Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/DFB95F6A909D11EF966B0652C4F9AE02.roa
File: DFB95F6A909D11EF966B0652C4F9AE02.roa (raw, json)
Hash identifier: /jzzkLHjW+rMVrixGa4McwUd8tSUaYbxqWIpC89BWPs=
Subject key identifier: AB:D4:5C:D0:5E:AA:41:89:8B:7A:E8:98:24:B9:69:EB:69:85:24:03
Certificate issuer: /CN=A9190818/serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C
Certificate serial: 02
Authority key identifier: 4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/DFB95F6A909D11EF966B0652C4F9AE02.roa
Signing time: Tue 22 Oct 2024 17:48:41 +0000
ROA not before: Tue 22 Oct 2024 17:48:41 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 153371
IP address blocks: 160.191.40.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 14:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190818/serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C
Validity
Not Before: Oct 22 17:48:41 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6717e579-c0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:87:0b:0d:e2:a5:38:42:c8:77:d2:46:59:
14:89:db:b2:d2:94:05:79:4b:21:92:96:c5:d3:65:
f0:b6:ea:b7:45:ca:0b:06:26:d0:a6:c2:f5:ec:52:
51:34:31:1d:91:f1:36:d1:da:9e:30:97:f2:21:e2:
cb:e5:4d:46:f5:f0:a6:e0:fc:7c:83:46:5d:3d:c5:
89:30:56:82:5e:78:bf:af:30:5d:8f:54:54:ea:d9:
c9:30:8a:71:50:4c:10:e3:08:4b:f8:93:41:d7:af:
20:bd:1c:82:8f:6c:19:70:90:af:99:ef:02:f5:ed:
67:65:ac:76:fe:68:a2:56:47:38:69:90:6e:fd:7d:
6c:0f:1d:39:0a:e8:22:a5:61:dd:8f:72:ea:6c:08:
9c:05:77:78:93:f5:1d:4c:b4:15:ce:61:72:2c:fc:
db:2b:57:79:ea:68:36:02:64:44:d9:17:14:b4:09:
f0:17:30:10:e8:27:ec:e1:8f:36:5f:7d:59:71:af:
58:b6:97:54:8c:d5:7f:e7:03:5a:3d:88:00:e5:b3:
19:59:e3:3e:f1:38:72:d6:57:d8:c1:22:4f:ce:7d:
38:58:0c:d1:06:ea:59:37:97:37:33:3e:92:24:ab:
a9:d4:0a:d1:bd:c2:f4:1f:2a:c6:d8:75:b7:59:38:
e7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D4:5C:D0:5E:AA:41:89:8B:7A:E8:98:24:B9:69:EB:69:85:24:03
X509v3 Authority Key Identifier:
keyid:4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/DFB95F6A909D11EF966B0652C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.40.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:31:ea:83:94:96:14:0a:31:6f:30:c4:15:41:36:50:88:86:
80:eb:bb:84:b6:1f:ae:86:1a:a4:62:35:61:ca:95:8b:d8:b0:
c6:e5:c6:9b:47:ef:d6:bc:e8:6a:1d:7b:18:42:26:2c:35:db:
7a:2d:7f:91:99:d1:d8:f0:91:de:ce:1c:de:e9:a1:41:8d:e4:
f3:23:ae:e8:31:cd:b8:9d:a6:9d:cb:64:c9:0c:24:51:63:c7:
0e:f2:14:9d:17:4f:a3:8f:17:69:d2:7b:13:c1:83:80:a9:7b:
f4:59:f6:7c:05:02:d6:7e:d0:42:bf:a8:52:5c:8d:e0:55:76:
7b:f4:68:7d:7d:79:18:d6:80:9b:1d:ec:59:22:4c:1e:3b:89:
83:b9:43:f8:68:72:8b:6f:c3:61:21:2c:0a:37:3c:d6:c0:fd:
1a:c4:0e:e9:cf:ba:06:25:2b:0c:dd:e7:ee:95:0e:c2:b3:07:
aa:ef:c5:a1:a5:4f:57:1f:c6:7f:10:29:43:0a:ef:fb:26:da:
b7:3b:dc:5b:6e:15:6e:97:2d:b6:f3:f6:4f:07:34:7a:a3:f2:
b5:83:54:fa:73:4d:c8:1f:96:5b:22:0d:d7:25:2d:f6:96:ab:
67:b6:c7:53:00:d1:ee:a3:a1:e5:6a:83:52:5e:6c:2c:55:e9:
ee:7b:c9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 17:47:13 2024 by rpki-client on console-fra.rpki-client.org