Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/C963CF266CB711EEA88AC06CC4F9AE02/1E7395686CB911EE948C0172C4F9AE02.roa
File: 1E7395686CB911EE948C0172C4F9AE02.roa (raw, json)
Hash identifier: XWykZL2ae+5/Coj44e7leL5A8ilz64nLHfKD4pN8ltA=
Subject key identifier: 84:D4:5B:7C:6E:3D:3D:78:94:45:26:E7:EC:32:7E:AB:8C:6C:B9:CC
Certificate issuer: /CN=A918C287/serialNumber=355AC83FAA75D7DA7AC861DB2007F62600BA4292
Certificate serial: 02
Authority key identifier: 35:5A:C8:3F:AA:75:D7:DA:7A:C8:61:DB:20:07:F6:26:00:BA:42:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NVrIP6p119p6yGHbIAf2JgC6QpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/C963CF266CB711EEA88AC06CC4F9AE02/1E7395686CB911EE948C0172C4F9AE02.roa
Signing time: Tue 17 Oct 2023 06:48:03 +0000
ROA not before: Tue 17 Oct 2023 06:48:03 +0000
ROA not after: Sat 01 May 2038 00:00:00 +0000
asID: 131211
IP address blocks: 2401:4600:1000::/36 maxlen: 36
2401:4600:2000::/36 maxlen: 36
2401:4600:5000::/36 maxlen: 36
Validation: Failed, certificate revoked on Fri 19 Apr 2024 01:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C287/serialNumber=355AC83FAA75D7DA7AC861DB2007F62600BA4292
Validity
Not Before: Oct 17 06:48:03 2023 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=652e2e23-a393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:95:4e:0b:b8:a1:dc:49:f2:3b:6f:15:a8:
de:82:09:2e:aa:c9:35:b4:a1:04:55:cd:cf:4f:4a:
7f:50:37:92:b3:4a:86:b7:e6:d1:be:01:2f:5d:fc:
8d:21:7d:31:09:03:66:75:1e:54:f9:7b:e8:04:4c:
32:7a:55:2f:e5:af:3f:a1:2e:f8:e8:bf:42:51:cd:
90:11:77:6f:01:03:63:07:ad:2a:86:89:ad:34:1a:
45:d7:7b:22:b7:52:e3:24:fa:ac:54:dd:ab:34:f9:
42:be:ce:a1:ba:8c:82:cd:9d:96:fd:20:af:49:83:
41:43:19:d7:e2:44:1f:61:f2:3c:52:17:8f:f6:a5:
89:b4:1e:e0:50:03:93:7c:01:94:c3:a8:ca:75:e6:
fe:42:35:f2:e4:9e:39:0a:bd:d6:2b:71:df:10:1e:
44:c6:0a:cd:5a:eb:f3:1f:79:fe:9a:a6:ef:35:1c:
fb:5b:32:0e:9d:2b:65:cd:b9:b1:5b:06:63:8c:53:
44:5e:ee:21:6c:9c:e0:3b:da:7a:ef:ca:bd:19:8d:
9b:84:b9:fa:b4:53:ea:e1:51:73:08:90:68:3d:5e:
21:c3:dc:6e:a5:69:7d:6b:2d:e8:2b:2f:d5:4c:e2:
e3:43:cb:80:4d:20:d5:4b:ea:5f:c1:3f:7b:58:a5:
32:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D4:5B:7C:6E:3D:3D:78:94:45:26:E7:EC:32:7E:AB:8C:6C:B9:CC
X509v3 Authority Key Identifier:
keyid:35:5A:C8:3F:AA:75:D7:DA:7A:C8:61:DB:20:07:F6:26:00:BA:42:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C287/C963CF266CB711EEA88AC06CC4F9AE02/NVrIP6p119p6yGHbIAf2JgC6QpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NVrIP6p119p6yGHbIAf2JgC6QpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/C963CF266CB711EEA88AC06CC4F9AE02/1E7395686CB911EE948C0172C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:4600:1000::-2401:4600:2fff:ffff:ffff:ffff:ffff:ffff
2401:4600:5000::/36
Signature Algorithm: sha256WithRSAEncryption
9a:95:c9:16:d7:56:b0:2e:10:33:d8:07:b4:92:66:e6:0a:28:
ea:51:15:3f:9f:21:92:13:9d:65:a6:f6:b7:8e:b6:8f:02:f7:
9e:f4:ff:59:1e:5a:cb:e4:30:a2:32:bd:ab:1d:7d:bf:94:6f:
f1:3a:5e:88:60:e9:b9:7d:ce:c4:b1:48:ed:f1:67:1e:07:3f:
b5:11:df:bb:95:96:f4:61:f6:4d:59:74:75:a5:4b:c1:9b:b7:
97:a3:92:b4:bb:6f:7c:53:f3:43:3f:2b:8b:74:8a:1b:32:54:
74:b1:43:ca:fb:33:a0:3c:35:fd:11:d8:9f:f9:f9:33:c4:c3:
8d:a9:a2:3e:98:36:64:cb:16:25:6a:81:66:57:c3:f6:4a:fd:
67:69:25:b0:13:c4:14:aa:35:01:62:3b:b9:3c:1e:3c:6c:d4:
bb:18:c3:4c:af:b1:b4:a0:8d:4f:20:86:0e:48:1b:5b:45:5d:
b6:fd:f8:bb:dc:2e:5f:4e:fc:3e:4f:64:52:d6:f9:04:4d:c1:
45:05:1c:8a:48:20:22:a5:25:9e:5e:25:9b:93:d2:87:17:96:
5a:cd:7b:4b:00:d2:2b:70:f6:0d:79:65:63:df:98:29:6a:de:
78:e8:49:27:10:12:59:6e:d8:ca:2e:4a:e3:86:14:0d:59:b0:
ca:c5:d9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:09:00 2024 by rpki-client on console-fra.rpki-client.org