Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/C3200A0020B511EF8BD96F51C4F9AE02.roa
File: C3200A0020B511EF8BD96F51C4F9AE02.roa (raw, json)
Hash identifier: flMIEy/OX7793G/95mtxOSqFL223O7UpTGnFLiadbuA=
Subject key identifier: B9:62:2E:E3:20:7C:61:8B:89:16:C9:31:EB:BE:6D:56:F8:53:B9:8B
Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD
Certificate serial: 15
Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/C3200A0020B511EF8BD96F51C4F9AE02.roa
Signing time: Sun 02 Jun 2024 07:57:31 +0000
ROA not before: Sun 02 Jun 2024 07:57:31 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 160.20.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 13:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD
Validity
Not Before: Jun 2 07:57:31 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665c25ea-0946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:4f:c1:94:94:df:5f:91:73:ae:f8:fe:43:
7e:30:3d:a4:80:b9:bb:29:9f:33:82:45:c6:cd:ed:
34:bb:fa:b8:6c:64:3f:88:be:90:33:b9:30:bd:4d:
7d:bf:cd:2c:75:87:87:c7:a7:cf:26:b7:db:16:66:
6b:71:b3:91:22:36:65:8a:66:b4:86:c4:92:52:54:
b9:47:50:ae:05:99:5f:55:65:e8:01:a9:a2:3a:b8:
0b:36:e2:2c:c0:87:54:fe:33:40:25:58:a3:3b:65:
ff:04:64:ae:fa:ad:03:d2:e3:d7:8d:9d:22:1e:2b:
3c:96:b6:94:c4:0e:2b:34:46:02:c5:fd:95:fc:d1:
a9:e4:76:41:5c:65:e0:24:da:72:22:56:ac:c6:57:
99:22:1e:a4:6b:06:ac:22:7c:c1:e0:9a:a6:75:a6:
a1:75:08:3f:19:6d:b2:e9:0b:b0:26:2e:46:b6:df:
74:27:a6:e7:a2:58:da:12:f4:1a:dc:05:cb:39:4f:
5f:9d:c8:f5:7f:d3:ce:7c:51:0c:b6:61:38:75:e6:
6f:0e:75:2e:41:35:23:a5:83:12:9e:2c:9e:4e:e0:
9b:bd:b0:fb:22:41:65:17:94:5f:98:88:38:8d:8b:
dc:51:83:ca:b7:19:68:ae:cf:71:b0:4a:d2:7b:2f:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:62:2E:E3:20:7C:61:8B:89:16:C9:31:EB:BE:6D:56:F8:53:B9:8B
X509v3 Authority Key Identifier:
keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/C3200A0020B511EF8BD96F51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.20.121.0/24
Signature Algorithm: sha256WithRSAEncryption
12:81:ad:0c:db:6a:59:9d:40:fb:10:d0:43:13:8c:67:92:7e:
42:b2:8f:6e:36:99:38:75:1d:db:fc:f3:ef:7d:e6:81:ac:3f:
0c:bb:82:66:f8:b1:93:05:e4:a7:6f:12:af:09:9f:cb:e3:a1:
cb:54:4c:89:d3:56:3d:56:85:31:77:d3:f9:7a:22:6d:e0:c4:
e2:6e:14:27:33:04:45:d1:2f:e8:49:80:91:6d:da:2d:33:53:
a5:6f:54:21:0c:8e:c9:0d:9a:40:60:cd:81:8d:27:eb:96:19:
7a:1f:bb:c3:84:d0:c7:65:bc:61:95:48:bd:a0:4a:23:ad:94:
10:c3:a5:3c:ed:00:7b:b0:c4:c6:b7:7c:45:94:49:08:3a:3b:
a3:b7:e2:1e:3c:07:3d:d7:53:e9:24:60:5e:9d:ae:c3:6f:b6:
8a:fe:c1:82:2f:a3:13:96:96:c8:de:e0:28:65:5f:79:c9:68:
f9:76:ea:9e:cf:81:04:0a:90:1f:a3:99:3f:50:a0:43:5f:9c:
8e:00:27:62:13:00:f0:cd:24:ea:88:78:1e:3e:ab:9a:41:74:
cc:c6:37:80:43:fa:8f:00:27:b0:5d:91:ac:fa:0d:46:5c:3a:
cd:b6:7a:a8:ae:ad:6f:43:f6:88:33:b9:fd:77:86:1c:4c:e3:
4d:c3:03:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:58 2024 by rpki-client on console-ams.rpki-client.org