Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/5BDA0522116E11EFB1682065C4F9AE02.roa
File: 5BDA0522116E11EFB1682065C4F9AE02.roa (raw, json)
Hash identifier: jVftEvJyCTXpLt09GdlYVKbFZbf+cAMzl4mJ9bwfzFs=
Subject key identifier: B1:32:60:FE:91:1F:07:64:FA:06:B6:DE:86:ED:26:23:1E:20:8D:74
Certificate issuer: /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial: 0299
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/5BDA0522116E11EFB1682065C4F9AE02.roa
Signing time: Thu 01 Aug 2024 03:04:39 +0000
ROA not before: Thu 01 Aug 2024 03:04:39 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 149836
IP address blocks: 2001:df0:c240::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 30 Aug 2024 19:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665 (0x299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Validity
Not Before: Aug 1 03:04:39 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=66aafb47-5564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:e5:62:dd:09:53:e2:d8:42:0f:d8:42:db:
01:ef:bf:af:7c:58:58:73:03:c4:af:60:ac:41:09:
20:64:b6:61:de:d0:30:ae:20:19:73:9d:67:11:3e:
9d:01:e2:0e:e5:1e:1a:b8:b3:96:8b:d8:75:7e:5b:
ed:a9:08:09:63:4a:7e:8d:e0:ff:c8:47:34:b6:57:
bd:a3:a1:b1:6b:4d:7d:64:a2:78:9f:34:68:82:8d:
34:51:3f:99:33:86:e2:c3:15:91:a9:57:1d:2c:72:
ee:ce:23:98:a0:ec:5a:61:ad:47:09:04:a6:c8:d3:
34:28:d3:c7:a6:2a:6c:d3:80:a3:53:44:7c:ce:6f:
b4:90:fd:5b:fa:a1:e5:b9:8c:fc:63:fc:5d:eb:fc:
ac:01:4c:0c:ae:2e:9e:ff:68:ea:79:15:6e:aa:85:
a3:4e:70:21:c7:7f:5b:cc:5c:9c:2b:18:3a:e2:fd:
19:ef:f1:41:1d:f3:fc:27:9b:25:b4:94:37:18:72:
32:0a:02:c6:66:ff:5c:d6:f5:e6:f8:82:98:03:ca:
c9:85:59:a3:e8:e8:3b:02:df:7f:9e:11:3d:2b:38:
9f:69:13:4f:87:5a:ec:0a:cc:e2:7f:3f:d6:6e:c0:
f7:bb:c8:fd:37:a0:ae:73:02:d4:d0:09:b3:8e:19:
ba:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:32:60:FE:91:1F:07:64:FA:06:B6:DE:86:ED:26:23:1E:20:8D:74
X509v3 Authority Key Identifier:
keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/5BDA0522116E11EFB1682065C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:c240::/48
Signature Algorithm: sha256WithRSAEncryption
96:ad:64:3b:4a:4e:bd:0c:87:47:1d:77:87:4f:ef:b9:58:8e:
3b:78:4f:a9:87:83:fa:59:72:99:a3:f4:c2:85:d5:67:00:05:
97:4d:e2:b6:48:df:cd:d2:b4:1a:df:bd:17:93:da:ca:7f:9b:
8e:6f:ac:37:89:c6:45:2c:10:54:72:bf:e4:16:f4:52:a9:71:
15:2e:24:46:3c:f2:88:11:ef:9a:bb:f2:99:1a:d8:57:13:ef:
fe:fd:4c:cf:b0:d7:88:1f:e5:ed:55:d8:9b:52:39:78:f9:7c:
20:bc:a3:65:89:d1:d5:7d:46:12:3f:16:df:6d:de:8b:ba:81:
5a:92:10:18:78:54:10:d8:05:e5:63:f0:e1:27:71:db:2f:da:
08:ad:8a:1b:7b:2c:f6:c7:8c:ec:a9:98:90:aa:4f:f4:f2:13:
89:49:6b:fa:3c:76:de:da:98:80:a3:c1:8a:03:5a:dc:d5:90:
dd:98:ca:d5:4c:17:d6:6f:bf:76:6e:13:45:24:5d:f5:87:48:
01:0d:47:48:56:9f:25:7f:36:1c:19:a2:96:45:ba:21:10:38:
d6:e3:84:51:a5:88:a8:7f:7f:bb:97:c3:3c:6a:c4:f9:5c:99:
cc:8a:7b:13:b6:74:88:da:18:92:bf:f2:a4:d6:62:fc:a8:31:
f5:52:78:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 21:41:55 2024 by rpki-client on console-ams.rpki-client.org