Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/6682CF0A699C11EFB18C5C0DC4F9AE02.roa
File: 6682CF0A699C11EFB18C5C0DC4F9AE02.roa (raw, json)
Hash identifier: 8Kr7GHUFf7lbaln4lICOc3JQmbTqqkPURN6pvwOmzi8=
Subject key identifier: 80:C1:D7:9E:27:1B:F2:EC:60:00:D5:B6:8B:D9:D1:67:9C:FD:48:63
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 026F
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/6682CF0A699C11EFB18C5C0DC4F9AE02.roa
Signing time: Tue 03 Sep 2024 02:29:53 +0000
ROA not before: Tue 03 Sep 2024 02:29:53 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 152985
IP address blocks: 160.30.192.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 07 Sep 2024 02:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Sep 3 02:29:53 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=66d674a0-12b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:44:b3:65:2b:97:f2:1d:a8:33:f8:30:f6:
16:32:f3:71:0b:e6:aa:3b:d5:6b:9a:35:ba:cd:8a:
bb:b6:70:be:c1:af:b7:f8:b9:7f:e5:ce:ae:21:ca:
24:a4:a3:e4:f3:4d:0c:f4:dc:72:ce:a2:4d:c4:a6:
e4:43:56:48:62:3c:c4:b6:75:5d:33:9c:3f:4e:8f:
0a:9d:1a:82:c4:53:73:fd:00:57:e4:62:2c:24:6e:
12:5d:3d:9b:3b:fd:0f:8f:80:db:df:7e:ec:9e:58:
ba:d0:9f:e4:a4:d2:d3:01:21:af:18:eb:2a:32:b6:
72:6d:12:9a:2d:37:70:8b:cb:26:e7:44:35:e6:8b:
42:be:21:ed:61:24:82:43:65:7b:7f:c3:10:ca:8a:
8e:e1:4e:a4:d8:13:e8:c2:20:3d:d1:40:90:d8:ac:
37:9b:ca:9a:63:a8:1c:ae:24:d0:1d:31:b7:af:c9:
ce:0e:3e:81:f6:21:78:47:ca:a8:c5:fc:e8:ba:cd:
a0:51:e1:11:00:35:7f:5b:a5:49:66:df:29:54:04:
86:b2:94:ba:43:03:62:cf:26:2b:a7:72:3d:18:9f:
77:f0:e5:29:86:85:6f:5f:6e:98:80:fe:a4:4a:17:
2e:43:31:fb:ba:dc:35:37:bb:98:bf:b0:e9:ec:15:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C1:D7:9E:27:1B:F2:EC:60:00:D5:B6:8B:D9:D1:67:9C:FD:48:63
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/6682CF0A699C11EFB18C5C0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.192.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:de:5c:08:c9:45:20:af:e9:38:b6:f5:86:a8:43:53:d9:32:
39:1f:a9:5b:0c:99:4a:2b:78:68:8a:04:d6:a0:39:3e:5a:45:
7d:17:25:ca:ec:65:a1:3e:18:cc:34:0a:c3:3c:1e:68:14:60:
d2:97:4a:de:63:05:f2:c6:65:15:cd:19:74:b6:d4:30:8c:4d:
0a:04:3d:8e:aa:66:0c:33:ee:63:b6:03:7b:a1:62:42:69:ba:
b7:65:d3:ef:84:2d:8d:68:ba:50:a0:ed:01:ee:a4:ed:2f:88:
61:4c:eb:9b:e2:c5:26:48:24:40:bf:ae:16:ce:f8:0f:c5:4d:
1f:ce:f1:84:cf:e3:a8:9f:33:39:28:70:9c:14:33:4d:02:00:
1d:df:66:d2:24:e3:ce:4b:a7:26:a6:cc:74:db:01:6b:ab:d6:
8e:00:d2:7b:04:07:43:3a:6e:56:1a:2f:12:08:c4:c2:3d:40:
7d:59:4c:1d:46:9e:d5:5f:50:70:ca:a9:09:cc:a8:90:11:4a:
47:78:2d:65:57:93:35:3e:03:06:54:fa:e3:62:5a:68:b1:d8:
a4:53:f7:68:7f:ee:1c:36:a7:c5:a7:ce:b3:32:30:6b:47:31:
57:4c:e9:be:38:69:1c:0c:a9:10:a1:6b:3b:97:b5:fc:80:08:
2e:8f:bc:c9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjQwOTAzMDIyOTUzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ2NzRhMC0xMmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv4xEs2Url/IdqDP4MPYWMvNxC+aqO9VrmjW6zYq7tnC+wa+3+Ll/5c6uIcok
pKPk800M9NxyzqJNxKbkQ1ZIYjzEtnVdM5w/To8KnRqCxFNz/QBX5GIsJG4SXT2b
O/0Pj4Db337snli60J/kpNLTASGvGOsqMrZybRKaLTdwi8sm50Q15otCviHtYSSC
Q2V7f8MQyoqO4U6k2BPowiA90UCQ2Kw3m8qaY6gcriTQHTG3r8nODj6B9iF4R8qo
xfzous2gUeERADV/W6VJZt8pVASGspS6QwNizyYrp3I9GJ938OUphoVvX26YgP6k
ShcuQzH7utw1N7uYv7Dp7BXhKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIDB154n
G/LsYADVtovZ0Wec/UhjMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNjY4MkNGMEE2
OTlDMTFFRkIxOEM1QzBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGgHsAwDQYJKoZIhvcNAQELBQADggEBABreXAjJRSCv6Ti2
9YaoQ1PZMjkfqVsMmUoreGiKBNagOT5aRX0XJcrsZaE+GMw0CsM8HmgUYNKXSt5j
BfLGZRXNGXS21DCMTQoEPY6qZgwz7mO2A3uhYkJpurdl0++ELY1oulCg7QHupO0v
iGFM65vixSZIJEC/rhbO+A/FTR/O8YTP46ifMzkocJwUM00CAB3fZtIk485Lpyam
zHTbAWur1o4A0nsEB0M6blYaLxIIxMI9QH1ZTB1GntVfUHDKqQnMqJARSkd4LWVX
kzU+AwZU+uNiWmix2KRT92h/7hw2p8WnzrMyMGtHMVdM6b44aRwMqRChazuXtfyA
CC6PvMk=
-----END CERTIFICATE-----
Generated at Wed Sep 11 08:32:28 2024 by rpki-client on console.sobornost.net