Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/4E65EB3A1DF911EF811F8486C4F9AE02.roa
File: 4E65EB3A1DF911EF811F8486C4F9AE02.roa (raw, json)
Hash identifier: nKZblNmyD92Ck6Ks6GSkit3k/PBjujd+CBu+XUd/i8c=
Subject key identifier: 95:DD:B1:A7:FE:C4:D2:92:CB:3A:36:2D:CB:E2:AE:A6:72:AA:4D:F7
Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD
Certificate serial: 0D
Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/4E65EB3A1DF911EF811F8486C4F9AE02.roa
Signing time: Wed 29 May 2024 20:23:27 +0000
ROA not before: Wed 29 May 2024 20:23:27 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 215177
IP address blocks: 160.20.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jun 2024 18:41:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD
Validity
Not Before: May 29 20:23:27 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66578ebf-ef57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:62:f5:87:ed:a3:aa:29:05:c1:c8:e4:0a:fe:
67:c1:f9:98:7b:63:a7:77:24:8c:23:3b:40:28:c0:
a1:4f:3e:94:ad:d8:30:93:4b:9b:70:bb:23:00:2b:
fe:d0:26:80:32:b2:b2:be:79:c1:b4:20:cb:e5:8d:
0b:39:12:c5:67:ba:91:43:01:a9:fd:ef:6a:0c:85:
ef:c0:b4:3f:94:58:bf:13:1b:64:e7:09:55:92:2e:
2d:49:e1:9a:b4:e1:e3:33:09:58:cf:a6:8e:d9:02:
b5:3d:72:94:bb:b9:40:1d:d9:90:0a:e0:c4:31:7f:
57:a0:63:13:a6:d2:5d:bc:1a:f5:79:b9:f1:a9:b0:
ac:4e:15:96:49:ab:9b:51:5b:b8:96:81:23:1b:c4:
88:d9:0d:ae:30:19:95:97:d6:9c:f3:63:2b:29:e0:
87:3f:a5:d6:f6:da:6e:43:81:ef:48:f1:51:6b:d8:
c7:c9:97:ec:61:3e:b1:59:46:3d:b0:f4:c0:cd:a6:
f5:ff:e0:f6:54:8b:6a:b8:cb:b1:03:ca:17:43:c2:
27:41:e0:80:da:be:5b:4c:30:69:fa:ae:9b:99:43:
6a:42:7a:c0:cc:a9:a4:3d:00:08:40:35:53:cd:61:
a0:c1:37:ac:e8:08:ba:58:16:7c:df:2b:5c:b0:bc:
0c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DD:B1:A7:FE:C4:D2:92:CB:3A:36:2D:CB:E2:AE:A6:72:AA:4D:F7
X509v3 Authority Key Identifier:
keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/4E65EB3A1DF911EF811F8486C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.20.121.0/24
Signature Algorithm: sha256WithRSAEncryption
10:19:09:71:53:5d:bc:cd:36:b4:11:35:8d:5f:f7:48:d6:2f:
7b:2f:93:05:6a:b8:02:a0:60:c3:cf:61:10:07:06:83:6e:6b:
6a:ca:95:49:83:24:45:20:68:96:8c:c1:60:80:35:4a:ba:eb:
df:ea:be:77:ec:0c:01:d3:c7:7c:af:6e:3b:1d:f3:df:23:03:
73:46:e4:4d:12:1b:f7:e7:06:1f:c4:c0:8e:9d:29:41:92:89:
f3:bc:7c:f8:ce:4f:2f:fc:4a:ff:53:a6:83:83:20:07:7f:4e:
70:78:c1:78:d5:fc:01:b1:91:ea:21:7d:f8:74:6a:b9:92:10:
72:ee:ea:bd:0a:f7:b8:d3:fc:0f:b9:f4:07:d5:dc:3e:b9:87:
4f:f3:a7:44:ca:43:2b:44:9c:75:67:9a:8e:5f:58:80:25:51:
20:6f:91:75:27:d1:41:77:3f:31:90:08:2f:85:c7:d2:e9:31:
b4:f8:9b:65:ab:81:65:2f:68:dc:44:f3:7b:42:09:0d:da:bd:
7f:8a:be:fe:be:e3:f0:0e:35:65:83:d4:00:3c:c9:a6:2b:c7:
28:f2:8a:aa:f8:bf:a6:76:40:ff:45:a4:d9:6d:31:94:53:dc:
29:60:48:35:90:06:87:93:10:f9:96:54:a5:fe:18:46:e4:b8:
8f:be:1e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org