Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9EE1F954DC9011EF8DD9CD58C4F9AE02.roa
File: 9EE1F954DC9011EF8DD9CD58C4F9AE02.roa (raw, json)
Hash identifier: DtKc59fm0Unawa65sv0elqSQx1YZAXKRlPKmccroGy8=
Subject key identifier: 8C:82:C9:A5:74:1B:51:F1:A6:66:4D:10:63:60:73:C6:9A:57:D3:86
Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
Certificate serial: 17
Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9EE1F954DC9011EF8DD9CD58C4F9AE02.roa
Signing time: Mon 27 Jan 2025 09:25:17 +0000
ROA not before: Mon 27 Jan 2025 09:25:17 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 211358
IP address blocks: 2401:e920:8000::/33 maxlen: 33
Validation: Failed, certificate revoked on Mon 27 Jan 2025 10:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685E9
Validity
Not Before: Jan 27 09:25:17 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=679750fd-700f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:ee:6f:01:c6:cb:85:3d:3a:1e:6b:2c:89:
17:8b:db:b7:c7:18:e0:f3:88:78:57:69:4e:1b:99:
57:35:bc:fe:b5:71:65:27:9e:c1:2c:38:82:7e:74:
1f:2c:65:40:a0:ca:35:f3:bf:9a:da:99:ae:74:1e:
88:44:7e:00:8f:e7:cc:76:b6:90:47:ff:31:d7:15:
76:67:61:38:7c:63:c1:28:42:2b:b6:71:d1:dc:5c:
f2:a9:c6:f9:ce:21:45:2e:64:96:e9:73:d6:71:da:
25:4f:a2:04:28:fa:99:6d:2a:20:67:d4:ce:39:74:
db:d7:f5:f8:1e:c9:47:91:78:b2:47:1b:82:21:ae:
8b:6b:7f:bb:8a:2e:1a:78:56:06:a8:ff:bd:5a:c9:
12:bb:79:4b:70:f1:39:19:b2:0e:43:54:53:18:e6:
ea:09:05:10:10:9f:33:f3:25:c7:54:57:49:94:61:
b7:99:51:ab:7b:01:d2:d5:ba:e9:6f:aa:d3:6f:e3:
9c:c6:21:14:0e:17:92:0c:01:6a:9f:72:ad:a6:59:
f0:94:b5:05:a9:c2:d4:ab:77:96:c3:ec:d3:26:6d:
99:65:ad:16:ab:02:3a:b2:aa:3a:8e:22:e2:a8:7b:
7e:a5:ad:3a:f7:b4:39:90:b8:f9:65:4e:bb:20:38:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:82:C9:A5:74:1B:51:F1:A6:66:4D:10:63:60:73:C6:9A:57:D3:86
X509v3 Authority Key Identifier:
keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9EE1F954DC9011EF8DD9CD58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:e920:8000::/33
Signature Algorithm: sha256WithRSAEncryption
56:99:90:b2:a1:8e:ca:d5:a5:fd:37:f9:c9:c9:20:d6:0e:f6:
d0:95:d6:c8:62:ee:b2:97:24:1a:00:9e:81:4d:fe:7c:5c:55:
d0:b4:14:28:64:17:4c:2b:3b:52:73:2a:de:64:57:67:5d:19:
4d:e7:94:8f:81:38:b4:d5:df:fd:b8:f1:8a:b0:77:ae:8c:74:
7c:4c:a9:6b:28:d0:ec:8f:db:94:dc:25:7f:96:82:df:4c:12:
6e:52:e2:91:7d:b4:be:e2:0d:dc:1e:26:1e:eb:fd:c1:82:39:
3e:f2:5b:8d:45:53:5c:9a:de:2b:74:33:82:9c:4e:4b:49:af:
b7:8d:3f:d6:c6:88:82:8d:30:cd:a1:6a:79:61:5c:bb:0d:f3:
db:df:a9:7c:48:46:eb:83:30:e2:33:01:4c:9b:eb:4e:db:c5:
26:85:14:ad:ae:26:d0:e5:55:2e:75:07:22:98:e0:45:fc:d5:
5b:f0:3a:cf:dd:de:2b:ad:4e:e0:18:ea:66:d2:1d:71:23:27:
98:b5:34:da:c1:f2:51:b4:61:da:46:3a:88:0b:61:2b:90:8e:
32:67:c8:6b:4b:f1:61:b2:fe:c3:c7:f0:23:76:77:de:48:9b:
50:a5:7c:c5:f8:8a:80:4a:7b:f1:fc:c1:59:30:71:79:51:cf:
2b:4a:b1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:57:26 2025 by rpki-client