Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/1C20D982870311EFA1361E12C4F9AE02.roa
File: 1C20D982870311EFA1361E12C4F9AE02.roa (raw, json)
Hash identifier: ziq6EoIeH4wj0yGJuGGO9ICc9rSjeRcvxO+V2RTBeLk=
Subject key identifier: 44:71:74:58:E6:0A:80:82:12:AE:3C:ED:A5:91:83:A3:7A:1E:32:07
Certificate issuer: /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Certificate serial: 0E
Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/1C20D982870311EFA1361E12C4F9AE02.roa
Signing time: Thu 10 Oct 2024 12:28:10 +0000
ROA not before: Thu 10 Oct 2024 12:28:10 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 153362
IP address blocks: 160.187.238.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 10 Oct 2024 12:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Validity
Not Before: Oct 10 12:28:10 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6707c85a-c5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bc:2b:5f:da:31:69:c7:49:59:0c:47:2e:6b:
df:fd:e1:37:65:3d:dd:0f:e7:6b:a6:1a:a2:d9:d9:
ad:1b:08:e8:5b:4b:d0:21:87:6b:2a:95:33:fb:49:
f8:ca:f2:17:c6:8b:0a:a7:be:af:98:2b:ad:6b:7c:
8e:02:0d:53:9f:b5:9d:71:b8:9d:42:12:fd:b4:6c:
ec:e7:5a:94:4f:a1:a3:df:03:44:ba:36:a4:a8:dc:
60:7e:da:2e:e8:b6:34:56:6d:3a:85:4b:d0:bd:e6:
f6:89:2e:5a:5a:23:65:4d:66:6f:4c:e9:75:c7:23:
91:0a:36:13:f7:5d:37:7e:1d:f8:8a:e5:30:f5:fc:
f6:d8:e7:c4:66:65:95:da:cc:a5:ab:52:77:9b:0d:
a0:a9:ae:67:f6:72:f9:79:b9:7d:d2:5e:76:a2:00:
87:8b:85:83:0e:1c:72:eb:ca:26:ac:f7:55:90:ce:
85:2a:b4:5f:95:fe:f1:00:2e:5c:6b:c3:1d:ed:c9:
b2:a6:6a:a4:94:04:fe:c0:ef:2c:4d:b4:ad:6b:e0:
a2:b7:0a:e7:0f:e8:9f:64:65:16:aa:06:c2:7d:f8:
82:86:03:21:1e:21:ca:81:13:0d:57:09:44:d3:88:
c4:03:e0:69:91:31:b8:b3:03:48:6a:1d:cf:33:cf:
17:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:71:74:58:E6:0A:80:82:12:AE:3C:ED:A5:91:83:A3:7A:1E:32:07
X509v3 Authority Key Identifier:
keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/1C20D982870311EFA1361E12C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.238.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:ec:e6:66:04:f0:70:9b:b4:b1:65:8f:29:2c:e8:80:2b:b2:
f0:45:7d:ee:d6:07:c7:15:da:e7:93:cb:4e:83:1c:f3:6f:f2:
71:9c:4f:6c:46:07:b6:11:e8:cb:1a:9c:c7:c0:c5:51:5a:19:
c5:43:82:cc:bf:c7:8a:49:a4:0d:f1:06:e5:6b:25:a2:7f:91:
29:22:47:8a:7a:65:0b:5b:ed:64:b5:68:50:04:a0:f8:d5:59:
ce:e2:f4:22:a5:9f:a8:33:35:ee:2f:ce:72:e4:a3:8b:e6:45:
26:9e:a9:b6:38:28:59:d9:db:db:cd:db:c2:1b:8e:56:4e:71:
7d:ba:58:78:fc:ed:8d:89:f3:51:67:f6:30:e2:22:0e:17:77:
c7:43:9e:12:87:31:19:c3:0a:02:56:d2:b9:ff:bf:63:a0:66:
e4:f7:1c:06:9b:c0:f8:90:ac:de:cb:ff:c8:11:a0:8b:e2:6a:
f0:7c:03:69:3b:28:cb:45:e0:c0:5c:fb:47:98:11:ef:a8:9a:
eb:09:37:a2:a5:f4:eb:b5:52:56:5c:18:ad:2a:e8:9d:4d:e9:
3a:27:1c:59:b2:79:b6:87:45:dc:e3:85:97:10:ae:06:c6:0c:
a0:d0:a3:2b:ca:53:64:1b:fb:ca:35:18:53:d0:7d:b8:d8:81:
a7:dc:38:6a
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MTIwQTExMC8GA1UEBRMoNkMyQzdDMTQyODlFNkJCNUI3Mjc1QjFBQTZCRkRGQTAy
MjdCOTA4NjAeFw0yNDEwMTAxMjI4MTBaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3MDdjODVhLWM1YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfvCtf2jFpx0lZDEcua9/94TdlPd0P52umGqLZ2a0bCOhbS9Ahh2sqlTP7SfjK
8hfGiwqnvq+YK61rfI4CDVOftZ1xuJ1CEv20bOznWpRPoaPfA0S6NqSo3GB+2i7o
tjRWbTqFS9C95vaJLlpaI2VNZm9M6XXHI5EKNhP3XTd+HfiK5TD1/PbY58RmZZXa
zKWrUnebDaCprmf2cvl5uX3SXnaiAIeLhYMOHHLryias91WQzoUqtF+V/vEALlxr
wx3tybKmaqSUBP7A7yxNtK1r4KK3CucP6J9kZRaqBsJ9+IKGAyEeIcqBEw1XCUTT
iMQD4GmRMbizA0hqHc8zzxcpAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQURHF0WOYK
gIISrjztpZGDo3oeMgcwHwYDVR0jBBgwFoAUbCx8FCiea7W3J1sapr/foCJ7kIYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMjBBL0RBRjgxQzQ0ODZG
OTExRUZCMDk2NTEwQ0M0RjlBRTAyL2JDeDhGQ2llYTdXM0oxc2Fwcl9mb0NKN2tJ
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvYkN4OEZDaWVhN1czSjFzYXByX2ZvQ0o3a0lZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTIwQS9EQUY4MUM0NDg2RjkxMUVGQjA5NjUxMENDNEY5QUUwMi8xQzIwRDk4Mjg3
MDMxMUVGQTEzNjFFMTJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaC77jANBgkqhkiG9w0BAQsFAAOCAQEAfuzmZgTwcJu0sWWP
KSzogCuy8EV97tYHxxXa55PLToMc82/ycZxPbEYHthHoyxqcx8DFUVoZxUOCzL/H
ikmkDfEG5Wslon+RKSJHinplC1vtZLVoUASg+NVZzuL0IqWfqDM17i/OcuSji+ZF
Jp6ptjgoWdnb283bwhuOVk5xfbpYePztjYnzUWf2MOIiDhd3x0OeEocxGcMKAlbS
uf+/Y6Bm5PccBpvA+JCs3sv/yBGgi+Jq8HwDaTsoy0XgwFz7R5gR76ia6wk3oqX0
67VSVlwYrSronU3pOiccWbJ5todF3OOFlxCuBsYMoNCjK8pTZBv7yjUYU9B9uNiB
p9w4ag==
-----END CERTIFICATE-----
Generated at Thu Oct 10 15:37:33 2024 by rpki-client on console.sobornost.net