Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/FC3A9D04346111EFA870173AC4F9AE02.roa
File: FC3A9D04346111EFA870173AC4F9AE02.roa (raw, json)
Hash identifier: 1kpyv3JOrlw5banQo1FuP6RPcY8mFT/euVlIKfQI6oQ=
Subject key identifier: 60:DA:73:44:BF:BB:A6:36:0A:A8:1B:C0:0B:90:ED:4F:4E:DA:A7:3C
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0180
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/FC3A9D04346111EFA870173AC4F9AE02.roa
Signing time: Thu 27 Jun 2024 08:48:12 +0000
ROA not before: Thu 27 Jun 2024 08:48:12 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 152933
IP address blocks: 160.22.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 12 Jul 2024 01:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Jun 27 08:48:12 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=667d274c-9e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:65:f8:bb:c2:93:87:6a:f7:28:d5:71:3a:cb:
ae:5e:ed:86:03:79:cf:9d:37:45:29:d8:f3:3b:73:
80:d9:20:b5:d2:92:91:fb:05:ee:87:41:b4:81:8f:
cc:df:d7:3b:44:a9:c2:ea:90:39:07:99:c4:99:77:
f3:66:45:82:e1:b0:9d:fe:39:00:9a:83:ea:81:58:
70:22:a2:b7:85:8f:c2:6a:b8:be:92:3e:5a:30:8d:
59:6b:0f:10:92:6c:5c:79:52:8a:e4:6a:03:db:0c:
48:ea:a3:a8:5d:d7:91:33:4a:d2:7f:00:ca:fc:4d:
81:b1:fd:24:ec:d3:7a:e7:41:95:9d:bd:94:b1:ba:
0e:9f:d1:69:46:24:16:e4:8e:b1:66:7a:5a:84:40:
2e:9d:b6:75:17:bc:eb:a4:04:af:c7:82:f0:4c:7e:
0c:97:92:31:a5:0b:87:ad:d3:bf:90:f3:83:1b:8f:
70:08:25:6d:a8:0a:4a:2f:ef:92:5c:46:52:46:ca:
61:b4:61:f5:5a:a3:7a:85:67:74:ba:c7:20:10:75:
43:29:5c:7f:09:c9:56:76:16:b8:d5:96:38:10:71:
fe:85:7c:86:a9:08:be:8b:76:fe:97:db:84:91:1c:
0b:b7:a6:84:05:f1:51:9b:3e:71:e5:da:75:39:1f:
e3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DA:73:44:BF:BB:A6:36:0A:A8:1B:C0:0B:90:ED:4F:4E:DA:A7:3C
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/FC3A9D04346111EFA870173AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.160.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:80:f9:0a:0f:39:03:9f:c5:49:cc:40:82:26:6b:a0:43:ab:
c9:cc:cf:62:90:36:59:5e:9d:90:f7:8b:a0:20:c5:91:80:67:
27:78:bb:d6:0a:6a:4e:21:2b:8b:bd:5e:90:50:e1:90:d4:fb:
76:15:23:02:15:f4:d6:a7:b5:43:c1:d3:d4:d1:c1:4b:f2:92:
38:b9:c7:5a:fd:a3:af:e9:40:3f:8f:7c:e1:c6:8d:78:24:c2:
8e:7f:6c:97:8a:1c:36:22:d8:29:ad:33:ef:dc:9c:8d:f7:78:
a5:8c:8a:e7:d4:0d:49:50:1b:d5:e4:8b:17:74:62:32:70:a1:
85:15:1e:a1:47:0b:38:da:cb:58:93:40:fd:8e:f1:95:a1:f1:
50:d5:cb:df:61:5c:26:eb:9a:0b:ce:50:c1:30:e5:85:25:cf:
a7:16:0a:93:fd:1a:59:56:38:2d:46:35:32:1d:98:55:ba:44:
49:91:36:f7:20:b4:47:9e:99:1e:34:e5:dd:a6:4f:55:0d:7f:
b5:62:2c:09:6f:67:dc:c7:f5:90:b0:2b:32:f2:a1:30:e3:80:
75:32:bb:df:e9:b1:53:cd:3a:a2:af:63:3c:6e:d4:5d:e7:fa:
00:11:59:27:79:80:4f:78:1b:68:d1:71:c2:3f:2a:ef:e9:5a:
cc:83:1a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 03:08:14 2024 by rpki-client on console-fra.rpki-client.org