Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/C084FFA4306311EF88BD1B66C4F9AE02.roa
File: C084FFA4306311EF88BD1B66C4F9AE02.roa (raw, json)
Hash identifier: tjjrF6Noyk0q5AQcjH4yOkCmDaGdWxn9nmoGnzCk8J4=
Subject key identifier: DC:C1:95:3C:E8:E6:6E:48:C8:20:77:59:55:01:8A:F8:B1:B3:F8:E9
Certificate issuer: /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Certificate serial: 02
Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/C084FFA4306311EF88BD1B66C4F9AE02.roa
Signing time: Sat 22 Jun 2024 06:50:46 +0000
ROA not before: Sat 22 Jun 2024 06:50:46 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 45905
IP address blocks: 160.22.150.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Jun 2024 07:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91443DC, serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Validity
Not Before: Jun 22 06:50:46 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66767446-9240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:ac:ac:a5:97:25:8e:72:19:b2:e9:c6:2d:
49:9f:92:b5:35:42:73:ed:a1:8f:e4:74:4b:4c:4d:
cf:9a:65:79:d6:69:d9:67:28:d1:4c:de:dd:52:9e:
51:86:8c:8f:a7:68:d7:f0:5e:c8:49:c7:88:8b:2d:
91:19:c8:1c:8c:16:c7:aa:89:76:36:84:ec:eb:de:
7c:e1:6b:8f:5b:42:e0:0e:fe:08:d0:ac:c4:33:91:
8e:38:83:75:0d:2b:16:84:3b:63:de:30:ea:80:ed:
3b:de:39:dc:05:0c:38:13:a4:21:03:25:2b:be:6e:
5d:8c:37:b3:03:1c:96:be:cd:9d:27:ce:08:63:e5:
5e:a7:ac:80:bc:c7:79:94:83:f3:02:18:8d:da:85:
83:64:d6:d9:1e:fd:c3:9f:c7:ee:6a:97:37:ed:c2:
60:8e:73:89:e1:e1:e0:f5:bd:ec:31:88:23:bc:59:
15:86:09:21:65:23:6a:6d:01:57:eb:e4:3a:5f:a9:
ef:0a:06:3c:a3:c6:c2:9d:ac:76:10:3e:59:83:27:
9a:73:b6:15:8f:11:01:31:0c:6e:f6:53:b8:01:02:
6b:26:f5:1d:d9:e4:6b:7e:40:a2:a9:a0:85:54:f9:
1c:b7:9a:41:c2:6f:ec:d6:d2:35:09:05:57:0f:fb:
a7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C1:95:3C:E8:E6:6E:48:C8:20:77:59:55:01:8A:F8:B1:B3:F8:E9
X509v3 Authority Key Identifier:
keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/C084FFA4306311EF88BD1B66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.150.0/23
Signature Algorithm: sha256WithRSAEncryption
97:60:a7:8b:e5:0c:73:21:2c:79:73:15:d6:cd:92:a6:1e:e7:
3b:6f:df:79:aa:1c:7e:c5:d3:32:c1:1d:69:14:e5:c5:9c:7c:
30:4d:5a:bf:be:87:5a:9f:3f:af:e8:56:5a:6a:4e:cd:d8:4e:
77:da:3e:17:64:39:88:8e:f6:32:ad:68:72:62:52:42:ca:83:
63:a6:3e:1b:8b:67:df:f0:24:dc:bd:d0:2a:4c:74:bc:e9:94:
99:33:4f:87:3b:23:f0:47:6e:c9:f8:b9:6c:6d:05:43:7e:95:
51:84:b2:76:8d:95:f2:6c:e3:8e:2a:5d:22:e2:e3:a9:6b:a7:
48:19:b7:8b:05:e4:e5:6e:cb:02:43:14:64:b2:f4:00:e1:7b:
71:cb:15:dd:f8:a2:64:e0:02:8f:48:68:65:ab:aa:57:9e:48:
bb:7c:2b:ce:95:8c:3b:b0:a0:a8:15:cd:62:3e:5b:c1:0b:e4:
be:97:02:a0:b2:2c:1a:75:eb:06:03:87:00:c5:ce:3b:6f:58:
e5:3a:2a:bb:e2:ec:9f:7d:ed:b4:47:04:59:b6:9f:4b:1f:3a:
ac:75:44:a0:4b:69:ca:8b:72:85:d0:75:13:33:41:1c:b6:2c:
4b:b9:53:7a:1d:0a:17:c8:00:57:29:cf:9e:d6:76:60:01:ea:
99:8f:ca:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:32:43 2025 by rpki-client