Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B56A49CC6CBC11EFB90E9022C4F9AE02.roa
File: B56A49CC6CBC11EFB90E9022C4F9AE02.roa (raw, json)
Hash identifier: xS+M+GIHzlvkSyOOBXBNcHVF/NiPl6G2r2XesIXmbOM=
Subject key identifier: 27:7C:FA:AE:5F:14:27:AF:C7:22:3C:6A:FF:58:B5:A8:21:42:4B:45
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 02BA
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B56A49CC6CBC11EFB90E9022C4F9AE02.roa
Signing time: Sat 07 Sep 2024 01:58:43 +0000
ROA not before: Sat 07 Sep 2024 01:58:43 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 152979
IP address blocks: 160.30.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 11 Sep 2024 02:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 698 (0x2ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Sep 7 01:58:43 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66dbb352-b165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:13:fb:99:8a:e8:84:d6:c3:e7:71:8d:c6:0f:
fd:be:72:36:b0:65:13:b4:7c:71:ec:11:4d:b9:75:
72:20:f7:8d:57:1b:64:fc:3b:49:8b:1f:0a:cf:cd:
77:0e:d6:17:f9:99:42:75:24:45:09:69:3c:87:33:
c5:70:64:ca:97:ce:35:80:b0:9a:11:5f:bb:4e:92:
97:e3:c6:f3:b3:0b:c1:e4:27:6a:ca:03:d3:79:38:
0b:58:21:88:5e:85:34:5a:e6:87:6c:f4:7e:03:06:
e9:b6:cd:d1:83:8f:a2:8a:53:50:c8:69:ba:4b:22:
b6:e4:06:e3:00:94:0e:f2:66:df:b7:2c:d6:7a:9d:
51:d7:3f:e8:92:17:02:3e:9d:43:bc:e0:86:b8:ae:
3b:8a:83:2c:f8:36:65:de:d7:cd:be:eb:22:82:be:
28:86:bc:b4:a2:f8:55:be:1e:1d:4f:15:13:80:07:
e0:49:9f:9d:34:26:8a:92:ff:dc:5a:5b:c5:ab:e8:
84:50:c7:ab:6b:9a:a8:41:9f:1e:bb:1f:31:5e:02:
40:7d:6d:75:ef:d4:15:72:77:48:c8:57:55:35:dc:
c7:a0:db:23:a1:4f:68:6a:66:c5:c2:ba:be:e4:ea:
35:ee:6a:c3:2c:81:7f:25:35:79:50:7e:5c:c6:46:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7C:FA:AE:5F:14:27:AF:C7:22:3C:6A:FF:58:B5:A8:21:42:4B:45
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B56A49CC6CBC11EFB90E9022C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.160.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:ae:a5:3e:e7:97:ee:14:fc:45:ed:ca:27:ec:b9:a6:c7:b3:
21:db:58:41:65:1e:68:6f:e5:ec:a6:13:c2:f4:7c:e3:fb:76:
fc:b0:dd:d8:d6:cd:63:cf:b4:58:3f:5c:97:57:de:71:1b:37:
8a:57:43:07:e0:d2:1f:80:6b:4e:87:76:97:19:b6:d4:0c:2f:
a3:3c:a3:0d:1b:c9:5b:63:06:64:fa:c8:df:8f:61:c7:c1:88:
2b:d7:c1:7f:79:42:a6:55:b2:83:ea:66:3c:c4:4c:27:7b:84:
3c:f9:82:d3:32:25:b3:74:cf:6e:3b:9c:49:7f:2f:78:14:fb:
17:55:04:64:e7:57:f3:59:5d:01:9d:77:5f:aa:1a:f3:63:09:
98:b1:7a:a4:62:df:96:8e:ab:f1:08:ca:5d:61:d0:17:0f:b9:
76:9b:c2:71:87:f5:24:59:12:a2:ec:1f:1d:2a:13:08:ff:82:
e4:7e:c4:b4:80:bd:b4:33:37:19:58:99:01:b3:53:fa:98:80:
d9:4b:4c:ad:98:99:7a:24:c2:d8:94:24:3e:c2:73:d2:69:4d:
b1:1e:24:d9:02:6e:bb:cb:ed:6f:5c:9f:c1:8f:42:d1:4c:31:
32:08:3d:7b:e7:b1:8e:59:8b:25:ad:a5:30:b4:eb:80:00:6f:
72:63:fc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 03:47:53 2024 by rpki-client on console-fra.rpki-client.org