Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/41630D6AF1CE11EFB092FE53C4F9AE02.roa
File: 41630D6AF1CE11EFB092FE53C4F9AE02.roa (raw, json)
Hash identifier: 65WhwP4QMwQrO0GODafKTgoLCK4IeRVJTTnR1Jj1rAU=
Subject key identifier: 3A:F4:E2:E0:2E:E8:19:A7:BB:C2:5C:58:76:DC:84:D8:A2:8E:D1:87
Certificate issuer: /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Certificate serial: 77
Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/41630D6AF1CE11EFB092FE53C4F9AE02.roa
Signing time: Sun 23 Feb 2025 10:09:24 +0000
ROA not before: Sun 23 Feb 2025 10:09:24 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 140288
IP address blocks: 160.30.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Mar 2025 10:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F64, serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Validity
Not Before: Feb 23 10:09:24 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67baf3d3-db77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:4e:60:1a:94:02:6b:6d:29:c6:8e:2a:7f:
06:c4:41:ff:70:99:48:eb:f5:9e:b4:c9:1e:06:3e:
0b:9b:76:73:5b:b5:88:8f:e3:68:fa:de:20:8f:51:
3e:15:fc:16:ee:e3:c3:06:87:17:8b:24:53:8a:cf:
ba:e7:31:96:f6:e3:53:b0:8a:ce:bc:e0:c0:c0:41:
9a:9a:dd:79:98:c8:8e:89:a1:b0:70:0d:7d:bd:32:
83:9e:1c:54:0b:5d:59:f8:9f:01:e0:55:4b:bc:b2:
03:18:f7:2f:fd:33:45:09:52:01:44:a3:3e:f0:cc:
e1:cc:f7:97:d9:c5:6a:b0:5e:6a:84:05:64:5e:c8:
e9:e1:cd:e9:87:ff:b9:22:c2:85:44:3e:72:59:0d:
9c:3d:f8:2b:5f:67:6e:25:81:9b:eb:18:db:92:71:
5c:c3:76:74:bf:50:f0:ba:ea:ec:91:de:93:5e:47:
86:ed:44:cd:ab:9c:c7:8d:66:89:7d:41:f7:c9:58:
00:32:1c:6a:53:8b:ff:92:6f:a4:68:68:3a:b4:b9:
07:06:c2:84:5b:9e:7e:c2:46:92:fd:82:90:aa:f9:
93:7a:6a:be:ea:17:56:28:fb:f7:9b:cc:86:38:ab:
2b:bc:1f:5d:c3:27:a5:a5:1d:e1:1e:1c:b9:ef:49:
46:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F4:E2:E0:2E:E8:19:A7:BB:C2:5C:58:76:DC:84:D8:A2:8E:D1:87
X509v3 Authority Key Identifier:
keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/41630D6AF1CE11EFB092FE53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.178.0/24
Signature Algorithm: sha256WithRSAEncryption
47:f0:5b:d6:32:c8:59:b2:93:c3:6c:3d:2c:d0:63:d0:77:79:
fe:ae:12:4e:5b:04:b9:0b:f5:57:00:f4:79:e9:3c:45:ff:6d:
90:2d:55:90:2e:a9:e7:a3:7c:36:4d:01:e8:e1:20:9f:cb:88:
80:2e:68:59:52:03:26:e2:1d:1c:3d:af:4b:ea:31:a1:3f:d5:
de:39:54:5a:4e:4e:d7:1f:a8:9c:f0:8d:fe:6d:76:88:cc:f5:
23:83:96:c5:13:93:13:55:16:f6:79:d0:a9:f0:47:71:35:2e:
90:3c:0d:9d:70:f2:92:16:74:19:39:5a:53:4b:80:c0:5b:59:
ad:d1:91:c4:5c:df:55:21:d8:cb:c2:aa:76:1d:45:48:e1:f8:
12:6e:9a:cc:e0:75:16:a8:5a:82:cd:b6:c9:7a:37:14:bf:ab:
49:b2:83:78:72:23:2f:19:38:4b:e1:ce:c9:e7:be:7b:9e:48:
81:80:9c:b6:5c:b9:af:33:bf:24:3b:7f:2f:cc:2e:ef:ed:91:
8c:b9:be:fe:93:d7:59:1c:78:ef:91:09:e2:b5:f4:17:07:8b:
0a:6b:2a:6f:e8:de:d5:d8:53:78:3f:1d:23:62:01:5a:d0:e9:
32:dc:e3:73:29:ba:7d:30:34:4c:20:5c:b9:56:52:76:cb:0b:
6d:f1:b8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:28:52 2025 by rpki-client