Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/81AC362C306711EFAE36037BC4F9AE02.roa
File: 81AC362C306711EFAE36037BC4F9AE02.roa (raw, json)
Hash identifier: k7Wbf5CkJyNl+30FmCNnUI9tD15C8SFcoadS7Yc8YWo=
Subject key identifier: 94:1D:4C:94:68:06:15:02:46:D9:C5:95:CB:E9:CD:AA:01:0B:86:33
Certificate issuer: /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Certificate serial: 05
Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/81AC362C306711EFAE36037BC4F9AE02.roa
Signing time: Sat 22 Jun 2024 07:17:39 +0000
ROA not before: Sat 22 Jun 2024 07:17:39 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 45905
IP address blocks: 160.22.150.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 11:51:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91443DC, serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Validity
Not Before: Jun 22 07:17:39 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66767a92-7fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f1:a7:1c:db:38:48:00:cd:16:fe:06:e5:55:
a3:3d:0e:9f:ba:cb:bd:04:29:35:b3:d9:7f:0a:7f:
5b:7a:d8:46:63:ac:78:00:b0:39:9b:d1:53:97:ea:
e1:1d:d2:3c:8f:ab:52:b7:53:4f:f6:b7:09:2e:f5:
91:8f:5b:4f:e4:63:f0:e6:fb:86:f3:3a:cc:2c:e9:
ba:c6:53:9c:87:fd:07:81:13:8b:e5:8c:b9:aa:62:
02:4d:c8:f1:db:98:eb:90:cc:fd:1c:f7:33:ba:dc:
27:bb:79:54:ff:16:af:c6:67:9f:5b:39:d1:43:c7:
64:7d:c1:dc:93:86:fd:6c:b2:80:5c:4b:34:ca:be:
ad:8f:df:19:e4:78:e9:8c:9a:b9:f8:73:69:3b:9a:
e8:19:d0:a5:8e:5e:60:3a:47:b2:86:89:a8:a1:95:
65:92:55:66:db:38:9a:7d:43:31:fd:2e:9f:8e:79:
ad:84:43:b2:38:05:cd:aa:4e:8c:08:3e:75:5b:ec:
a7:fb:c8:09:20:a7:45:77:f7:8e:1b:03:e7:71:b4:
f0:2e:e7:43:d1:56:ff:5c:47:80:39:a9:7d:18:72:
8c:85:73:10:71:4d:a0:c9:47:27:3c:4f:75:fb:9e:
d7:69:17:37:6c:e2:79:56:97:f4:30:6e:2a:39:32:
19:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1D:4C:94:68:06:15:02:46:D9:C5:95:CB:E9:CD:AA:01:0B:86:33
X509v3 Authority Key Identifier:
keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/81AC362C306711EFAE36037BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.150.0/23
Signature Algorithm: sha256WithRSAEncryption
27:55:1b:e8:32:5e:0c:58:b8:08:ce:6c:ac:b1:d4:09:64:d3:
5e:10:80:57:a0:0d:df:88:0a:ef:e9:f4:0d:ce:3c:5f:64:47:
b7:25:bf:08:ce:7c:1e:7e:59:60:60:22:d9:fb:67:93:f0:20:
90:96:f1:0f:48:f2:e7:d3:cb:33:99:95:de:f7:bc:24:29:9f:
f1:c0:39:de:f0:25:b4:d4:68:65:2f:7b:9a:ca:1c:f2:77:c0:
a9:c2:d6:49:7b:bd:e3:48:3a:b6:3c:d5:2c:b4:8a:a2:65:44:
dc:0f:a8:42:4a:be:3a:02:a1:2a:a5:c5:17:93:bf:80:20:d8:
c9:bc:5b:c8:5d:9d:d8:cf:d7:9f:dd:68:bd:46:f3:ff:a9:53:
84:93:3b:aa:00:0d:92:9a:5e:8d:c3:a3:06:81:85:22:b9:84:
0c:e3:9e:20:2e:4d:67:4b:eb:12:bb:86:5d:e0:cf:d7:d6:b2:
38:39:cb:b8:68:bd:24:7a:a9:7b:b2:24:6a:9c:a6:ca:53:96:
14:34:dd:f9:42:99:30:58:f1:90:51:0b:0e:a4:ec:8e:a3:87:
42:07:1e:b0:50:1d:e6:3d:cc:a9:5e:f1:27:c3:ee:e9:b3:19:
34:ba:b2:6e:5d:56:2a:e7:a6:2a:49:51:4c:62:95:7d:55:40:
c1:9e:37:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:02:27 2025 by rpki-client