Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F9637F56BDC411E981D8F753C4F9AE02.roa
File: F9637F56BDC411E981D8F753C4F9AE02.roa (raw, json)
Hash identifier: ld5qjsviRKARXfOZluc1WUSjWqlncSGWbtF3KplFU6k=
Subject key identifier: 4A:54:34:39:E5:44:DE:DC:2F:C1:E8:1B:FC:7B:C3:DF:58:3A:54:9D
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 0F4B
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F9637F56BDC411E981D8F753C4F9AE02.roa
Signing time: Wed 16 Aug 2023 18:16:08 +0000
ROA not before: Wed 16 Aug 2023 18:16:08 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 139589
IP address blocks: 2404:f4c0:f200::/44 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Jun 2024 02:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3915 (0xf4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 16 18:16:08 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64dd1267-e09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:09:39:90:bb:69:27:13:b4:06:2d:83:65:
df:74:34:62:9f:db:ce:c3:f8:4b:48:4a:0f:e4:d4:
ee:1a:30:23:aa:c2:dc:45:07:b8:51:37:57:44:cd:
90:50:0f:a9:9c:0d:0d:9a:b6:20:7a:6e:86:9c:16:
85:6c:12:95:e8:78:67:64:ae:10:00:f5:80:d7:63:
6c:d7:e3:97:90:50:ae:17:77:69:8a:ff:f7:29:50:
b2:16:54:47:b6:7c:5a:4b:93:b4:6a:9b:02:d7:b1:
da:38:41:03:de:f7:42:aa:90:50:81:cd:a2:ce:43:
19:11:fc:00:7d:92:40:be:2b:ff:a8:1c:a6:9c:b6:
1f:9d:da:96:97:cb:f7:25:2f:95:0e:8e:bb:ec:ca:
9f:f0:3a:9b:77:e0:3f:48:d8:fb:bf:df:4b:e2:a6:
42:0f:ae:a6:6f:28:86:e2:4e:c7:fe:3d:b3:48:f6:
50:00:94:8b:30:6e:e8:b4:e7:81:b6:f4:31:8c:71:
24:c1:ce:59:84:4d:f1:97:44:95:ac:c8:fc:94:75:
d2:e4:d5:0b:23:56:7b:36:24:70:cb:de:bf:33:fd:
23:c8:d8:9a:e9:ee:4d:90:a7:f0:78:1e:32:7f:e9:
5f:77:b6:ca:da:f5:d9:e9:ec:11:cf:7f:65:4b:ce:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:54:34:39:E5:44:DE:DC:2F:C1:E8:1B:FC:7B:C3:DF:58:3A:54:9D
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F9637F56BDC411E981D8F753C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:f4c0:f200::/44
Signature Algorithm: sha256WithRSAEncryption
7d:aa:e1:11:bd:26:59:34:f0:e6:c5:54:4a:d8:b8:9f:d1:bf:
21:0d:42:2b:cb:6c:3f:e6:6e:3e:89:8a:1f:8b:9a:36:2a:20:
e7:42:2c:f5:24:14:49:62:eb:f2:97:6c:e6:35:16:f0:ed:51:
95:dc:80:97:d2:55:09:91:cb:61:9d:66:8f:b0:c7:b0:fd:c6:
ab:ef:43:16:a5:5a:4c:30:14:91:9e:cc:83:fe:05:cb:14:1f:
a8:e8:54:2f:ec:5b:a5:47:58:51:0d:2f:67:20:c7:0f:b8:e4:
73:95:ef:5f:dd:66:5f:2d:d6:9d:1a:e9:ec:15:e6:d3:ae:87:
a4:39:fc:82:e1:9c:0f:c8:31:73:63:67:f0:7d:44:eb:78:f0:
01:df:9b:d0:fb:83:56:29:69:3f:62:a8:c9:70:ae:55:b3:e1:
a5:e9:82:48:2d:c2:80:0b:b6:e6:c2:6b:60:ab:1c:06:a9:24:
6f:1d:17:bd:60:78:ad:74:cd:b6:2a:92:a2:cb:5d:b9:a2:c8:
c8:c5:d3:4c:8a:96:a9:d2:0c:7e:0b:4e:8a:0b:1d:10:7a:ab:
50:c8:56:c2:22:21:15:d8:43:19:6a:33:b9:e8:74:c1:7d:23:
44:f0:f9:d6:02:2e:46:0c:da:ab:00:a7:5d:b6:38:dc:9a:7d:
fd:c4:3e:05
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICD0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5
RDNGRDdCNjAwHhcNMjMwODE2MTgxNjA4WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGRkMTI2Ny1lMDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1IwJOZC7aScTtAYtg2XfdDRin9vOw/hLSEoP5NTuGjAjqsLcRQe4UTdXRM2Q
UA+pnA0NmrYgem6GnBaFbBKV6HhnZK4QAPWA12Ns1+OXkFCuF3dpiv/3KVCyFlRH
tnxaS5O0apsC17HaOEED3vdCqpBQgc2izkMZEfwAfZJAviv/qBymnLYfndqWl8v3
JS+VDo677Mqf8Dqbd+A/SNj7v99L4qZCD66mbyiG4k7H/j2zSPZQAJSLMG7otOeB
tvQxjHEkwc5ZhE3xl0SVrMj8lHXS5NULI1Z7NiRwy96/M/0jyNia6e5NkKfweB4y
f+lfd7bK2vXZ6ewRz39lS84G6wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEpUNDnl
RN7cL8HoG/x7w99YOlSdMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE
RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvRjk2MzdGNTZC
REM0MTFFOTgxRDhGNzUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQkBPTA8gAwDQYJKoZIhvcNAQELBQADggEBAH2q4RG9Jlk0
8ObFVErYuJ/RvyENQivLbD/mbj6Jih+LmjYqIOdCLPUkFEli6/KXbOY1FvDtUZXc
gJfSVQmRy2GdZo+wx7D9xqvvQxalWkwwFJGezIP+BcsUH6joVC/sW6VHWFENL2cg
xw+45HOV71/dZl8t1p0a6ewV5tOuh6Q5/ILhnA/IMXNjZ/B9ROt48AHfm9D7g1Yp
aT9iqMlwrlWz4aXpgkgtwoALtubCa2CrHAapJG8dF71geK10zbYqkqLLXbmiyMjF
00yKlqnSDH4LTooLHRB6q1DIVsIiIRXYQxlqM7nodMF9I0Tw+dYCLkYM2qsAp122
ONyaff3EPgU=
-----END CERTIFICATE-----
Generated at Sun Jun 16 05:30:31 2024 by rpki-client on console-ams.rpki-client.org