Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/59DDEEAE700111EAB050DC3AC4F9AE02.roa
File: 59DDEEAE700111EAB050DC3AC4F9AE02.roa (raw, json)
Hash identifier: k9sGNlFCzP63h1aS8flZHgyf/5JP24HJyv51VFBQCn0=
Subject key identifier: B7:F9:4A:CA:F2:73:E6:C7:B3:CD:CB:CD:20:27:CE:27:97:8B:35:11
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 0F4F
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/59DDEEAE700111EAB050DC3AC4F9AE02.roa
Signing time: Wed 16 Aug 2023 18:16:11 +0000
ROA not before: Wed 16 Aug 2023 18:16:11 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 140498
IP address blocks: 2404:f4c0:f540::/44 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Jun 2024 11:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3919 (0xf4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 16 18:16:11 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64dd126b-f93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:06:9f:fa:7a:2a:64:b0:d6:26:f8:e6:65:
68:b3:93:40:2e:d6:1c:c9:9c:0e:3e:8e:2b:c8:09:
57:4c:aa:91:6c:b2:ce:89:34:91:84:78:9b:8d:c9:
fd:a0:15:03:77:79:7b:35:25:6e:74:32:62:51:a2:
c6:18:21:2f:4f:ca:b3:5e:8e:45:84:fa:a8:82:af:
cc:f6:12:e9:e1:74:da:e0:7d:4a:b5:db:c8:93:4c:
c7:56:4b:13:db:35:3d:1a:82:bc:c3:56:82:fb:c4:
d7:09:4b:15:cf:d2:82:23:30:55:df:fe:6e:8f:4d:
08:b9:f3:0a:44:0e:f4:30:b6:a7:8f:61:8d:db:29:
1e:58:d5:d4:b3:bd:1b:36:e3:36:ed:e2:79:a7:08:
40:74:b6:5b:1c:b7:3e:94:f4:fb:5d:69:f8:79:ae:
36:d0:b5:bd:82:14:d6:3b:f3:2f:93:96:1f:75:71:
f7:63:04:e6:cb:db:76:74:66:11:43:db:f8:2d:f0:
9b:0d:55:4b:f4:9f:43:e3:29:82:6a:86:2d:3b:84:
6e:ca:2a:59:84:b7:cb:82:b8:2c:7a:59:10:13:46:
1e:00:32:2e:4b:60:7d:9b:39:8d:48:b1:17:aa:c0:
85:6f:17:78:7c:07:3f:40:b8:a0:59:97:6b:fa:90:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F9:4A:CA:F2:73:E6:C7:B3:CD:CB:CD:20:27:CE:27:97:8B:35:11
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/59DDEEAE700111EAB050DC3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:f4c0:f540::/44
Signature Algorithm: sha256WithRSAEncryption
83:19:d7:26:66:be:e6:80:e5:5d:e8:7e:63:fa:fe:a7:76:df:
c0:1c:6a:f1:e1:80:73:73:1e:68:71:af:19:96:c5:dc:20:1e:
b6:d0:7e:e9:83:c5:5d:8e:9d:8e:0f:82:d5:31:20:58:91:26:
e8:53:72:d4:ec:02:86:c4:84:81:70:25:34:4b:aa:dd:9c:c3:
aa:d9:49:82:c5:4b:6d:00:44:d5:62:87:38:a0:52:6a:03:bd:
b9:05:85:93:be:6d:b1:2b:a9:2a:5e:1b:aa:2f:a2:f5:46:28:
c5:6a:dc:e8:79:53:36:b3:f8:47:78:fa:12:d4:c0:c7:60:62:
5f:a9:28:b4:c2:fb:dd:cb:35:3a:cb:0f:34:14:99:d4:a7:7b:
af:9e:fe:c4:d3:3a:aa:af:88:3b:00:1d:a8:d4:0b:8f:ae:4f:
0c:b0:b0:94:f0:6a:af:37:c2:4a:ea:56:e0:89:9e:9a:13:d3:
b7:54:49:6b:25:d0:66:b9:0e:5f:04:82:8c:e1:51:b3:de:d9:
b2:7d:91:67:c3:d0:94:0f:7a:0a:8a:b1:9f:6d:f3:fa:42:75:
df:4d:fe:2d:ff:95:e6:dd:2d:08:7a:85:b1:a7:c2:d7:f6:00:
45:92:8d:4c:d6:d1:97:eb:4d:e2:98:35:f4:41:ab:10:33:ef:
e6:2f:94:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:41:18 2024 by rpki-client on console-ams.rpki-client.org