a7:d0:94:f6:8d:47:aa:40:d3:69:cc:e0:8d:f6:34:72:00:07:
ca:d7:ef:3f:a7:c3:b9:54:ec:03:9c:bf:3a:5e:d2:47:67:67:
03:7c:56:d2:0a:45:37:fe:da:31:f9:8b:bc:a6:f0:d6:03:d0:
6a:d2:9f:f1:80:c8:08:72:9b:35:97:dc:20:2b:7f:0f:f9:e8:
4d:dc:c2:6e:2c:84:ca:35:c0:3f:d4:e8:bc:38:8e:44:b0:77:
92:51:50:8a:5c:59:80:ee:17:e4:01:a1:44:fa:08:f9:a6:8c:
d4:98:1e:9f:e4:8c:96:06:57:a7:17:2d:9e:cb:7d:b0:5f:85:
25:a2:7a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 08:29:20 2024 by rpki-client on console-fra.rpki-client.org