Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/688D86D4CB4211EFA0808646C4F9AE02.roa
File: 688D86D4CB4211EFA0808646C4F9AE02.roa (raw, json)
Hash identifier: r+KI4IdYXwLUQ7X/lWNzcOBKbLgnObkl+TdI4zUuia8=
Subject key identifier: C3:C5:FB:68:3B:60:BB:C7:2D:6A:F8:62:B4:95:43:CF:E3:13:EB:FD
Certificate issuer: /CN=A91476E2/serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F
Certificate serial: 06
Authority key identifier: 6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/688D86D4CB4211EFA0808646C4F9AE02.roa
Signing time: Sun 05 Jan 2025 10:00:08 +0000
ROA not before: Sun 05 Jan 2025 10:00:08 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 140937
IP address blocks: 160.187.212.0/23 maxlen: 23
160.187.212.0/24 maxlen: 24
160.187.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Jan 2025 11:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91476E2/serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F
Validity
Not Before: Jan 5 10:00:08 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=677a5827-61af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:c3:6a:34:91:6e:50:2f:18:eb:9e:7d:4f:
a4:38:b3:50:de:e8:75:d8:b3:bd:16:48:81:ea:f9:
e2:9f:f3:12:e0:bd:66:c5:30:d4:4d:65:e2:dc:9d:
64:cf:75:fa:fb:a4:4c:49:d1:d5:87:c6:c0:8d:da:
fa:37:97:25:19:6d:63:8a:87:9c:c6:45:81:69:d5:
06:3a:14:a4:5c:da:bc:6d:41:f4:64:35:6c:3c:78:
3b:79:db:d5:db:bc:ec:a7:f6:8f:1a:8d:c1:44:65:
cc:5d:8a:30:7b:40:2d:4e:62:a0:55:fe:5a:43:31:
a5:1a:9d:b4:3c:53:a0:34:46:92:ba:4b:ba:ad:fa:
3c:72:cd:a5:3c:b8:0f:2f:6b:d4:eb:1a:a2:61:cf:
31:67:c3:04:88:4e:49:f5:6b:67:26:1c:b8:da:c2:
08:24:60:2e:08:e0:e5:14:84:b8:75:26:4f:d7:8f:
0d:41:6c:f1:62:b6:e6:49:c3:b5:6b:ce:d5:ef:6f:
c1:09:91:b0:85:94:bb:f0:8e:f6:6c:87:76:9d:22:
5a:58:f0:18:11:9f:e8:22:c6:77:40:e3:c6:59:28:
71:41:cc:04:d9:45:5d:31:34:6a:0b:60:0e:69:d3:
a5:e5:90:f8:1b:0e:6b:8f:de:dd:10:53:40:95:16:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C5:FB:68:3B:60:BB:C7:2D:6A:F8:62:B4:95:43:CF:E3:13:EB:FD
X509v3 Authority Key Identifier:
keyid:6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/688D86D4CB4211EFA0808646C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.212.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:29:7a:c6:dc:e6:e7:d2:2e:01:92:f1:b4:0f:52:0c:1b:c3:
d4:02:f6:6f:5b:55:14:fc:cd:62:18:42:83:6c:8f:58:56:5d:
73:f2:93:7c:83:e0:b3:e2:39:2e:26:e4:fa:71:aa:be:47:3a:
02:96:05:02:9e:49:03:f5:c1:6d:03:33:de:79:02:b8:c3:56:
fd:25:c9:15:68:80:ac:ba:19:5a:44:c6:45:6d:41:1a:32:19:
d7:e8:3a:e4:91:49:1d:cb:35:25:b2:56:f7:a9:f7:2d:d3:59:
9d:01:d1:d2:30:65:d1:23:31:e7:ce:18:99:1b:ee:d3:4c:e7:
d0:a0:62:fd:f5:49:ee:2f:9d:40:fc:99:30:da:af:77:66:4e:
bd:ae:34:26:f9:9e:d4:4a:d0:de:ab:f4:c1:3a:e0:29:9e:b3:
c9:14:30:fa:66:96:74:28:23:3b:f7:f7:4d:fd:df:99:ad:47:
57:1e:f8:4f:0b:9f:07:9a:a1:0f:ad:db:35:ba:ef:6b:c8:67:
1c:5e:11:b8:82:f3:a2:39:9a:72:46:b2:57:fc:de:c8:70:19:
25:63:6e:82:9a:54:8c:0a:3e:56:7e:65:b3:a4:6a:29:19:bc:
66:b9:e7:c6:10:1e:d6:63:91:da:bb:93:f5:69:9b:40:53:b3:
c3:91:92:f7
-----BEGIN CERTIFICATE-----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Generated at Sun Jan 5 13:24:21 2025 by rpki-client on console.sobornost.net