Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CD87D800461E11EEA3CBEE4AC4F9AE02.roa
File: CD87D800461E11EEA3CBEE4AC4F9AE02.roa (raw, json)
Hash identifier: 8gzoJlUwfhh/vyXwL1wWQxssB2hXIYDyvmc7QrtLDx4=
Subject key identifier: FE:28:50:45:5F:0E:76:57:F4:17:02:40:A2:CE:CC:78:20:8B:DA:47
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0C86
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CD87D800461E11EEA3CBEE4AC4F9AE02.roa
Signing time: Sun 26 May 2024 21:32:19 +0000
ROA not before: Sun 26 May 2024 21:32:19 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 151782
IP address blocks: 2406:840:fe60::/48 maxlen: 48
2406:840:fedd::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Mar 2025 14:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3206 (0xc86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C
Validity
Not Before: May 26 21:32:19 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6653aa63-f352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:14:2e:fa:f0:ef:ad:aa:3a:31:32:5b:06:
88:62:0a:18:e8:2b:a6:d4:ba:79:c4:57:1d:63:80:
60:8e:4a:e5:69:9d:4c:c4:7e:e6:75:68:3d:c5:59:
0d:62:97:5a:94:87:28:52:da:fa:b7:91:d4:4c:19:
2e:7c:36:d8:da:af:da:23:e8:40:77:da:90:5d:c2:
3f:68:d8:e5:ca:39:ad:99:3e:5d:9f:14:2d:18:1e:
62:27:d8:6d:e9:7e:a6:3c:69:c6:f5:86:37:56:b7:
b1:04:31:ce:6e:7c:78:cb:86:cd:ba:e0:32:fe:d2:
39:f0:ba:23:a4:2a:15:57:5a:93:b4:86:48:4d:cf:
24:62:19:85:32:d8:ff:f4:c1:7a:57:3f:eb:26:c7:
ea:bb:6a:e5:75:10:18:bd:20:6e:1f:c3:ba:43:9f:
3a:29:0c:59:3e:71:aa:8a:41:e3:6d:6a:d7:fd:1f:
f9:ef:b6:a8:01:6f:36:95:12:af:66:8f:fc:78:4a:
ce:b8:48:c9:36:e5:92:4c:ab:a1:38:45:64:a2:b9:
04:28:74:c5:a7:31:6f:16:f1:1a:69:0e:09:71:d5:
93:85:de:e8:6a:88:7f:16:13:4e:42:e5:c9:ba:af:
6e:c6:1a:1d:91:04:90:e8:52:4b:e0:ee:f1:12:1b:
c5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:28:50:45:5F:0E:76:57:F4:17:02:40:A2:CE:CC:78:20:8B:DA:47
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CD87D800461E11EEA3CBEE4AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fe60::/48
2406:840:fedd::/48
Signature Algorithm: sha256WithRSAEncryption
68:66:68:d3:f2:89:1e:dd:0b:bb:da:de:48:f1:ac:7d:96:49:
cd:20:b4:dc:25:97:1c:e7:07:aa:67:84:91:3b:8a:19:4a:45:
13:88:c6:9a:af:9b:57:c1:40:68:d3:32:7c:8c:8b:eb:65:b9:
15:e5:47:99:38:a7:f8:e3:4f:68:8c:41:99:4a:41:42:d4:2f:
e8:14:3b:1b:12:80:d3:be:2a:da:2a:20:22:91:e1:d8:e4:c7:
dc:e9:62:6b:ce:8d:9a:f8:d6:7e:9f:b1:b5:c0:5b:e2:6a:f6:
5b:31:15:8c:b4:6c:e4:03:2f:79:f8:af:e8:6e:57:2d:31:ac:
67:ea:b6:8d:a9:49:bd:f2:1b:11:1a:cc:20:4b:b0:3e:1f:55:
2d:7f:32:0b:59:03:0a:87:e2:d7:64:62:f0:be:21:d5:9c:a9:
97:cd:b2:de:e4:94:71:ca:1a:08:11:60:2a:77:75:76:42:1e:
80:e1:cb:0e:4c:63:46:2a:f1:06:c7:1b:86:ec:b7:ee:bc:9a:
58:61:a5:cb:e2:f3:5c:a3:57:5c:47:e0:2d:33:24:fe:12:af:
08:28:ff:30:78:11:73:90:33:12:35:f5:b0:e1:74:69:c0:c2:
d9:89:ee:8b:b9:40:d3:a2:da:4a:e4:31:13:91:8d:cf:12:c3:
56:b0:61:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:20:39 2025 by rpki-client