Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/76003CEE23D111EFB64DEB3AC4F9AE02.roa
File: 76003CEE23D111EFB64DEB3AC4F9AE02.roa (raw, json)
Hash identifier: mPjsNGhWofb346iA7YZry0I8QLSCiktYhZCN/sVP2Iw=
Subject key identifier: 3B:97:B1:FE:C8:CB:DD:83:F4:B9:54:C4:33:52:41:3A:86:AF:AC:75
Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD
Certificate serial: 1D
Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/76003CEE23D111EFB64DEB3AC4F9AE02.roa
Signing time: Thu 06 Jun 2024 06:53:21 +0000
ROA not before: Thu 06 Jun 2024 06:53:21 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 401106
IP address blocks: 160.20.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 29 Jun 2024 10:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD
Validity
Not Before: Jun 6 06:53:21 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66615ce0-e98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:ec:c1:a7:d8:ee:a4:c6:c9:7d:ee:8d:99:
38:0b:99:2b:e8:76:1f:06:08:c9:10:cd:38:6d:19:
f9:b6:2f:8a:44:f8:36:70:47:9c:87:89:5e:ce:54:
a2:62:f3:54:85:0e:ac:c1:2a:f2:a9:a3:a0:a5:5e:
98:b5:36:3d:01:e9:3c:6d:41:d2:1a:30:f0:77:8b:
bd:60:19:3d:27:cb:fc:1c:1c:fc:46:ff:87:1b:f5:
da:a4:8d:71:25:59:4a:af:14:95:14:7a:c8:37:50:
d2:55:e2:b2:5d:90:98:29:9d:5d:ef:25:fb:5f:4c:
8b:78:e9:b6:94:27:bf:e8:67:16:e0:e3:15:3b:00:
9b:82:96:4b:4c:b1:1e:9c:58:27:fa:b4:84:ef:37:
47:38:8a:39:27:ae:73:8e:10:af:81:39:c0:8d:54:
73:3b:f7:51:96:7d:54:0f:b6:1c:d5:47:b3:90:eb:
35:86:df:b8:24:aa:2e:71:d7:41:49:55:22:c3:75:
78:e7:8c:4d:0a:5e:fc:ef:b2:77:13:52:03:dd:16:
7b:c7:3c:d2:fe:3e:c1:8b:e7:2f:58:21:83:c6:cf:
c7:f9:01:f5:d3:50:10:30:21:d2:1b:5e:c5:71:e6:
58:31:f9:d6:c1:9f:b3:db:3a:e1:35:cc:bc:e1:ee:
67:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:97:B1:FE:C8:CB:DD:83:F4:B9:54:C4:33:52:41:3A:86:AF:AC:75
X509v3 Authority Key Identifier:
keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/76003CEE23D111EFB64DEB3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.20.121.0/24
Signature Algorithm: sha256WithRSAEncryption
49:70:af:9d:97:f8:59:e7:de:e6:ac:ec:9a:05:1e:55:15:3d:
d5:a2:4e:24:bf:a9:80:8c:13:79:cf:db:39:d1:58:b4:d6:06:
9f:51:ea:0a:61:94:11:92:32:97:1d:ae:13:cf:a5:2b:39:6f:
6b:e9:7e:29:06:0a:b3:e3:3d:05:56:b7:8c:bf:4c:49:bb:62:
a7:dc:10:b8:8b:41:f2:87:fd:60:1b:97:2e:2e:78:fd:41:fb:
93:16:43:59:ec:b0:de:78:c7:48:bf:d3:e5:39:af:ac:18:64:
32:62:ba:5a:12:44:ab:c2:0d:3f:ad:d2:63:08:20:45:78:cd:
7a:dd:ca:c4:d2:6a:52:08:18:d5:7b:fd:25:4b:b1:b3:fc:cd:
96:f6:a3:22:2a:e7:d8:9c:50:b6:97:15:eb:b9:1d:2d:76:d4:
f1:af:ad:20:b9:4f:30:38:98:d5:01:cf:9d:53:d2:74:63:90:
5c:1e:bb:f6:02:a7:9c:23:74:0a:2f:36:9d:4e:8b:bf:64:f6:
ab:00:56:45:a6:ba:af:aa:58:46:b8:25:6a:56:58:26:69:d7:
7c:e3:6f:6f:2f:af:b0:ec:3f:f9:c3:3e:32:7c:fc:65:3a:34:
48:be:27:22:d3:f9:4d:0c:cf:75:d8:74:69:e9:f8:41:ac:36:
49:c7:09:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 14:32:47 2024 by rpki-client on console-ams.rpki-client.org