Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F476748003A911EC8C9E9220C4F9AE02.roa
File: F476748003A911EC8C9E9220C4F9AE02.roa (raw, json)
Hash identifier: rXISbkOuSWVJkzXfF+IXLWYQItuU8DJ6qikpscjrbOk=
Subject key identifier: C5:9D:03:2F:67:33:2C:FB:E3:35:A3:7D:63:B9:AE:AE:E6:A9:08:B4
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 0F58
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F476748003A911EC8C9E9220C4F9AE02.roa
Signing time: Wed 16 Aug 2023 18:16:19 +0000
ROA not before: Wed 16 Aug 2023 18:16:19 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 146958
IP address blocks: 2404:f4c0:f5c0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 15 Apr 2024 20:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3928 (0xf58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 16 18:16:19 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64dd1273-322d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fd:8f:bd:8d:ec:84:63:9f:31:25:1b:42:bc:
96:74:73:8c:7d:f1:c8:05:a8:83:7d:0f:47:e4:c4:
34:27:e7:9d:cd:c0:b9:07:f5:c9:0f:90:ef:23:f9:
5a:f5:46:cc:9b:a7:8e:a9:80:b8:f7:2e:ca:20:66:
8d:3b:11:b4:a3:c2:61:b1:43:1a:fb:ca:f4:0d:46:
90:74:16:f3:aa:13:cf:c3:fc:ae:37:70:05:d9:a6:
f7:7b:5c:36:98:c3:97:f3:04:d4:25:28:c7:f0:42:
87:ef:82:24:a8:44:3c:96:dc:3e:47:93:7b:a2:54:
c6:4e:f5:04:e2:4e:d0:03:1c:38:21:2f:12:d5:ad:
35:52:65:5c:58:07:a1:3f:9e:9f:92:31:cd:f0:24:
97:3b:7d:8e:06:5b:6a:59:f3:ba:7b:91:70:3b:08:
f7:92:8a:73:7b:b5:3f:5a:55:43:44:c6:39:96:15:
10:08:e9:91:3f:06:43:6c:70:96:0c:f1:04:1f:f9:
1e:96:8f:a7:6c:db:9d:1e:eb:1d:97:14:dd:e2:8c:
a9:4c:0f:cd:82:37:48:a9:cc:2b:19:84:b5:d1:38:
37:d8:be:52:f8:78:38:e3:e7:76:99:c8:52:ae:3e:
f8:80:4c:5f:e9:1d:b9:0f:ce:c7:16:15:7f:47:a0:
78:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9D:03:2F:67:33:2C:FB:E3:35:A3:7D:63:B9:AE:AE:E6:A9:08:B4
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F476748003A911EC8C9E9220C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:f4c0:f5c0::/44
Signature Algorithm: sha256WithRSAEncryption
67:c6:98:a7:43:5b:0c:b2:4c:07:fa:ab:70:0d:22:83:72:92:
4f:4b:5f:51:f9:e8:25:41:01:72:8d:46:ea:b7:98:8d:98:7b:
20:b1:c3:a6:4a:59:f1:9d:c8:90:13:ff:ec:38:59:f8:74:7f:
7e:aa:48:2b:f2:c1:86:2f:52:4d:e7:3e:71:6b:f5:a7:7a:22:
c2:09:df:f2:6d:00:b1:4c:2a:91:55:54:b5:a4:bd:70:ec:8e:
5c:f9:0e:40:a9:ba:3c:89:de:08:87:80:54:6a:7f:35:58:41:
c9:37:5b:c9:d4:9f:c4:86:ca:95:70:e3:ea:5a:ed:8d:78:04:
09:6e:a3:ad:28:eb:fd:62:0c:64:de:ff:88:42:a0:89:ef:e8:
ca:ed:32:a0:df:22:81:d8:5c:2c:af:b9:cd:7b:eb:07:80:94:
95:52:e6:be:04:a8:d6:c1:38:c5:ee:5a:e2:10:fd:db:5a:40:
42:1a:db:d7:a0:78:5c:d1:1b:17:ac:c9:a7:e6:c9:0f:79:d9:
b6:c5:0a:d4:1f:3d:84:98:6e:45:cf:56:26:98:e3:a0:e8:be:
22:6c:38:af:26:a7:41:bc:6c:cb:f2:00:46:72:44:0b:26:69:
eb:40:ee:35:12:fa:3f:17:33:34:bb:1a:fc:56:b8:cb:0f:04:
43:6f:48:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-ams.rpki-client.org