Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/6682CF0A699C11EFB18C5C0DC4F9AE02.roa
File: 6682CF0A699C11EFB18C5C0DC4F9AE02.roa (raw, json)
Hash identifier: GPFz6zhzaMzWIGpg6qgSw0JRIHrZCUYiDqujAoXqTDI=
Subject key identifier: 63:E1:6A:99:1B:E3:F3:A4:B5:48:A4:F9:49:54:FF:46:A9:06:DC:81
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 02AD
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/6682CF0A699C11EFB18C5C0DC4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:31:28 +0000
ROA not before: Thu 05 Sep 2024 03:31:28 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 152985
IP address blocks: 160.30.192.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 07 Sep 2024 02:13:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Sep 5 03:31:28 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d92610-3679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:54:ca:36:7a:d4:8a:70:d0:87:2d:83:dc:c2:
7d:e2:55:0b:72:0c:17:cb:2a:be:1c:f6:a8:d7:64:
5b:3b:60:c1:1b:a6:f5:8d:2e:0e:eb:d5:d1:3a:cb:
06:89:72:bc:ba:8b:b5:88:c4:8b:45:64:29:49:a3:
8f:ca:99:c7:99:a8:9b:68:ac:81:dc:05:13:3c:7c:
6e:a9:8a:5a:9c:5e:2e:c3:48:79:e8:c3:33:91:6f:
8c:e0:0f:4f:2d:ec:e5:2c:0d:20:09:9c:58:40:d7:
ba:f0:30:e9:9b:74:d9:11:95:18:f2:87:88:a9:0b:
8f:52:b7:66:43:64:e0:18:05:0d:b4:10:d6:79:05:
89:f6:d1:60:aa:67:21:a8:dd:33:89:d8:81:3f:da:
31:41:35:8c:9b:25:f7:31:66:5b:30:20:89:9c:f4:
f1:cb:ea:53:ed:bd:ae:62:f6:45:b3:46:e6:a4:79:
62:8e:4f:c3:b4:e7:92:12:e9:a2:90:d8:b7:2e:62:
3b:11:9d:e0:4c:8e:7e:f7:7d:8d:4e:a9:cd:1a:c8:
61:98:c5:44:13:d4:97:9e:a5:d7:fc:d8:a8:8b:a8:
18:9d:49:92:a2:c2:ee:f1:74:db:d7:d8:99:c9:af:
cc:62:5d:b2:54:0c:b7:96:6e:11:97:72:2c:61:eb:
e9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E1:6A:99:1B:E3:F3:A4:B5:48:A4:F9:49:54:FF:46:A9:06:DC:81
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/6682CF0A699C11EFB18C5C0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.192.0/23
Signature Algorithm: sha256WithRSAEncryption
59:0d:7e:62:11:64:d4:d4:af:db:ff:b0:22:f4:6b:62:aa:34:
4d:01:ff:f7:15:66:94:a8:a9:53:ca:5f:9f:f3:ac:69:b8:db:
72:c6:21:1f:7e:f6:09:26:a2:16:31:f5:2a:a0:7f:e0:40:3b:
d7:fb:62:19:2d:18:97:f0:c2:54:3e:ba:d0:76:43:27:23:cc:
e7:b4:9b:1b:e3:78:f1:99:75:c3:af:ee:c1:d1:64:61:b5:85:
0a:25:48:9a:ef:09:52:fb:cd:aa:25:48:95:c4:ee:ce:c6:75:
d3:62:49:59:c6:cf:27:85:c3:8e:0b:56:2f:8e:38:2b:67:5a:
c5:a7:fa:01:2d:a7:76:c1:c8:7c:70:04:ab:d2:9e:f3:42:8d:
e4:5e:ef:f0:2e:bc:fb:9b:ce:73:48:e1:fa:18:7e:ce:7a:20:
8c:9c:11:e8:67:3d:3e:cb:22:26:e1:44:47:8b:dd:c1:9e:dc:
66:7a:6d:4b:b3:e5:a9:bc:bf:7a:59:17:54:95:4d:ad:c5:6e:
1f:ae:5e:5f:97:c8:0d:be:c2:86:81:e1:4f:52:cc:e4:4a:fa:
9d:77:8f:36:0f:0a:ed:62:a5:53:89:c7:af:34:61:cb:b3:20:
80:ad:fe:3a:e4:b1:53:84:0b:4f:84:03:36:f1:1f:14:24:c8:
5f:64:a7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 03:38:56 2024 by rpki-client on console-ams.rpki-client.org