Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/506CA7ACC8E911EFB3652D2BC4F9AE02.roa
File: 506CA7ACC8E911EFB3652D2BC4F9AE02.roa (raw, json)
Hash identifier: UAYmTHhr6w42YJmO9WBmk4jfWAcHk48/qIr8BYwFh8M=
Subject key identifier: B4:4E:3D:72:B2:46:76:2D:81:97:2E:D8:D5:B4:14:4C:90:BD:74:8E
Certificate issuer: /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Certificate serial: 58
Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/506CA7ACC8E911EFB3652D2BC4F9AE02.roa
Signing time: Thu 02 Jan 2025 09:09:47 +0000
ROA not before: Thu 02 Jan 2025 09:09:47 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 139809
IP address blocks: 160.30.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Feb 2025 10:05:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F64, serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Validity
Not Before: Jan 2 09:09:47 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=677657db-a2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:70:23:b7:5e:c4:cb:12:f0:9a:5d:7b:50:
2f:f2:bb:47:dd:16:14:eb:d2:41:b2:77:1f:f2:24:
a1:35:81:9f:25:92:b2:8b:66:13:43:3f:38:47:9a:
99:8d:b8:0d:43:36:5c:85:8d:1e:cf:b1:34:c6:d3:
3b:c6:94:3a:c2:9d:2a:aa:5b:fb:02:63:7a:69:f5:
be:ac:65:55:c2:2e:0b:c8:05:07:86:78:5c:87:0f:
1a:96:25:f4:91:85:76:e2:ce:1c:d7:10:4a:31:52:
09:55:24:8a:d0:b2:60:a7:2b:62:2b:2f:a6:5b:f3:
b6:2f:d7:73:03:b5:6b:24:1f:6a:af:8d:1f:3e:72:
a7:3e:66:dc:b5:2c:1a:0c:9b:9f:a1:a8:67:fa:43:
fa:bc:04:ec:fd:c7:4f:1a:5d:2a:f8:f5:fa:b3:eb:
8f:f7:93:2f:e6:32:5f:ea:67:47:6a:d1:40:4e:9e:
39:b7:17:07:d6:77:6f:cb:d7:c2:fa:4e:ac:84:ee:
01:2e:df:65:b0:90:a5:b0:71:7a:ab:63:1c:c2:81:
65:9d:72:d1:d3:19:a8:8d:1a:7b:e8:84:56:a8:e0:
73:44:9d:41:d9:7d:70:f9:8f:38:65:56:98:97:a7:
a3:47:0f:7a:2b:d3:d7:f5:97:a7:54:d8:02:f9:c3:
ce:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4E:3D:72:B2:46:76:2D:81:97:2E:D8:D5:B4:14:4C:90:BD:74:8E
X509v3 Authority Key Identifier:
keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/506CA7ACC8E911EFB3652D2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.178.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:f2:16:78:0a:e1:71:33:68:3f:34:36:e3:fd:00:96:a9:cc:
19:72:38:70:9c:49:d1:04:9c:7c:55:4f:21:cc:65:c3:c6:11:
af:e7:0b:74:b5:4e:26:8d:78:1d:e5:af:83:ac:52:d4:de:ee:
25:22:82:6e:e5:a4:14:b3:b2:6b:19:b0:3d:d7:49:0b:2f:b5:
ae:2e:63:56:75:b7:e3:fc:dd:ae:c2:dc:79:94:21:73:66:11:
3e:ed:cb:fd:db:33:53:d2:f5:0e:f9:c6:c2:b8:7d:25:57:01:
bb:82:35:ff:98:98:03:97:c0:47:7d:a9:31:db:b7:d5:47:11:
58:0b:4e:97:b5:82:d7:62:2a:58:56:80:7c:3d:4e:2f:6e:b2:
6a:c6:f7:76:fd:99:c4:ee:2a:dd:3a:53:87:7b:1c:47:cb:97:
33:e6:38:15:7f:24:8d:b6:e0:37:d3:0a:d0:25:80:49:2e:59:
2e:c3:62:97:a2:9c:91:1f:d7:80:89:0b:df:a7:8a:6d:5d:02:
72:d7:9a:85:ef:34:6a:22:19:77:cf:fb:3f:fb:4c:52:70:28:
d1:cf:bb:4f:34:d1:c6:73:c4:60:3f:80:8e:7f:b8:17:3e:76:
27:d8:f1:b1:9e:1a:12:75:93:ba:f8:d7:a3:b8:ba:be:ef:b9:
ef:cd:d5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:39:36 2025 by rpki-client