Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/156CF4621CDD11EF9122D087C4F9AE02.roa
File: 156CF4621CDD11EF9122D087C4F9AE02.roa (raw, json)
Hash identifier: l7Ufwnbkzna6ryOXDGj8sx/WymFzWik4YbcJ9MRhnlQ=
Subject key identifier: 32:89:11:BA:96:60:68:FF:F9:75:C0:03:15:1C:57:0E:BA:B3:39:A3
Certificate issuer: /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Certificate serial: 0A
Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/156CF4621CDD11EF9122D087C4F9AE02.roa
Signing time: Tue 28 May 2024 10:28:55 +0000
ROA not before: Tue 28 May 2024 10:28:55 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 135663
IP address blocks: 160.20.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 May 2024 05:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Validity
Not Before: May 28 10:28:55 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6655b1e6-304d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:18:a0:f6:23:1d:9a:cf:0e:d0:d1:b2:ac:
3d:be:40:60:0c:45:be:14:56:1d:a5:95:1c:bc:df:
67:01:93:6e:80:75:fd:29:de:14:05:66:c3:ab:6a:
6a:a1:a1:3b:f0:7c:49:c6:72:bc:3d:cf:8a:26:23:
cc:56:49:49:7b:aa:62:7b:bd:b9:aa:50:bc:d8:ba:
13:0a:48:dd:02:87:71:7a:d6:f2:29:fd:8c:b0:db:
ca:02:04:94:42:77:88:c5:92:a9:a7:63:38:24:c1:
12:68:ba:ee:52:80:f6:77:0a:cc:97:4c:b8:59:54:
4c:10:00:44:12:ee:50:ec:01:83:d5:48:8f:18:c1:
c1:29:79:bf:06:cb:ee:9a:c1:b2:51:cc:57:91:1e:
36:3b:2c:2d:39:08:c5:2d:7a:d4:b5:40:66:95:22:
f8:d4:eb:e7:8b:b6:9c:da:8b:6f:fd:39:e3:08:a7:
39:84:a1:f8:9c:d0:6f:8c:a4:c2:39:c0:58:66:ce:
e3:5f:14:5c:17:83:7b:3b:99:63:c9:8a:26:ae:c4:
32:6d:60:9a:75:0c:4f:1a:5c:1a:2b:f3:e2:00:33:
da:49:42:10:1b:7d:94:eb:cc:d4:5b:6c:aa:aa:12:
47:0d:e8:ec:68:5b:74:db:94:a3:02:07:4c:35:ca:
49:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:89:11:BA:96:60:68:FF:F9:75:C0:03:15:1C:57:0E:BA:B3:39:A3
X509v3 Authority Key Identifier:
keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/156CF4621CDD11EF9122D087C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.20.116.0/24
Signature Algorithm: sha256WithRSAEncryption
07:9e:42:e4:22:5c:fe:1e:33:ab:89:de:67:59:42:85:04:82:
02:5e:0b:7e:b2:05:83:17:9a:5f:20:c8:9e:4e:a9:c6:82:93:
ef:6d:2e:f0:4d:f5:98:32:1b:43:f2:85:91:c0:c7:58:d1:ac:
87:da:ce:c3:1a:39:01:fb:45:c0:74:a9:d6:e0:7b:96:25:a3:
09:24:f2:15:c0:a0:57:87:6b:2a:fb:cc:22:4e:28:fc:c3:7b:
07:f6:dd:5d:d3:0e:38:c1:90:eb:68:cd:e8:80:c6:3a:45:5f:
c0:40:78:01:97:f4:b2:96:3f:43:49:fd:f8:54:c4:42:84:1e:
22:b9:3c:a9:ac:0f:1c:2f:a5:c6:e5:42:26:f8:1e:c3:46:a0:
4d:f3:1e:f7:91:95:d8:d5:14:d6:21:5d:5c:f3:d9:84:4f:1b:
f4:ab:bc:c6:28:2b:7d:26:d0:2e:2e:32:29:15:55:b5:92:f1:
cf:a8:6b:f2:4b:b8:6a:c5:5d:58:cd:a9:dd:53:2c:96:ac:28:
d2:7a:3e:34:94:df:07:72:6e:ec:d6:81:0a:a0:7d:85:28:69:
66:d3:98:1d:16:84:f2:bf:ce:a3:41:de:04:78:6f:05:8b:37:
40:27:b2:c9:85:74:65:bb:47:e9:23:e6:02:6f:06:62:ff:5b:
bf:9b:db:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:11 2024 by rpki-client on console-fra.rpki-client.org