Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/82451FD6B7EE11EF9015FD74C4F9AE02.roa
File: 82451FD6B7EE11EF9015FD74C4F9AE02.roa (raw, json)
Hash identifier: 2f2ErEyRygjoFRDTL16tBgq2f+ZwqVNyQ/J6I7L9R5g=
Subject key identifier: A6:1A:39:07:BD:CD:21:5D:72:E8:F8:32:E5:EA:E3:F0:7A:5F:EB:EC
Certificate issuer: /CN=A916BF2B/serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6
Certificate serial: 02
Authority key identifier: FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/82451FD6B7EE11EF9015FD74C4F9AE02.roa
Signing time: Wed 11 Dec 2024 18:34:09 +0000
ROA not before: Wed 11 Dec 2024 18:34:09 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 137410
IP address blocks: 160.250.192.0/24 maxlen: 24
160.250.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Dec 2024 15:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BF2B, serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6
Validity
Not Before: Dec 11 18:34:09 2024 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6759db21-628c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:36:77:49:05:a2:1b:6a:28:0c:1b:aa:0d:
1f:a2:61:6d:94:5e:b5:f0:4e:4a:e4:24:b4:47:da:
a4:2a:17:42:33:60:34:d2:6e:1b:18:5b:c0:85:c1:
a0:19:f6:f5:b1:93:ff:63:cc:f8:7d:c0:75:12:b3:
2c:27:06:48:3e:49:e8:32:07:0e:8e:c6:cd:eb:d7:
bd:80:ec:ce:a6:26:ed:df:90:7e:2c:35:25:6b:ad:
b1:40:03:63:14:c5:0a:2d:a3:0e:f3:92:a6:61:6a:
b9:ec:51:f8:a7:77:16:b4:c1:9f:d2:3a:63:21:1b:
fc:f9:87:b4:6c:35:ea:57:e3:fb:71:e9:69:0e:8f:
a7:15:76:69:5b:af:f7:a7:31:c2:f1:4c:2e:27:60:
14:75:5d:50:59:3e:41:39:ad:9e:68:af:70:a9:d6:
17:a5:28:a5:8b:92:5a:e8:66:1a:1c:0c:d7:67:fb:
d4:c6:69:09:e4:a0:87:8a:f9:23:cf:9e:58:da:8d:
b5:b6:28:28:4d:9b:cc:68:13:21:25:20:64:91:6b:
9d:c7:a9:e3:a5:dd:53:1d:f5:7e:ac:f6:ca:6d:6e:
93:5a:13:43:a2:25:d6:25:c3:19:dc:d1:a2:4d:8e:
8a:ee:8d:e4:0b:d5:a7:ce:21:40:1c:26:0c:1c:34:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1A:39:07:BD:CD:21:5D:72:E8:F8:32:E5:EA:E3:F0:7A:5F:EB:EC
X509v3 Authority Key Identifier:
keyid:FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/82451FD6B7EE11EF9015FD74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.192.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:fa:a8:b3:80:79:fe:15:19:41:36:b8:ae:19:25:de:4e:2c:
d6:40:9a:8b:83:82:e9:25:d3:98:f6:8c:9c:b6:1d:6b:12:26:
28:d5:83:25:8a:8a:60:58:71:d5:0e:4e:3f:25:3f:b2:b2:0c:
32:0b:73:c8:94:24:64:5a:b0:58:02:de:6f:4b:90:13:99:9a:
ac:30:6a:d6:a4:da:8c:65:05:c6:f6:e3:5d:55:9e:9f:bb:33:
45:e6:61:66:59:05:53:af:76:bd:ba:f4:b2:8c:99:79:74:6e:
66:83:ee:86:43:30:a4:a3:33:94:bc:62:a9:71:19:94:ba:85:
50:d8:d0:26:8d:a5:95:0e:69:54:ff:59:52:b1:4f:45:81:07:
df:0f:eb:3f:d3:5d:41:b1:cd:c1:90:9d:3e:09:26:c3:3f:d6:
9d:4d:89:6b:1c:d9:d8:3f:17:ad:e3:fa:aa:50:10:b7:15:ec:
21:9b:ba:6d:eb:61:55:27:25:f7:f7:98:77:b7:da:05:b6:72:
90:c0:8d:c1:10:9a:1e:00:31:dc:20:c9:02:cb:e4:a3:ee:62:
b6:9b:0b:e2:43:cb:f8:b3:f2:ee:36:64:ae:92:4c:67:73:fa:
6f:0e:7c:20:05:1a:3d:ce:68:bd:60:50:0e:ed:ba:62:73:d4:
54:54:ff:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:00:23 2025 by rpki-client