Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/A4378A60204611EFA2F12A12C4F9AE02.roa
File: A4378A60204611EFA2F12A12C4F9AE02.roa (raw, json)
Hash identifier: gNLu6OtX/4ihlWoe8svhUInliQjlbWrn6HQ48QRqCuU=
Subject key identifier: 02:39:F5:23:7C:B7:55:AF:CA:B3:2C:46:97:CE:AE:28:69:FA:79:52
Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD
Certificate serial: 12
Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/A4378A60204611EFA2F12A12C4F9AE02.roa
Signing time: Sat 01 Jun 2024 18:42:05 +0000
ROA not before: Sat 01 Jun 2024 18:42:05 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 215177
IP address blocks: 160.20.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Jun 2024 07:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD
Validity
Not Before: Jun 1 18:42:05 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665b6b7c-6cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1f:21:7d:fe:8e:1e:67:7d:c7:c5:2b:16:ca:
b6:2c:db:be:9a:f1:7e:5e:1e:c3:e2:6b:ec:60:5b:
c0:66:fe:55:2b:24:99:26:bb:1f:04:67:bb:ab:85:
95:72:cc:12:2d:66:ca:33:fe:c5:46:78:c8:32:dd:
b1:fb:b5:36:41:08:a2:d6:4e:c5:a4:36:a9:c1:6c:
99:3a:e0:5d:75:20:e3:e5:40:51:57:2e:59:bd:83:
28:12:d0:6f:9f:5e:fe:57:9a:ed:33:29:c3:4b:47:
a1:39:c1:9b:e9:a8:0f:0b:e2:91:e7:b1:a8:64:29:
f0:2d:49:e3:aa:ec:a9:59:9a:62:c6:4e:f7:50:4f:
21:de:58:6d:a9:23:df:7c:1a:ce:4b:6c:d7:70:0f:
f1:ac:92:e9:f2:b1:92:96:8b:10:63:38:23:50:41:
78:00:38:f7:e5:cd:bc:57:90:19:6b:f8:d6:93:a7:
26:7d:16:9e:a2:ba:f3:9f:43:ab:61:6d:8a:13:f9:
4a:1f:e4:43:c6:7a:2e:15:11:e7:d7:d0:5a:55:c2:
46:e4:4f:c4:3f:76:90:17:51:4a:1b:36:6c:fb:70:
5f:d8:c4:ab:fa:a9:c8:87:47:b9:13:a0:7b:33:ba:
69:80:07:91:16:15:4b:ed:41:94:92:6e:d2:d0:66:
31:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:39:F5:23:7C:B7:55:AF:CA:B3:2C:46:97:CE:AE:28:69:FA:79:52
X509v3 Authority Key Identifier:
keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/A4378A60204611EFA2F12A12C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.20.121.0/24
Signature Algorithm: sha256WithRSAEncryption
91:58:4c:b9:7f:ae:3f:95:ab:ab:04:d6:a3:a9:41:f0:bb:6b:
a2:a7:79:02:5d:88:0e:21:d9:9b:58:3f:15:44:78:e5:7b:9a:
1e:e9:a8:1c:dd:60:a8:32:43:e9:dd:10:d7:6a:65:65:1b:46:
67:22:25:19:34:e7:15:87:f8:ed:0a:20:4a:4e:d7:e2:3f:77:
29:66:4f:07:c5:0d:d1:2a:9c:ff:d9:83:c9:b1:6d:2e:f3:88:
51:41:64:fe:84:d1:2c:d9:1a:2e:99:1e:f2:c6:0e:f6:30:57:
26:88:1e:98:4b:a1:c5:0a:ff:23:b2:12:fd:6f:0a:68:51:48:
f4:04:e4:9e:42:2a:40:4c:ed:d2:d2:e0:59:f0:2a:2f:81:e6:
ab:1b:c0:61:dc:c5:5c:72:59:5d:b7:14:61:37:f6:70:c5:7f:
02:91:88:af:de:6d:3d:e3:7d:a2:b1:d6:32:46:94:5e:7d:e9:
a8:53:c4:54:b0:4a:28:c3:30:e2:a2:cc:6d:ab:e5:3a:08:42:
0a:83:5c:06:93:cf:b8:d1:8b:39:a3:53:16:64:a0:cf:50:bb:
6c:ac:25:e6:28:cc:ca:dd:66:92:d4:5d:b7:67:a4:03:2a:b3:
17:06:80:ed:06:b7:36:6d:62:37:04:5e:9a:f0:e8:68:aa:46:
aa:2a:74:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org