Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/ED8B6726874411EFA19F3C58C4F9AE02.roa
File: ED8B6726874411EFA19F3C58C4F9AE02.roa (raw, json)
Hash identifier: zqXJEY1jtyCkhFCjBAMyTbiGMUxY8GV1n2YQHXGs2wM=
Subject key identifier: D8:1A:8F:8B:EC:0C:47:A7:6B:34:13:A8:93:9E:DE:66:18:F1:88:D8
Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD
Certificate serial: 61
Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/ED8B6726874411EFA19F3C58C4F9AE02.roa
Signing time: Thu 10 Oct 2024 20:19:18 +0000
ROA not before: Thu 10 Oct 2024 20:19:18 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 401106
IP address blocks: 160.20.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Oct 2024 12:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80C2
Validity
Not Before: Oct 10 20:19:18 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=670836c6-2160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1c:d4:05:1b:b3:a3:1b:03:ba:c7:80:bf:b6:
4d:dd:a8:0a:91:0e:19:ce:86:2d:6d:2c:ed:82:fa:
30:a7:d6:6f:c4:17:04:5e:39:7a:ed:43:6a:b5:70:
e4:36:88:26:32:f2:7f:04:39:e1:ea:12:72:54:b4:
5b:3f:d1:b8:a9:ea:3a:b8:55:21:a3:b8:f3:b4:8c:
2d:42:b2:a1:6d:37:9c:b4:44:86:42:b9:94:1f:99:
17:1b:ad:d4:a6:56:8d:cd:5e:b9:55:97:35:86:9b:
8e:72:9b:fb:9b:a2:52:1b:03:0b:8a:87:5f:a6:bf:
5a:1d:44:ae:88:07:7d:14:d6:5e:03:72:5b:65:3b:
d3:bc:e6:02:d7:f6:d0:37:a7:ab:70:5e:d4:8f:f0:
01:78:ca:30:f1:5c:63:16:c3:7d:89:83:59:39:32:
22:0f:c1:1d:64:75:2d:4c:ce:8f:c9:70:51:1d:90:
fe:fa:95:ed:e6:c8:61:8f:c8:0d:0c:8f:f5:c0:a1:
2a:95:74:96:7b:77:df:2b:e0:1a:84:6b:2e:b1:65:
b3:f5:4e:52:d1:98:a4:ae:c1:ed:19:ed:81:c4:8d:
fb:2b:d9:39:72:d2:cd:f2:bd:f8:e3:a6:b8:d2:d8:
83:cf:ab:c5:34:3c:75:85:7f:43:23:88:96:e0:2d:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1A:8F:8B:EC:0C:47:A7:6B:34:13:A8:93:9E:DE:66:18:F1:88:D8
X509v3 Authority Key Identifier:
keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/ED8B6726874411EFA19F3C58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.20.121.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:17:8a:5d:cd:d6:68:dd:b3:25:58:5d:b8:34:9a:e2:55:7d:
3e:05:cd:db:3d:62:34:64:0d:51:2f:0c:f5:3e:b7:13:2d:ed:
2f:c0:c9:97:43:dd:bf:fc:c2:a9:a0:91:e6:53:17:96:fc:17:
ae:e8:c7:7a:b4:e4:93:bd:69:df:46:ec:9f:3d:5f:01:c4:2f:
7c:95:c2:1b:fa:e6:18:b9:b4:05:6f:66:b9:fa:9d:26:4c:f8:
31:2f:92:d2:09:f6:30:96:2b:77:04:e9:dd:f5:37:ec:03:70:
27:18:64:cc:d8:17:bd:30:91:6d:01:ba:42:a5:71:a5:f5:6a:
17:96:01:92:0d:e3:51:08:2e:45:16:08:a1:81:26:a1:fc:e7:
86:ad:bb:f4:33:94:d6:6f:14:5c:1b:57:8e:90:f1:7f:f9:50:
c3:20:7a:4d:02:54:b8:fc:17:fa:2d:e6:84:0a:b1:69:00:4f:
19:cd:ab:8e:12:fe:62:73:a9:bf:5a:0b:ba:5c:d5:3f:3e:da:
5c:dd:fb:b8:c7:60:99:4f:eb:ab:5d:74:5f:f4:0a:77:04:d8:
10:da:71:55:aa:5b:49:77:02:fa:45:cf:c7:44:50:c9:d5:8c:
9d:84:5a:3a:00:79:c2:85:fe:45:85:c0:c5:f9:4a:70:87:b8:
da:63:c1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:27 2025 by rpki-client