Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FE0EC04033C311EFA8168F6FC4F9AE02.roa
File: FE0EC04033C311EFA8168F6FC4F9AE02.roa (raw, json)
Hash identifier: ZdREZBpLuWcPY+MUM0c07RjM/yk8os1nBdjyuKAlYmM=
Subject key identifier: A5:10:9C:CC:0B:B1:4A:44:3E:1C:12:FC:D9:56:2C:D8:2E:AF:EB:D5
Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
Certificate serial: 2B
Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FE0EC04033C311EFA8168F6FC4F9AE02.roa
Signing time: Wed 26 Jun 2024 13:57:15 +0000
ROA not before: Wed 26 Jun 2024 13:57:15 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 151349
IP address blocks: 160.22.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Sep 2024 13:28:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
Validity
Not Before: Jun 26 13:57:15 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=667c1e3a-cb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:16:c0:fb:d0:e5:6a:a9:1e:58:2a:73:12:ac:
26:96:1a:f7:ee:2a:3c:02:08:13:f9:bf:21:55:b7:
0e:b3:8a:7a:d5:41:f1:bf:2d:3d:67:fc:f5:eb:c6:
b5:9b:a0:f4:f7:d3:33:39:a5:bb:11:bb:9c:b0:67:
44:de:5f:33:e4:40:22:4b:8a:39:83:2e:28:40:33:
cc:f5:8a:92:cb:4e:e0:61:8a:45:37:71:1a:d3:01:
20:a0:e4:76:fa:69:79:ef:9c:f2:72:41:24:fa:c4:
fd:89:39:da:7a:0b:fd:0b:1a:95:e9:48:af:a2:8e:
82:b5:02:7c:aa:0c:0c:8e:72:d5:c9:eb:02:7b:ae:
ab:a8:e0:81:ea:5d:41:1a:e9:04:65:dc:5e:0c:37:
fc:d5:40:4f:5e:5d:32:f2:65:65:ec:2d:e8:56:ce:
d5:a2:18:9f:37:78:fa:6c:3f:ce:55:52:e4:46:92:
9f:e5:06:00:f7:c6:3a:3f:42:44:05:cd:dd:16:3c:
47:ea:19:61:1e:28:45:12:b1:b0:02:fc:2e:77:cb:
59:23:7f:91:20:57:7a:4d:6f:1b:83:13:9b:82:5d:
92:f4:19:18:a0:e9:ad:07:57:5b:22:dd:98:24:04:
9c:2a:3d:94:73:65:57:b4:27:c5:f1:06:26:9c:ec:
9f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:10:9C:CC:0B:B1:4A:44:3E:1C:12:FC:D9:56:2C:D8:2E:AF:EB:D5
X509v3 Authority Key Identifier:
keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FE0EC04033C311EFA8168F6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.155.0/24
Signature Algorithm: sha256WithRSAEncryption
55:49:fe:9b:27:62:6e:1d:46:e3:68:be:d9:ee:89:6d:b6:ba:
5a:e9:8f:18:bb:e0:51:6e:12:d8:cc:b7:0f:0b:a3:4a:b9:19:
52:1c:ff:ce:11:01:d8:6f:e3:02:4c:11:0a:a4:35:ab:28:a4:
cc:55:54:83:84:6c:d6:7b:aa:0d:0e:f6:ee:28:0f:67:20:d1:
74:9a:e7:00:86:c1:ea:f6:0d:2f:05:af:bb:c7:e1:5d:ce:99:
5d:56:9f:91:59:8c:bd:6a:ba:b0:2b:bd:54:da:90:09:4b:c2:
57:f1:e0:e2:a5:ba:84:3d:14:67:8b:89:96:ac:fe:47:ca:6c:
91:15:3d:a3:5c:0b:dd:c5:2b:cb:75:35:3a:44:09:30:ca:0c:
c5:3f:2b:6c:34:b5:03:f2:c9:96:98:df:ff:2e:ef:c8:2b:23:
34:d9:31:e7:37:b1:74:b4:b0:ef:eb:78:be:2f:fe:61:6b:a1:
16:97:cf:b6:f3:2d:dc:37:cf:58:25:39:1f:b1:b9:db:f3:66:
14:46:35:96:41:64:f9:89:84:cb:8d:2c:f4:63:fb:82:a4:90:
b4:82:f7:7d:cc:7b:ac:c6:5b:cb:f0:2d:72:9b:e4:4f:0f:3d:
18:bf:59:b1:38:09:af:4d:af:57:0a:a4:40:2e:fc:58:ce:20:
0c:b9:ba:0f
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
RUFFMDExMC8GA1UEBRMoOURGNEZFREZGOTJBOUU3RjZFMDJCRkMwNTRBRDMzOTg1
M0Q5REQzMjAeFw0yNDA2MjYxMzU3MTVaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2N2MxZTNhLWNiMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDtFsD70OVqqR5YKnMSrCaWGvfuKjwCCBP5vyFVtw6zinrVQfG/LT1n/PXrxrWb
oPT30zM5pbsRu5ywZ0TeXzPkQCJLijmDLihAM8z1ipLLTuBhikU3cRrTASCg5Hb6
aXnvnPJyQST6xP2JOdp6C/0LGpXpSK+ijoK1AnyqDAyOctXJ6wJ7rquo4IHqXUEa
6QRl3F4MN/zVQE9eXTLyZWXsLehWztWiGJ83ePpsP85VUuRGkp/lBgD3xjo/QkQF
zd0WPEfqGWEeKEUSsbAC/C53y1kjf5EgV3pNbxuDE5uCXZL0GRig6a0HV1si3Zgk
BJwqPZRzZVe0J8XxBiac7J99AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUpRCczAux
SkQ+HBL82VYs2C6v69UwHwYDVR0jBBgwFoAUnfT+3/kqnn9uAr/AVK0zmFPZ3TIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFQUUwL0FFRjYzNzYwMTk2
ODExRUY4RkY3QkU2RkM0RjlBRTAyL25mVC0zX2txbm45dUFyX0FWSzB6bUZQWjNU
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbmZULTNfa3Fubjl1QXJfQVZLMHptRlBaM1RJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RUFFMC9BRUY2Mzc2MDE5NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9GRTBFQzA0MDMz
QzMxMUVGQTgxNjhGNkZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKAWmzANBgkqhkiG9w0BAQsFAAOCAQEAVUn+mydibh1G42i+
2e6Jbba6WumPGLvgUW4S2My3DwujSrkZUhz/zhEB2G/jAkwRCqQ1qyikzFVUg4Rs
1nuqDQ727igPZyDRdJrnAIbB6vYNLwWvu8fhXc6ZXVafkVmMvWq6sCu9VNqQCUvC
V/Hg4qW6hD0UZ4uJlqz+R8pskRU9o1wL3cUry3U1OkQJMMoMxT8rbDS1A/LJlpjf
/y7vyCsjNNkx5zexdLSw7+t4vi/+YWuhFpfPtvMt3DfPWCU5H7G52/NmFEY1lkFk
+YmEy40s9GP7gqSQtIL3fcx7rMZby/AtcpvkTw89GL9ZsTgJr02vVwqkQC78WM4g
DLm6Dw==
-----END CERTIFICATE-----
Generated at Sat Sep 7 15:48:35 2024 by rpki-client on console-fra.rpki-client.org