Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919921D/3DF14B427C2A11E6A8A26920C4F9AE02/E2C18976B92011EEA3674D50C4F9AE02.roa
File: E2C18976B92011EEA3674D50C4F9AE02.roa (raw, json)
Hash identifier: WqKIniVoRPM6PHTTVFUK0dzHCnWDM1aTqRab4HSQWcM=
Subject key identifier: 32:38:5B:83:77:12:9D:4E:A1:53:28:EC:F2:E1:4B:59:13:C2:72:17
Certificate issuer: /CN=A919921D/serialNumber=1F43D064DBD8F2418FB1000A2EBD8FBA87928ED5
Certificate serial: 1D59
Authority key identifier: 1F:43:D0:64:DB:D8:F2:41:8F:B1:00:0A:2E:BD:8F:BA:87:92:8E:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H0PQZNvY8kGPsQAKLr2PuoeSjtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919921D/3DF14B427C2A11E6A8A26920C4F9AE02/E2C18976B92011EEA3674D50C4F9AE02.roa
Signing time: Mon 22 Jan 2024 12:22:19 +0000
ROA not before: Mon 22 Jan 2024 12:22:19 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 205072
IP address blocks: 2400:9780::/46 maxlen: 46
Validation: Failed, certificate revoked on Tue 30 Jan 2024 02:53:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7513 (0x1d59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919921D/serialNumber=1F43D064DBD8F2418FB1000A2EBD8FBA87928ED5
Validity
Not Before: Jan 22 12:22:19 2024 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=65ae5dfb-278f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:d6:d5:6a:7b:43:85:be:12:d2:4c:91:48:
fb:8e:73:4d:4f:07:be:9e:1a:36:10:a2:06:b7:90:
e0:7d:ab:5f:20:f9:10:03:08:ec:01:4f:a4:9c:b1:
08:99:38:d9:cf:9c:7d:f5:ef:ba:94:88:f7:91:99:
10:59:3d:c9:84:24:29:b7:8e:5b:dc:f6:46:b2:f6:
93:92:63:d4:e6:6e:bc:de:cf:02:cf:2e:25:53:76:
da:3c:54:38:d4:87:8f:7c:ae:12:06:17:24:22:b8:
57:0b:77:07:ab:ad:63:38:f1:5e:48:b1:b0:9f:19:
94:ed:d3:12:4a:3a:f8:93:e6:88:a3:92:cf:e7:30:
c1:e9:e3:a1:27:96:99:01:3a:1f:86:7f:4f:8c:df:
a4:6c:82:b3:31:7a:33:f6:56:2c:d4:7d:b4:9d:98:
5a:8b:be:82:fc:3d:f0:c4:ec:79:8a:72:03:5c:4f:
10:e0:71:12:87:66:7a:1f:ad:bd:2c:7f:5f:f2:ab:
02:50:64:c6:7c:ca:53:de:41:c3:9a:dd:a1:8c:c5:
e3:67:c6:de:99:2c:10:27:42:63:08:32:d6:d1:df:
48:4d:0f:07:dc:a5:19:d1:a4:41:fd:ee:bb:9a:80:
c9:76:88:74:69:23:f9:86:69:a5:ca:41:25:84:f6:
28:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:38:5B:83:77:12:9D:4E:A1:53:28:EC:F2:E1:4B:59:13:C2:72:17
X509v3 Authority Key Identifier:
keyid:1F:43:D0:64:DB:D8:F2:41:8F:B1:00:0A:2E:BD:8F:BA:87:92:8E:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919921D/3DF14B427C2A11E6A8A26920C4F9AE02/H0PQZNvY8kGPsQAKLr2PuoeSjtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H0PQZNvY8kGPsQAKLr2PuoeSjtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919921D/3DF14B427C2A11E6A8A26920C4F9AE02/E2C18976B92011EEA3674D50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:9780::/46
Signature Algorithm: sha256WithRSAEncryption
5e:aa:d5:b0:c4:84:53:88:9f:90:81:59:3c:2e:ae:da:9a:72:
47:70:ca:53:36:e5:a2:2b:b0:d2:27:52:e7:f7:6b:a4:b9:8e:
98:69:ca:f5:5c:ba:c6:b2:5c:cd:22:44:20:69:e5:7e:61:f6:
59:8b:fc:83:00:88:b6:7d:87:eb:fb:c4:b1:65:d2:60:4f:22:
af:8a:79:66:75:61:26:21:f0:6e:48:00:5f:a8:af:61:de:72:
65:8b:ab:f6:d5:91:63:4b:35:e4:67:fd:c5:2b:4e:06:46:bf:
d8:35:b9:fb:d1:7b:2b:73:e8:09:5b:e1:91:ab:3a:87:5f:74:
95:91:9d:6c:eb:26:74:48:a6:c1:5c:dc:e5:df:74:1d:24:62:
7c:bb:38:2b:27:0b:7d:28:96:03:1d:0c:4a:e8:d3:3f:0b:ea:
70:26:e4:3a:b6:25:da:67:aa:3e:25:db:42:43:1d:30:74:35:
e7:c7:32:2e:5c:11:60:32:6c:2b:b4:81:a9:81:18:06:b9:0a:
fc:93:08:39:eb:41:13:c4:d6:ad:c8:a5:77:87:89:01:c4:a5:
e5:09:18:8d:2a:db:4b:41:4b:8b:1a:a7:c6:c1:73:9e:37:b2:
58:32:11:84:42:0c:fb:24:fc:85:46:b9:56:72:dd:9c:43:b3:
62:a8:aa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 06:07:10 2024 by rpki-client on console-ams.rpki-client.org