Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ACACFBE0654B11EFA2D89154C4F9AE02.roa
File: ACACFBE0654B11EFA2D89154C4F9AE02.roa (raw, json)
Hash identifier: ej/XWCoV+IRDIqKfL7I7vQC4bg92dZRrltf/S3J8iDw=
Subject key identifier: B8:F9:8D:BB:B4:73:AA:0B:C3:85:75:81:83:76:1F:98:DE:83:FE:1A
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 02AA
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ACACFBE0654B11EFA2D89154C4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:31:26 +0000
ROA not before: Thu 05 Sep 2024 03:31:26 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 152977
IP address blocks: 160.30.156.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 07 Sep 2024 02:10:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682 (0x2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Sep 5 03:31:26 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d9260e-1ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:46:5b:bd:e0:52:f9:e0:1a:6f:64:9f:8d:
c9:f1:67:c9:0e:d6:b0:7c:13:4b:53:ca:49:92:9e:
2f:92:44:9a:b0:2c:5d:65:f0:cd:6c:80:5c:23:4e:
f9:68:68:d0:81:c7:d7:af:82:04:85:00:02:35:a0:
91:ee:d0:44:a2:75:38:35:9d:a8:f1:25:69:1b:f2:
bf:15:ff:e3:64:45:c6:35:c8:07:e1:0d:fc:50:02:
af:2b:82:e3:5b:3a:01:f0:0d:52:ee:d2:cc:59:5f:
57:73:80:29:16:a6:89:c7:5a:29:35:ed:21:cb:9c:
ee:d0:e1:ff:d8:30:ba:22:ee:7a:46:9f:c6:72:d7:
6d:ff:7d:fa:45:25:d2:4a:3d:17:9c:6f:5d:55:f2:
94:15:ce:fb:74:2b:a2:e8:3c:25:fe:a6:54:be:a6:
f3:0f:bd:77:f2:19:52:12:c7:c1:75:53:87:d9:7e:
c8:d0:a5:5f:de:e8:26:e2:78:3a:0a:4a:c9:6c:82:
60:13:f7:88:48:34:40:4a:6c:68:49:38:64:14:b2:
f8:cb:d1:f7:02:6a:eb:9a:40:f2:5a:b3:0b:35:c0:
31:53:f0:11:7d:40:8e:93:da:8f:13:e9:46:73:9d:
4a:92:ec:fe:13:f2:c6:1c:42:5b:ac:a2:2a:6e:43:
99:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F9:8D:BB:B4:73:AA:0B:C3:85:75:81:83:76:1F:98:DE:83:FE:1A
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ACACFBE0654B11EFA2D89154C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.156.0/23
Signature Algorithm: sha256WithRSAEncryption
38:6b:98:14:ae:a2:ed:35:f2:a5:68:9e:ff:c4:01:58:fc:fd:
94:a3:6b:d2:79:8f:8d:4a:ba:ed:bf:ed:9b:7c:fb:b3:69:6e:
d0:8a:74:f9:5c:c0:3f:e3:b6:ed:ae:1f:33:d7:58:f7:e3:53:
1e:2c:d4:03:b8:82:9f:32:a8:96:67:4f:95:dd:27:45:2b:4e:
e5:70:91:95:fa:af:9f:a8:b4:46:ff:d4:87:c0:9c:fc:60:95:
4e:0d:86:89:fc:2a:2d:ea:4d:fc:64:2c:b2:42:c4:33:e0:16:
06:b4:95:29:b2:5e:04:13:d2:d3:62:d9:29:f1:f5:a7:91:a8:
d7:1e:34:1d:5f:0a:b0:77:dc:70:2d:2f:ea:fe:f5:ba:8c:3e:
8d:60:2e:9d:b6:5d:05:5a:d0:00:12:2f:cb:cb:ad:8d:4d:dd:
93:6e:25:c2:01:cd:ae:0e:34:b2:e3:b8:7f:96:7b:99:5f:b4:
4d:2b:37:4b:de:96:e8:76:8b:06:49:a6:25:f3:67:9d:ba:ac:
7c:59:5e:ed:f5:b8:68:1c:3c:4c:f7:cb:44:77:c7:e4:07:ea:
f4:4b:76:23:cd:7f:99:80:71:01:b9:67:13:32:ae:34:c0:cd:
e3:32:48:04:a7:be:5e:f3:c1:bf:ef:2b:f9:96:cc:fa:09:1b:
06:8c:c9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 04:28:09 2024 by rpki-client on console-fra.rpki-client.org