Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/0585A2725AC911EF9DF4275AC4F9AE02.roa
File: 0585A2725AC911EF9DF4275AC4F9AE02.roa (raw, json)
Hash identifier: 5RWJBHH9lAZkIzwJPwkOTlv9S3r8SgtlQYJ7cUpN7BU=
Subject key identifier: 49:E9:80:9B:B6:1A:5D:50:6D:97:DA:F3:3A:D0:41:68:A7:3E:94:BE
Certificate issuer: /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
Certificate serial: 04
Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/0585A2725AC911EF9DF4275AC4F9AE02.roa
Signing time: Thu 15 Aug 2024 05:41:30 +0000
ROA not before: Thu 15 Aug 2024 05:41:30 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 24226
IP address blocks: 202.160.115.0/24 maxlen: 24
202.160.117.0/24 maxlen: 24
202.160.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 03:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
Validity
Not Before: Aug 15 05:41:30 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66bd950a-70c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:63:3a:50:eb:06:56:0d:27:d5:da:65:06:
ba:89:b9:84:4b:76:07:fa:f5:22:a0:e6:94:0d:32:
3c:ce:9a:59:76:04:bd:53:2b:cf:ba:4b:44:c8:c6:
35:a9:8b:80:e0:5d:09:39:18:02:2b:23:cf:84:09:
a9:8b:94:b5:71:36:6c:fd:2d:95:8c:4d:bc:8f:92:
dd:5c:d8:2d:5b:02:68:4d:01:01:d6:11:9e:83:91:
3f:e7:bf:cf:1a:14:97:2f:a7:84:0b:28:74:b1:f4:
6a:6d:6b:d6:a5:80:e6:bf:b9:be:af:e9:b4:e3:e1:
2c:5c:e4:2d:ea:ae:04:4c:e6:af:c4:f0:b9:3c:f5:
a7:20:eb:b9:2c:04:c2:c7:ea:40:ee:e4:20:b9:47:
44:48:5b:27:d4:55:87:f5:44:e8:5f:fa:4e:f5:b8:
02:3d:71:f4:e1:fc:c2:0c:90:59:e3:54:85:0c:54:
3d:9c:c2:e2:80:12:11:81:9d:f0:d6:69:f6:23:a5:
97:c7:d9:c5:9a:75:42:f8:c4:e9:86:50:a7:bd:e2:
1a:1d:05:1a:90:84:0e:d9:8c:a7:aa:0c:a0:36:11:
38:9b:1f:41:64:e2:e2:79:1c:cf:fe:63:d0:19:01:
0f:a0:dd:ee:58:64:d6:5a:11:83:82:fb:a8:5d:ef:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E9:80:9B:B6:1A:5D:50:6D:97:DA:F3:3A:D0:41:68:A7:3E:94:BE
X509v3 Authority Key Identifier:
keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/0585A2725AC911EF9DF4275AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.160.115.0/24
202.160.117.0/24
202.160.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:c8:b8:98:99:36:41:59:d2:e6:1d:d4:82:4b:c9:e0:61:3f:
99:45:1c:20:e3:1d:04:43:1e:d6:7c:f1:9e:df:0e:cf:16:55:
d7:19:b1:18:d0:2e:08:9e:c4:2c:ce:c3:bf:cd:e3:92:de:e1:
38:2d:37:66:93:fb:49:6b:8b:84:9f:af:0a:0d:58:ce:91:dd:
52:d9:c5:f3:5e:d2:8f:a5:25:10:63:c7:51:a0:70:e7:29:f9:
bf:e8:8e:01:b8:6d:0d:99:82:93:e0:83:ce:9e:eb:66:e5:04:
58:1e:9b:99:66:00:08:72:5d:11:e7:8d:d0:11:d3:45:e3:aa:
db:24:38:27:1d:fa:11:7b:4b:93:e2:4f:a4:e4:e0:31:28:64:
91:c5:78:1f:ee:d8:dd:a9:e6:51:64:08:37:b5:71:c5:60:92:
89:d1:70:d7:96:12:cb:34:ad:52:4b:9d:2b:4c:6a:5a:99:a2:
1b:76:ed:0a:63:11:1b:6c:94:7f:6d:f9:dd:89:fb:68:a5:b1:
ac:fb:81:f0:2e:5f:a4:65:fa:56:63:e1:ac:72:24:e5:ca:17:
68:79:cf:4d:7d:20:dc:8d:37:c2:d3:d1:88:fc:a1:bd:74:34:
12:57:6a:6d:75:e7:b6:6c:14:ff:6b:85:fd:44:57:f8:56:02:
dd:3f:e2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 05:41:59 2024 by rpki-client on console-ams.rpki-client.org