Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/438155FAAA0211ECB9C24020C4F9AE02.roa
File: 438155FAAA0211ECB9C24020C4F9AE02.roa (raw, json)
Hash identifier: QuwmZ+AGxSWEc5wCSNdmgZFC844AL9L/oxhwLXVnVr4=
Subject key identifier: 15:27:CE:46:69:5E:9D:B1:CE:19:7E:64:B3:83:69:15:2B:17:80:5E
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 0F65
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/438155FAAA0211ECB9C24020C4F9AE02.roa
Signing time: Wed 16 Aug 2023 18:16:31 +0000
ROA not before: Wed 16 Aug 2023 18:16:31 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 38173
IP address blocks: 2404:f4c0:6660::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 14 Jun 2024 06:37:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3941 (0xf65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 16 18:16:31 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64dd127f-1d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b0:ea:4b:4d:9c:84:a8:80:8a:a0:f4:31:f7:
a9:57:ec:e5:83:f7:6b:2c:01:35:d8:17:b2:e5:dc:
4e:89:fb:97:5e:c5:0a:9c:f9:dd:0c:15:e9:6d:34:
7c:9c:b5:29:36:f0:5d:35:3d:9d:61:d4:34:db:10:
74:31:94:52:5f:bc:ab:b6:39:42:ee:a9:62:1f:cb:
8f:02:d0:85:b8:4f:bd:af:72:1d:8b:a2:51:62:a7:
71:6b:f3:24:64:3c:3d:3f:da:df:cf:b8:5e:9c:3a:
02:2b:36:a6:24:1d:08:5d:01:b4:25:d4:68:bc:03:
b0:4a:b3:5a:3d:6a:41:df:26:82:7b:1b:f8:2f:16:
ab:ad:68:2e:b8:3f:e9:9c:fc:07:dd:89:91:e9:a0:
51:59:ab:7d:1d:9f:36:4c:d3:e2:ff:17:24:dd:65:
19:12:f2:77:8d:97:77:fb:15:f0:c7:78:2b:04:1d:
22:61:9f:66:ea:d9:7c:b7:7a:fb:ce:57:a8:10:6d:
7d:78:6a:ad:d8:0b:64:96:d1:fa:6d:87:17:3d:77:
54:a4:66:fc:b6:77:62:34:a8:ca:40:e9:e3:f9:b5:
bc:59:2d:79:ba:9a:22:d7:eb:b2:28:c3:d6:ac:cd:
e8:9c:8a:84:67:0f:3e:70:05:79:27:7e:80:5b:1a:
6e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:27:CE:46:69:5E:9D:B1:CE:19:7E:64:B3:83:69:15:2B:17:80:5E
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/438155FAAA0211ECB9C24020C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:f4c0:6660::/44
Signature Algorithm: sha256WithRSAEncryption
5e:c4:60:67:bf:c8:e2:e0:6c:67:fc:73:49:c5:4b:b4:b0:f0:
b2:aa:ed:5c:a8:18:13:67:ff:76:40:f2:1f:56:1c:95:15:10:
f1:26:4c:16:eb:54:51:92:10:0e:07:cd:b9:dc:36:86:9a:0f:
4f:c8:e3:47:84:bb:72:9f:ed:9d:c1:f2:a9:9e:7c:98:45:4e:
c6:61:b9:d5:6d:a2:56:2f:a7:02:74:33:30:a1:04:96:f9:8b:
da:ef:af:f2:ea:42:e3:ee:73:69:fd:a3:6d:3b:a4:e7:fd:05:
d6:27:a9:46:bf:98:f5:71:b0:0d:62:6b:d6:36:c6:d0:95:07:
68:4f:f8:c5:79:56:d9:da:e3:09:25:b8:24:35:ba:f4:14:f8:
39:70:c7:d4:aa:42:54:4d:cf:67:cc:61:d8:6f:2c:f5:c9:b1:
20:08:3b:4a:b7:5d:19:49:5f:41:b7:8e:bf:51:b5:1b:14:36:
94:6e:37:d0:9c:c8:a1:34:42:f9:7f:87:b5:f0:a7:3c:a7:12:
09:4d:ab:bb:1d:0f:62:20:5a:69:78:2d:22:cf:54:dc:50:9a:
0f:c8:c0:36:96:00:68:19:41:4e:91:3c:f3:f8:08:7d:69:56:
59:68:4a:ae:d0:48:82:4e:b5:23:48:cb:33:74:46:6a:af:82:
3e:a2:46:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 09:35:06 2024 by rpki-client on console-fra.rpki-client.org