Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/FEFB8698666C11EE99E97C1CC4F9AE02.roa
File: FEFB8698666C11EE99E97C1CC4F9AE02.roa (raw, json)
Hash identifier: UAvl+G1n+kEd+dpWE6XPMCjrmO+oeTk9sfS/tBRXNxQ=
Subject key identifier: 91:7C:0B:79:44:50:6E:B2:EB:F1:58:C7:E3:C4:AE:0A:A3:DC:F6:50
Certificate issuer: /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
Certificate serial: 0191
Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/FEFB8698666C11EE99E97C1CC4F9AE02.roa
Signing time: Mon 23 Dec 2024 02:17:50 +0000
ROA not before: Mon 23 Dec 2024 02:17:50 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 150180
IP address blocks: 2001:df1:9540::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 08 Mar 2025 15:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
Validity
Not Before: Dec 23 02:17:50 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6768c84e-ffb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:99:35:29:b3:06:b2:d5:f4:17:24:d0:8c:
51:ab:e1:bf:ac:b4:50:ea:6f:e9:05:59:8d:a6:cd:
45:c4:3d:ae:52:73:35:9c:42:dd:0b:27:be:99:ad:
0a:d4:38:ab:12:26:81:f9:43:10:a0:1b:a9:f7:ee:
d1:5a:f8:42:d7:78:c0:4d:c9:4d:a3:23:92:fb:12:
3b:1e:0d:d9:23:4e:68:45:d2:58:33:06:86:6b:14:
e0:5c:fb:92:e9:ad:d8:ea:3c:a3:42:41:fe:77:75:
fd:d8:cf:c1:f9:5b:46:34:08:b7:31:13:55:d4:70:
31:43:21:cd:b4:58:79:1c:b2:d3:7d:e3:0c:99:3e:
99:f6:2c:54:a9:b7:b9:53:18:e0:60:37:08:4e:84:
54:8e:f5:c1:73:fc:86:7b:cf:46:a5:16:7a:40:ee:
6c:41:01:b2:93:a1:6d:1e:19:b7:cf:7c:63:fd:7d:
4a:70:bb:df:b6:8f:85:89:70:af:74:a9:0f:ef:81:
1b:9a:c8:f0:ca:e3:0e:e9:ed:c9:05:67:4b:50:23:
57:9a:ad:52:a6:4a:d2:3f:86:17:09:76:d2:77:62:
c7:6a:27:2e:30:d2:36:bc:68:a4:e8:90:73:a2:f2:
58:f3:dc:c5:b7:a5:90:5f:9e:55:63:8e:86:bc:52:
1c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7C:0B:79:44:50:6E:B2:EB:F1:58:C7:E3:C4:AE:0A:A3:DC:F6:50
X509v3 Authority Key Identifier:
keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/FEFB8698666C11EE99E97C1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:9540::/48
Signature Algorithm: sha256WithRSAEncryption
5b:b6:20:35:cc:79:6e:39:db:74:86:34:94:69:cd:67:45:a1:
d5:88:53:92:b0:ac:4c:36:a4:f7:66:b1:35:22:96:50:85:f1:
17:f7:e1:17:b0:72:73:f8:41:77:30:8a:21:dd:9d:a8:76:91:
b8:22:39:66:8b:d2:a9:60:0f:6b:b9:e9:29:00:cd:4f:85:71:
0d:d7:86:9a:18:19:19:b4:bd:c1:57:71:b9:02:63:0e:a2:d6:
1a:02:8e:4f:de:28:0a:37:4e:17:ba:9b:96:fa:c1:c3:17:a6:
28:50:0f:f5:bd:a1:ee:a1:d7:37:c2:2b:99:93:8e:b0:3e:06:
88:ee:39:15:de:a7:f7:58:e8:6c:9c:e0:db:d6:c6:a4:81:ef:
80:9e:91:1a:af:e4:58:28:e0:a8:bd:27:4b:0a:e0:5a:19:70:
25:46:d4:aa:5b:74:c8:4c:0b:98:ea:fa:4c:1e:9d:d7:fd:89:
4c:e9:38:98:b0:16:35:10:58:4b:dd:02:3c:83:0a:58:b5:25:
29:f4:3e:b7:67:f7:3a:73:52:a7:8a:04:68:21:21:a5:60:50:
d2:b6:15:b8:4b:2d:2b:2b:24:82:50:36:39:47:ac:64:82:4a:
dc:3a:f0:f4:1f:e4:34:8f:7a:70:61:04:b5:f5:68:d1:b0:70:
cd:fc:97:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:35:55 2025 by rpki-client