Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2750B9E0905311EF8D84AC4BC4F9AE02.roa
File: 2750B9E0905311EF8D84AC4BC4F9AE02.roa (raw, json)
Hash identifier: ysDBxi2sbz5Swt7rwObBYNWLM2L54CaggezJD/EAMbA=
Subject key identifier: 95:7B:3F:72:12:BA:CB:16:7A:9E:EF:E3:69:47:48:12:4E:2B:C2:8D
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0371
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2750B9E0905311EF8D84AC4BC4F9AE02.roa
Signing time: Tue 22 Oct 2024 08:53:49 +0000
ROA not before: Tue 22 Oct 2024 08:53:49 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 153011
IP address blocks: 160.187.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 16 Nov 2024 14:11:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 881 (0x371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 22 08:53:49 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6717681d-1411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:fd:a3:fa:ff:5e:27:ee:35:5c:0b:c9:b6:
52:27:5a:da:01:80:0b:73:4b:1a:77:64:91:27:cf:
a6:c8:32:29:bb:70:40:1e:84:1c:e8:f2:a6:47:a8:
da:96:e6:9f:15:70:b6:b4:37:d3:76:5e:66:ab:87:
c2:69:39:8f:01:5d:fb:01:76:83:fa:8a:49:fb:63:
0f:c2:3e:97:c1:75:c8:ef:09:10:cb:b9:0a:61:ce:
85:3e:fb:83:20:c8:c3:ac:fd:8c:e6:8f:02:5b:d5:
c1:5a:73:37:21:e4:4d:54:99:72:0a:17:d6:f8:62:
35:28:88:48:82:2e:14:ce:f7:4f:fd:47:56:d1:97:
59:3e:ef:55:43:61:1b:12:bf:c6:4f:b0:32:65:9e:
d8:3d:c5:3d:49:7d:e8:23:f8:31:40:0c:c7:00:7e:
90:c6:01:39:a2:9b:e0:0f:31:45:be:76:12:aa:84:
ff:b2:44:7e:ea:fd:ba:ae:89:4f:f3:33:44:29:a8:
d4:3b:55:17:8f:a2:93:17:34:a9:24:ab:ab:c3:bd:
66:dd:18:47:d5:64:cd:34:ab:53:22:45:61:d8:c4:
1c:5c:32:47:5b:50:2a:34:86:4c:92:ee:ee:89:a1:
c6:27:f3:ae:9f:9a:35:ce:e3:cf:4f:1a:bf:29:38:
25:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7B:3F:72:12:BA:CB:16:7A:9E:EF:E3:69:47:48:12:4E:2B:C2:8D
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2750B9E0905311EF8D84AC4BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.246.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:85:d0:12:1f:8b:94:e1:aa:90:61:52:73:22:95:f8:f5:f9:
f7:fe:2b:a9:ef:3c:26:4e:44:a7:b8:6f:81:1b:ca:3f:cb:35:
8c:ba:a2:62:1c:50:8d:77:b0:76:1a:90:a6:75:49:ef:3c:44:
ac:29:8d:1b:be:08:14:0b:6a:0c:ac:88:48:12:cf:46:4c:70:
24:f1:0e:fc:5d:6d:6c:bd:59:26:a5:6c:b5:97:9c:1f:21:6e:
f3:72:6a:73:e5:8f:a3:66:19:9d:5a:fc:90:ba:cf:0d:5f:87:
df:30:1a:93:68:58:bb:53:f3:9e:2c:53:58:a6:4e:ca:2b:21:
de:f1:74:37:00:9f:d1:28:18:8d:dc:71:96:9a:0a:b4:49:c7:
c4:7b:ed:c0:13:fa:ce:a2:51:40:bd:35:51:e6:c3:4a:d5:0e:
2f:3b:04:08:39:5a:a7:10:10:42:70:5b:9d:47:04:48:13:fc:
a9:26:3d:56:f1:c4:8c:18:27:1c:a9:f9:b5:6c:3f:38:28:59:
1d:a3:5f:ea:b4:93:8f:3f:c0:72:2a:0a:73:c8:ae:3d:9c:13:
92:cd:68:19:5b:53:99:97:19:1e:d1:2a:1f:28:5b:2d:7c:d8:
68:c9:88:a3:0a:ab:80:0a:bd:cb:48:af:84:53:7c:26:10:fa:
02:13:fd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 15:49:13 2024 by rpki-client on console-fra.rpki-client.org