Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/3F5AEF84B32F11EF82DA781CC4F9AE02.roa
File: 3F5AEF84B32F11EF82DA781CC4F9AE02.roa (raw, json)
Hash identifier: Cz7IYo/qy+qNnteQxVqxdD7ikEhflBklKDXicedtqZU=
Subject key identifier: 0F:B3:0E:C6:D1:AE:C3:F3:3C:9A:94:B9:87:BF:0E:A6:6D:56:CC:81
Certificate issuer: /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
Certificate serial: 03
Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/3F5AEF84B32F11EF82DA781CC4F9AE02.roa
Signing time: Thu 05 Dec 2024 17:34:58 +0000
ROA not before: Thu 05 Dec 2024 17:34:58 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 153474
IP address blocks: 160.250.162.0/24 maxlen: 24
160.250.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Dec 2024 08:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
Validity
Not Before: Dec 5 17:34:58 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6751e442-50d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:77:a6:98:4c:dc:d1:b9:ef:35:0a:22:28:
44:82:5e:6f:d2:0f:6c:91:f9:93:42:3c:01:4b:64:
d5:69:69:c8:56:d2:0b:e9:d2:90:9d:aa:22:71:d0:
02:43:75:1b:05:78:36:0b:18:4a:2b:ac:ae:f9:88:
52:70:2b:b3:d4:ad:db:80:2e:9a:7b:2d:7b:b0:e7:
a3:50:e8:89:11:74:24:d8:87:12:f1:7d:4c:74:28:
b2:18:19:17:28:b3:cd:8e:98:f2:9c:98:c7:a1:7d:
4c:50:4f:ce:00:cd:53:0a:fc:e1:07:fe:34:79:81:
f5:35:12:2e:39:a1:a0:ab:52:b6:e8:a3:94:d9:3e:
f2:01:45:4f:58:d3:23:74:74:f8:a6:42:2d:60:b7:
2c:98:db:e7:dd:ed:7e:88:cf:4d:1f:6b:9b:c8:c1:
5d:d2:21:18:4c:2d:c7:a0:00:ba:62:9c:c0:80:96:
a3:ae:b8:e6:8b:09:06:b9:91:21:2a:b3:e3:84:9d:
57:76:8e:62:ed:79:0c:8c:f7:00:64:9d:f6:ca:1e:
0d:96:be:bb:ca:c9:7f:ae:e3:ae:09:ab:f9:ee:f2:
5a:5d:84:ba:19:43:92:d2:fa:26:01:7d:e4:b7:27:
f0:c2:e0:6f:dc:54:8f:ee:fa:71:77:3e:c9:f8:33:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B3:0E:C6:D1:AE:C3:F3:3C:9A:94:B9:87:BF:0E:A6:6D:56:CC:81
X509v3 Authority Key Identifier:
keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/3F5AEF84B32F11EF82DA781CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.162.0/23
Signature Algorithm: sha256WithRSAEncryption
00:99:30:52:67:75:05:50:53:8f:4d:70:3f:9c:9a:36:3c:19:
40:db:49:29:0b:92:f5:1d:ad:99:df:d4:cf:78:43:d3:41:4a:
8f:a2:18:5c:16:68:aa:2e:bd:1c:fc:ec:2d:d9:c0:93:fe:e3:
13:4f:a1:ec:9b:f9:cc:90:ff:99:19:44:91:a3:3a:8f:7d:fe:
4f:b3:c9:d9:0f:c3:3d:71:3f:5c:de:7f:b8:67:0c:86:e0:1c:
a4:86:54:57:3c:0b:4c:1a:65:a0:70:a6:65:c5:b9:7f:9c:61:
ab:15:c0:68:e5:e3:78:4e:5e:72:48:2b:d0:d6:6f:02:5b:b1:
2e:a4:64:ba:9e:bc:04:20:24:40:c8:65:e9:d9:17:90:7d:dc:
96:72:b6:c0:a3:18:b8:9b:fa:86:0d:07:52:67:e1:c3:ff:d1:
d9:ff:e7:12:35:92:94:fd:32:0a:54:a7:74:af:df:cb:0d:24:
da:98:e0:ce:30:65:a2:39:eb:50:61:d6:29:9a:d1:f7:39:81:
ab:bc:8a:c6:bc:b6:2b:38:92:1a:30:0c:ec:fd:14:ef:74:67:
73:b4:a8:c7:fd:7e:0c:aa:d6:8c:5a:ad:5e:af:ff:e4:54:ce:
8c:23:f1:1c:2a:7e:69:4c:5c:14:7b:b3:85:e3:c4:e8:f1:62:
f5:be:c7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 09:55:28 2024 by rpki-client on console-ams.rpki-client.org