Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/5910C7B8AF3911EF995ABE18C4F9AE02.roa
File: 5910C7B8AF3911EF995ABE18C4F9AE02.roa (raw, json)
Hash identifier: JMtr6KhwnCyf0gUDjgdsdjJuZoFN5iJnbzd+AeJSWuY=
Subject key identifier: EC:6C:B9:20:24:49:5F:01:18:4A:3B:DC:82:1D:4C:FA:78:29:9D:C0
Certificate issuer: /CN=A911E0B4/serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3
Certificate serial: 02
Authority key identifier: 0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/5910C7B8AF3911EF995ABE18C4F9AE02.roa
Signing time: Sat 30 Nov 2024 16:37:11 +0000
ROA not before: Sat 30 Nov 2024 16:37:11 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 139043
IP address blocks: 160.250.50.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 01 Dec 2024 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E0B4
Validity
Not Before: Nov 30 16:37:11 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=674b3f37-e9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:01:52:fb:bb:bf:31:45:01:b3:7b:cc:15:
2d:e3:95:67:b7:fa:0e:6b:8a:4d:91:2f:cf:40:d6:
26:ad:3b:b0:3b:c4:01:ec:e7:7e:f2:44:dd:e1:d0:
58:12:5a:2e:96:4e:3d:bb:88:25:35:af:b5:f3:27:
15:0b:56:72:05:97:5f:9f:4d:57:78:c4:51:ef:2b:
64:d2:94:d6:bc:8c:6a:0c:3a:74:0c:eb:bc:d1:18:
b3:9b:76:64:0d:60:a4:56:a0:83:c9:e1:0b:c8:40:
72:12:27:a7:5e:93:55:6b:ca:af:c8:89:d1:da:e1:
09:bd:e3:b0:1e:13:cc:a5:79:5b:3f:9f:08:b5:46:
98:17:6d:aa:04:80:08:27:46:c3:2e:a7:68:8d:f9:
ad:5d:75:50:08:05:eb:ad:12:62:a1:3f:64:d7:be:
fa:77:07:e3:79:11:4d:bb:1e:7e:b3:4a:08:c3:99:
36:22:8d:f5:b0:14:77:91:4b:ed:53:a2:5e:fa:db:
03:d5:db:4c:f8:b2:39:a7:53:ce:87:20:aa:74:41:
27:4f:b2:bd:80:37:9a:ea:59:25:ea:fa:e2:04:4b:
6d:91:e9:3c:e0:f5:38:ab:25:d5:f9:7b:28:05:4d:
26:1d:7f:50:bc:24:a4:97:c7:9b:89:57:97:92:b9:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6C:B9:20:24:49:5F:01:18:4A:3B:DC:82:1D:4C:FA:78:29:9D:C0
X509v3 Authority Key Identifier:
keyid:0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/5910C7B8AF3911EF995ABE18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.50.0/23
Signature Algorithm: sha256WithRSAEncryption
49:86:02:a5:8d:c1:cc:11:5b:25:42:08:80:d9:1c:70:38:48:
9b:fb:24:c7:57:1b:56:8c:09:ab:c1:18:8a:27:61:15:33:66:
45:14:cf:b1:8c:56:9a:50:da:1b:ce:a2:6f:7d:c7:94:5b:3d:
09:a8:ef:17:f9:ea:c4:40:fb:d7:51:1d:46:49:75:a3:5b:0a:
2c:c8:cf:bc:e5:e5:cf:1b:91:74:66:03:7c:5e:8e:bd:de:72:
c0:c5:aa:08:b4:98:6f:61:5e:34:ca:34:aa:08:b8:4b:cf:53:
24:74:3e:24:0f:73:52:c7:aa:59:ae:dc:f0:33:3c:5b:15:ce:
e4:3b:c9:c2:e0:55:db:1b:74:96:5c:d2:bf:22:76:26:2e:95:
2e:9e:08:cc:d1:39:dd:0f:e5:20:2f:39:f2:df:ff:6d:0e:c1:
e8:50:a4:7d:5a:ad:1c:e5:49:c9:10:6b:66:07:ac:49:9d:5f:
ec:ef:d6:bb:7a:b4:c5:5e:b6:09:4a:ae:d1:67:82:93:21:2d:
ff:05:a6:58:e4:ce:86:f4:37:c4:b9:14:2d:c2:6f:ac:61:ee:
21:01:5c:f1:c3:9f:d5:23:fa:07:6f:29:e7:d3:33:73:9d:47:
a1:30:ce:19:13:eb:30:ef:e5:ed:0a:17:a5:3b:48:56:96:ca:
57:d4:37:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 21:44:40 2025 by rpki-client