Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/AC5C9A2E73A911ECB0D2F575C4F9AE02.roa
File: AC5C9A2E73A911ECB0D2F575C4F9AE02.roa (raw, json)
Hash identifier: GZ94utyG0+cR5BvdAQg5qH2TXKRYPQEQHyo67CJZGVM=
Subject key identifier: C4:2B:27:07:80:A9:7C:8B:D4:EF:2B:1E:88:88:C1:F6:30:3D:07:56
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 0F69
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/AC5C9A2E73A911ECB0D2F575C4F9AE02.roa
Signing time: Wed 16 Aug 2023 18:16:35 +0000
ROA not before: Wed 16 Aug 2023 18:16:34 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 7721
IP address blocks: 2404:f4c0:6660::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 14 Jun 2024 06:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3945 (0xf69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 16 18:16:34 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64dd1282-99ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3e:bd:44:c4:0a:12:4c:33:16:72:3f:f2:97:
1c:56:7b:a9:03:17:4e:13:58:9e:27:18:c8:c9:7d:
9c:04:d1:2d:d1:d8:e7:0d:72:c5:30:33:a1:4d:07:
c4:da:34:d0:dc:3b:01:de:c8:d9:c1:b9:0c:67:68:
f1:d5:5c:37:01:6d:c8:0c:59:1a:cf:89:bf:cd:87:
26:e6:aa:53:b4:31:a1:9a:3f:db:89:47:f0:dc:a0:
04:be:fe:9b:89:b3:45:92:98:2f:41:5d:2b:e8:1b:
a6:17:ae:26:56:c9:03:ce:a5:4a:b3:0c:33:d7:68:
9b:f5:df:a9:b5:bf:f2:68:2c:51:e4:3a:15:27:5b:
2f:c8:09:27:72:80:c5:bf:4e:85:f9:70:4e:2e:2e:
9a:31:b0:ff:46:07:9f:7c:23:bf:25:97:04:44:18:
93:3d:0a:0c:41:b1:8f:b3:e7:95:01:a7:b4:b4:52:
ee:4d:be:36:f7:bd:64:b9:03:42:7b:54:11:29:78:
87:e7:98:47:73:78:d6:2d:89:3b:0d:4c:41:35:39:
da:50:92:a9:cc:4a:b0:dc:eb:f7:ea:c6:05:ac:97:
40:ae:5f:21:43:b6:c9:8e:91:24:ae:bb:9d:91:71:
c4:1f:ee:51:93:a6:e9:33:99:f8:b3:b2:f2:b2:cf:
d5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2B:27:07:80:A9:7C:8B:D4:EF:2B:1E:88:88:C1:F6:30:3D:07:56
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/AC5C9A2E73A911ECB0D2F575C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:f4c0:6660::/44
Signature Algorithm: sha256WithRSAEncryption
8f:40:0a:96:b6:05:93:b3:13:22:0a:a4:fc:40:3a:cc:94:6e:
5b:84:e1:b8:ab:96:4b:38:e0:e0:76:55:c9:b3:2c:71:1d:cf:
7c:8d:9e:43:68:67:ac:e2:98:c8:34:df:29:43:cc:4c:e2:6f:
51:65:40:ab:9c:dc:bf:2f:b3:4d:ab:6d:01:67:52:1d:bb:f6:
25:dc:72:db:89:d1:31:b0:44:67:8d:8c:27:dc:93:95:70:04:
32:dd:89:2e:24:37:95:f1:fb:6f:1c:fb:c2:03:bc:3b:ed:30:
bc:d9:50:91:9d:32:88:ae:49:66:55:24:d5:6a:ab:ec:56:bb:
22:80:79:3e:23:e9:ee:38:e5:33:6b:34:27:fd:fa:3a:14:ba:
af:5f:ef:db:e5:bd:fa:76:17:7c:6c:e3:dc:2b:76:4c:c8:92:
86:9a:fe:d5:3b:e3:55:1c:d5:70:72:be:a4:7b:c4:84:c6:d3:
d4:c3:2d:39:8b:44:13:b7:b0:43:62:8f:03:9d:8b:b9:4f:f1:
64:3b:d6:ec:b5:e8:ab:ea:48:20:94:6a:e4:3a:08:b3:4b:aa:
fd:a8:1f:69:08:83:4a:6d:b3:4d:13:4c:34:48:76:88:7d:a3:
e0:f7:a4:c7:db:49:7c:fc:75:a6:aa:45:40:94:07:b5:fb:68:
2d:20:1a:2c
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICD2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5
RDNGRDdCNjAwHhcNMjMwODE2MTgxNjM0WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGRkMTI4Mi05OWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmT69RMQKEkwzFnI/8pccVnupAxdOE1ieJxjIyX2cBNEt0djnDXLFMDOhTQfE
2jTQ3DsB3sjZwbkMZ2jx1Vw3AW3IDFkaz4m/zYcm5qpTtDGhmj/biUfw3KAEvv6b
ibNFkpgvQV0r6BumF64mVskDzqVKswwz12ib9d+ptb/yaCxR5DoVJ1svyAkncoDF
v06F+XBOLi6aMbD/RgeffCO/JZcERBiTPQoMQbGPs+eVAae0tFLuTb42971kuQNC
e1QRKXiH55hHc3jWLYk7DUxBNTnaUJKpzEqw3Ov36sYFrJdArl8hQ7bJjpEkrrud
kXHEH+5Rk6bpM5n4s7Lyss/VLQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMQrJweA
qXyL1O8rHoiIwfYwPQdWMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE
RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvQUM1QzlBMkU3
M0E5MTFFQ0IwRDJGNTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQkBPTAZmAwDQYJKoZIhvcNAQELBQADggEBAI9ACpa2BZOz
EyIKpPxAOsyUbluE4birlks44OB2VcmzLHEdz3yNnkNoZ6zimMg03ylDzEzib1Fl
QKuc3L8vs02rbQFnUh279iXcctuJ0TGwRGeNjCfck5VwBDLdiS4kN5Xx+28c+8ID
vDvtMLzZUJGdMoiuSWZVJNVqq+xWuyKAeT4j6e445TNrNCf9+joUuq9f79vlvfp2
F3xs49wrdkzIkoaa/tU741Uc1XByvqR7xITG09TDLTmLRBO3sENijwOdi7lP8WQ7
1uy16KvqSCCUauQ6CLNLqv2oH2kIg0pts00TTDRIdoh9o+D3pMfbSXz8daaqRUCU
B7X7aC0gGiw=
-----END CERTIFICATE-----
Generated at Fri Jun 14 09:35:06 2024 by rpki-client on console-fra.rpki-client.org