Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/F5C39E621FF311EFB0A97A82C4F9AE02.roa
File: F5C39E621FF311EFB0A97A82C4F9AE02.roa (raw, json)
Hash identifier: ktocPJB1mFOFGY1baeQF1YgADPZC5TynE3GGaaRbYE4=
Subject key identifier: 50:0D:22:B7:DA:CB:04:14:B6:0A:2C:34:A7:F3:74:F5:73:08:B7:9A
Certificate issuer: /CN=A91E57A9/serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
Certificate serial: 02
Authority key identifier: 4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/F5C39E621FF311EFB0A97A82C4F9AE02.roa
Signing time: Sat 01 Jun 2024 08:50:13 +0000
ROA not before: Sat 01 Jun 2024 08:50:13 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 63801
IP address blocks: 160.22.40.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 09 Sep 2024 07:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57A9/serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
Validity
Not Before: Jun 1 08:50:13 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=665ae0c5-280a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:42:76:e5:53:b6:ae:e5:cc:9f:c0:80:20:
26:df:23:f1:9d:92:0a:b9:22:8c:84:78:0e:45:32:
3c:5e:ab:7d:df:65:aa:d9:e2:c0:1c:e1:92:85:d3:
f8:28:4f:4a:bf:7c:9b:ce:0f:5c:4a:b8:36:39:e6:
c9:ad:5f:40:bb:b8:05:a9:ab:3a:4c:3d:af:ed:ee:
c4:22:42:f1:f8:f3:62:90:7d:f3:9f:58:2a:c5:39:
f1:b3:6d:34:bb:28:e0:8f:f9:87:75:60:b4:ac:e9:
b1:c0:a9:23:75:98:01:78:27:74:10:4a:6e:cc:a4:
91:5c:bf:65:26:9a:67:27:9e:1d:2a:4e:39:d4:22:
33:e8:18:9d:9b:6a:91:96:7b:48:3f:45:b8:66:af:
ec:2e:7d:67:8d:f0:d7:a1:53:a1:32:ad:4b:91:79:
89:ad:64:8a:77:90:45:71:d1:10:14:d0:8c:0c:f4:
0c:21:ee:0a:dd:fb:d9:5c:11:2e:95:3a:f7:9d:55:
94:b2:83:91:b8:15:b8:ea:46:7e:4e:49:15:2f:0c:
75:15:11:a4:62:5f:64:cd:dd:26:3c:ae:ee:b1:f0:
6c:4b:e0:8c:e3:a9:8c:22:38:0f:26:ec:ae:e2:42:
a7:05:fa:68:b1:0e:3b:d2:5f:2c:3a:fb:e3:a3:e0:
94:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0D:22:B7:DA:CB:04:14:B6:0A:2C:34:A7:F3:74:F5:73:08:B7:9A
X509v3 Authority Key Identifier:
keyid:4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/F5C39E621FF311EFB0A97A82C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.40.0/23
Signature Algorithm: sha256WithRSAEncryption
65:7b:64:af:86:f5:c0:31:6f:99:a0:92:5d:ab:71:b1:f3:ee:
93:20:2a:6c:23:01:d3:1d:00:37:ab:71:82:9b:5d:6e:81:96:
46:6f:18:ba:60:5e:19:56:e1:55:37:d4:23:5c:98:1b:4e:09:
a7:38:80:7f:8c:c2:d8:1e:c9:25:cb:21:e7:0c:f5:b5:ef:38:
ec:6f:0a:e4:10:ac:7b:73:a6:3e:c5:19:26:a7:26:e6:b3:8e:
47:98:52:b1:03:09:db:9b:41:03:3b:44:90:55:96:2e:a8:b1:
9e:af:d5:48:55:8f:05:77:b4:d0:6f:ac:b5:6d:b2:71:ef:ef:
ac:75:de:85:dd:a2:cf:29:4f:02:ad:18:6b:b9:07:35:2e:3a:
84:5a:83:68:b6:66:bc:f2:97:7d:65:f0:a0:8c:2b:5c:14:49:
3b:78:e2:61:e5:05:16:8f:ce:a7:de:85:54:c3:8c:df:b4:7f:
fa:1b:38:fb:15:f0:94:f0:a4:68:dd:11:b8:14:5d:64:7a:f5:
0b:ce:02:9a:97:56:fe:7d:75:0c:d2:7a:36:8c:0a:a1:36:4f:
96:b2:03:47:d8:e3:2d:88:43:79:4d:fc:f9:ef:00:e6:79:65:
9d:64:9d:3b:39:9e:37:02:7f:72:9a:d6:34:aa:cb:da:a1:e1:
84:c5:f4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 09:22:35 2024 by rpki-client on console-fra.rpki-client.org