Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/08E6A25A624D11EFA7F4D680C4F9AE02.roa
File: 08E6A25A624D11EFA7F4D680C4F9AE02.roa (raw, json)
Hash identifier: NXt3EpjnmYn3E2HJm4Lfjm1kXl7EG6fw0XCFb0TU7o4=
Subject key identifier: FA:80:37:54:68:12:74:DF:D8:B4:F0:E6:09:9E:43:EB:12:CB:90:6E
Certificate issuer: /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Certificate serial: 07
Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/08E6A25A624D11EFA7F4D680C4F9AE02.roa
Signing time: Sat 24 Aug 2024 19:14:07 +0000
ROA not before: Sat 24 Aug 2024 19:14:07 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 153307
IP address blocks: 160.30.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Aug 2024 06:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Validity
Not Before: Aug 24 19:14:07 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66ca30ff-6b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f6:c1:04:c7:3c:44:af:aa:a0:e8:45:8e:bf:
50:21:38:c6:16:24:4d:f0:a9:24:34:34:50:7c:9f:
b4:d4:fa:e8:6c:ba:97:92:ac:b8:ae:84:1e:25:ac:
20:ba:a9:09:68:49:5e:44:38:2d:47:f8:c4:ec:d9:
3f:f2:5b:4b:a3:6b:c2:4e:b1:84:0c:63:43:61:63:
38:90:74:ef:4f:f6:03:87:9d:8c:de:4f:3e:02:3f:
2c:38:8b:90:2a:e8:33:33:48:ae:49:53:84:42:e8:
1b:38:10:c5:aa:1e:82:05:9b:3a:1e:46:d9:91:02:
df:74:56:f4:bf:0c:19:9e:df:94:5b:66:d6:80:79:
ac:fe:3e:67:3d:fb:ed:3d:7b:a5:00:d2:6e:16:96:
e2:44:ac:ad:0e:70:41:a1:e6:0a:a2:12:47:e7:aa:
03:5a:a2:fd:63:d7:d3:d3:9b:20:37:07:c6:75:7b:
c8:33:ca:73:bb:b5:58:33:46:fe:fa:3c:ab:1f:77:
a5:4f:d6:a1:0e:c1:ec:05:03:b9:4f:04:1f:56:cd:
22:41:4d:96:4f:aa:11:94:f6:33:37:69:36:32:05:
ac:8b:d7:6e:96:01:49:bd:c0:0e:1b:59:b4:09:27:
6c:77:b6:1b:01:2c:c4:cc:d4:be:c4:67:fa:94:9e:
ff:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:80:37:54:68:12:74:DF:D8:B4:F0:E6:09:9E:43:EB:12:CB:90:6E
X509v3 Authority Key Identifier:
keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/08E6A25A624D11EFA7F4D680C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.178.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:7f:5d:2d:66:24:c7:62:8b:e1:a3:12:a2:26:58:e1:6c:a1:
7a:0e:47:66:6b:1e:bc:64:cf:5a:f7:20:0d:5d:6d:79:1a:67:
16:18:98:bc:91:49:db:40:b5:2f:d5:35:30:5e:31:f2:0b:c4:
a5:d0:8e:9a:73:4d:44:48:2a:a5:7d:5d:82:30:24:4b:34:dd:
43:47:1e:31:1d:de:d2:43:d6:68:38:f9:24:79:52:54:26:9a:
2e:66:4f:87:c0:33:0d:e9:0b:6d:d2:3c:23:da:09:4b:77:eb:
d5:a4:0c:f3:cb:89:54:74:34:ae:20:c1:86:ee:ea:0b:0e:40:
b9:28:08:fb:10:1b:95:1b:51:ac:3a:2a:fc:85:9e:6e:57:bd:
50:e9:8d:b2:14:60:66:14:85:39:09:7f:a2:8f:91:84:72:5b:
a0:0e:99:05:03:e7:58:83:ed:e8:d5:de:be:e2:d7:e2:92:05:
d9:30:4a:ad:0e:10:ed:62:2e:9e:bc:30:bf:ba:d1:c5:4f:cb:
cb:da:f6:8b:a6:73:89:ae:01:ac:eb:6b:33:a1:78:68:df:9b:
e5:03:2c:46:24:ce:ff:c6:8f:2c:a8:11:9e:00:74:5b:a0:a7:
9b:4b:c5:6a:5f:53:ba:b8:6d:1c:a6:ad:05:64:4c:a5:3d:2f:
26:50:99:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 08:21:54 2024 by rpki-client on console-fra.rpki-client.org