Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7055B480912811EF91EC4A7FC4F9AE02.roa
File: 7055B480912811EF91EC4A7FC4F9AE02.roa (raw, json)
Hash identifier: 2lP2Ksam2il05UL1KXjK1oRyixpwAEva3f3oY/ZjWyo=
Subject key identifier: 6C:DF:01:DA:33:ED:77:F4:8B:FC:5B:3D:5D:77:49:96:8A:79:9F:6E
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 037A
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7055B480912811EF91EC4A7FC4F9AE02.roa
Signing time: Wed 23 Oct 2024 10:20:34 +0000
ROA not before: Wed 23 Oct 2024 10:20:34 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 153021
IP address blocks: 160.191.54.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 26 Oct 2024 06:24:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890 (0x37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 23 10:20:34 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6718cdf2-5baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:aa:7c:7d:a5:f7:87:48:f4:c4:a6:67:8c:
1e:46:cd:ce:82:72:54:1e:e8:7c:68:b3:67:22:63:
f6:4e:c7:ec:09:ff:45:30:57:ff:3e:f9:8d:2d:9f:
ff:54:87:77:ee:1d:b5:18:4b:e8:ae:c0:24:fb:92:
5a:25:85:a5:c5:a3:88:ac:8f:11:62:ba:5a:12:24:
f1:89:20:70:f3:ce:83:55:30:96:86:70:e8:73:10:
f3:2f:b1:62:14:ca:40:49:d6:bb:08:e0:6a:6c:9e:
02:0e:e0:c6:c1:06:7f:27:71:98:3c:93:5e:c0:e5:
34:4b:84:f6:0a:b5:11:16:15:d4:92:83:fc:67:e0:
18:61:e1:36:f4:f5:48:26:9b:f5:b3:5d:c8:a0:9d:
22:86:e4:bb:be:b4:8e:3a:82:88:cc:f8:8b:4b:e6:
3a:11:db:ec:ae:7f:59:7d:03:43:23:46:1d:0b:04:
5f:4a:c0:43:bb:92:14:01:57:67:2b:bf:2f:bf:e0:
5a:54:82:04:86:d5:bb:d9:7a:e0:57:15:6b:4c:9a:
69:6f:2e:46:28:80:a0:e2:56:87:1c:eb:4a:56:c7:
e9:a0:29:e2:b5:a9:17:01:f8:04:6f:29:0d:2d:71:
3c:66:c8:82:75:66:8a:50:c4:8d:87:1f:eb:d4:bb:
44:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DF:01:DA:33:ED:77:F4:8B:FC:5B:3D:5D:77:49:96:8A:79:9F:6E
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7055B480912811EF91EC4A7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.54.0/23
Signature Algorithm: sha256WithRSAEncryption
43:8d:4c:df:4a:52:7a:b8:b9:47:26:b1:6a:d5:69:f8:f9:7a:
38:87:d6:40:36:d8:0f:24:1d:92:f7:b9:dc:09:cb:d1:cc:17:
3e:0e:6d:07:6b:f0:e9:41:34:cf:94:ed:af:2f:72:6b:58:44:
dd:28:8d:fe:6f:32:c2:c3:b8:87:c2:b6:60:35:ab:78:11:2a:
54:f4:d2:50:25:39:9f:b0:63:6b:01:d1:69:56:dd:cd:6f:66:
de:d0:08:de:51:c4:ee:35:f4:fa:d8:0d:76:c7:4f:26:b0:1d:
c4:74:cd:f4:8a:38:19:0b:67:3c:5b:9c:e2:66:7e:50:6e:00:
2d:76:93:0a:c3:1a:fa:64:8a:48:39:ce:f6:07:f0:ef:d8:f0:
d5:34:25:b6:12:18:88:86:0b:4b:91:80:4b:2d:31:b6:34:95:
f0:9b:14:59:83:72:0a:72:53:9f:d5:a2:2c:cf:70:94:e7:5e:
a3:15:97:aa:a4:43:7d:aa:2f:e8:e4:db:45:8f:8d:81:59:0a:
f3:1b:03:57:61:8b:d3:8a:c9:9f:b3:d7:cd:98:bb:a7:7a:fb:
99:6b:0a:70:d8:ad:84:e3:d6:37:6c:e4:37:db:d2:76:e1:8b:
92:17:29:06:58:22:5c:14:b1:0f:5c:f6:e7:72:59:95:37:fe:
4b:13:60:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 08:00:33 2024 by rpki-client on console-fra.rpki-client.org