Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/877660643A8A11EFA029266CC4F9AE02.roa
File: 877660643A8A11EFA029266CC4F9AE02.roa (raw, json)
Hash identifier: +Ky6tEBCJ9lg5cpx6UWZJy8ecPb3CNoJJboVlLk9PWs=
Subject key identifier: AB:5C:BE:64:02:E0:5E:E1:0E:BB:F4:61:15:DA:A4:39:04:F2:2E:8A
Certificate issuer: /CN=A919AD11/serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867
Certificate serial: 02
Authority key identifier: A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/877660643A8A11EFA029266CC4F9AE02.roa
Signing time: Fri 05 Jul 2024 04:53:32 +0000
ROA not before: Fri 05 Jul 2024 04:53:32 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 153050
IP address blocks: 160.25.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 07:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AD11/serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867
Validity
Not Before: Jul 5 04:53:32 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66877c4c-4066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:ef:31:d2:05:9c:5d:bc:02:66:34:c9:15:
b4:13:5f:4e:a4:a8:2e:97:5f:b4:17:da:0d:90:23:
fc:78:e7:87:1c:29:1c:d0:ae:55:b2:a7:0e:6e:ea:
c9:da:ca:33:08:d3:40:5b:2c:00:63:48:70:a2:8c:
36:36:7d:b3:59:42:b4:4a:d3:ad:67:57:56:63:e2:
39:5a:2c:14:cd:4d:98:7f:1c:8d:d9:c1:23:c7:4e:
d6:9e:c0:e0:f6:98:d9:a1:21:df:47:41:bd:21:9f:
f3:f9:b5:72:75:04:e5:66:74:fe:33:8a:08:85:d6:
79:c9:f1:31:0f:64:47:11:0a:2f:44:9f:7b:71:ea:
e6:29:63:45:6c:e0:74:f9:02:88:80:b1:cc:6d:86:
49:d2:0e:22:7c:75:3c:9b:08:cf:de:ae:ed:15:31:
3c:5d:83:e9:1f:da:1e:98:34:bd:f8:f2:e6:ca:49:
74:c8:d7:36:09:fb:93:69:41:a7:f6:3e:9d:f2:b4:
b5:5e:fc:fe:b2:8e:db:be:5c:3f:f4:d5:87:86:2c:
00:11:39:23:38:7b:d5:ec:fc:f7:e7:d5:f1:69:3c:
c2:17:49:8a:a7:ce:2e:6e:67:95:a4:22:c9:9b:9b:
44:84:31:5b:05:e2:58:da:6f:26:6f:75:32:f5:cc:
67:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5C:BE:64:02:E0:5E:E1:0E:BB:F4:61:15:DA:A4:39:04:F2:2E:8A
X509v3 Authority Key Identifier:
keyid:A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/877660643A8A11EFA029266CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.33.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c1:7d:9e:b0:d6:e4:4b:85:d4:08:93:37:23:8c:5f:f8:11:
09:c1:db:1c:fa:e2:b7:94:bb:58:4d:b7:c5:c5:54:88:e7:0d:
c8:0e:d0:39:3a:2f:e3:6d:58:41:4a:6c:3e:d7:45:07:83:1a:
a6:71:5c:3c:a7:5d:ec:1d:02:5a:cb:e4:ee:1c:3d:9d:d9:7d:
bc:ea:0c:1c:a4:33:43:1a:28:84:d7:eb:9e:7e:ab:d6:7f:b7:
a7:a8:24:c4:4d:e7:b0:f6:74:cf:c5:2c:14:67:3c:1d:51:59:
fa:39:f1:8f:d9:64:8e:74:5f:03:8c:a1:6c:45:63:e6:1d:02:
55:16:86:e6:51:63:5d:be:13:ac:1e:d9:de:44:fa:47:f2:93:
54:66:42:50:b4:18:c6:1e:af:c7:da:43:fd:72:2f:20:a2:28:
04:4f:e4:6e:08:45:77:f2:d6:7d:99:4f:9b:46:f9:24:87:02:
d1:57:a4:c8:6d:f6:ce:50:ae:f2:76:68:1d:9b:bc:cf:a8:af:
da:c7:1f:38:1c:20:58:ec:e0:fa:ed:d4:05:ee:ef:a0:33:0e:
3b:91:93:3d:1e:ed:ae:c4:7f:4d:73:3c:d5:29:a5:3e:4d:22:
43:d6:28:9b:21:92:09:78:c3:32:a1:21:1d:92:ab:0b:a5:a4:
6f:b1:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 09:29:22 2024 by rpki-client on console-fra.rpki-client.org