Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/2D526C58536D11EFA695AF2AC4F9AE02.roa
File: 2D526C58536D11EFA695AF2AC4F9AE02.roa (raw, json)
Hash identifier: XTsge2GW0ltXW8aZN5CmNs4FrAEzkLwCQ7cAO9rAORQ=
Subject key identifier: 4C:31:9B:78:BE:91:1D:CD:EC:C5:42:18:DF:51:B8:66:88:09:82:BE
Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Certificate serial: C2
Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/2D526C58536D11EFA695AF2AC4F9AE02.roa
Signing time: Mon 05 Aug 2024 21:17:27 +0000
ROA not before: Mon 05 Aug 2024 21:17:27 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 396982
IP address blocks: 2401:fa00:8000::/34 maxlen: 34
2401:fa00:8000::/40 maxlen: 40
2401:fa00:8100::/40 maxlen: 40
2401:fa00:8200::/40 maxlen: 40
2401:fa00:8300::/40 maxlen: 40
2401:fa00:8400::/40 maxlen: 40
2401:fa00:8500::/40 maxlen: 40
2401:fa00:8600::/40 maxlen: 40
2401:fa00:8700::/40 maxlen: 40
2401:fa00:8800::/40 maxlen: 40
2401:fa00:8900::/40 maxlen: 40
2401:fa00:8a00::/40 maxlen: 40
2401:fa00:8b00::/40 maxlen: 40
2401:fa00:8c00::/40 maxlen: 40
2401:fa00:8d00::/40 maxlen: 40
2401:fa00:8e00::/40 maxlen: 40
2401:fa00:8f00::/40 maxlen: 40
2401:fa00:9000::/40 maxlen: 40
2401:fa00:9100::/40 maxlen: 40
2401:fa00:9200::/40 maxlen: 40
2401:fa00:9300::/40 maxlen: 40
2401:fa00:9400::/40 maxlen: 40
2401:fa00:9500::/40 maxlen: 40
2401:fa00:9600::/40 maxlen: 40
2401:fa00:9700::/40 maxlen: 40
2401:fa00:9800::/40 maxlen: 40
2401:fa00:9900::/40 maxlen: 40
2401:fa00:9a00::/40 maxlen: 40
2401:fa00:9b00::/40 maxlen: 40
2401:fa00:9c00::/40 maxlen: 40
2401:fa00:9d00::/40 maxlen: 40
2401:fa00:9e00::/40 maxlen: 40
2401:fa00:9f00::/40 maxlen: 40
2401:fa00:a000::/40 maxlen: 40
2401:fa00:a100::/40 maxlen: 40
2401:fa00:a200::/40 maxlen: 40
2401:fa00:a300::/40 maxlen: 40
2401:fa00:a400::/40 maxlen: 40
2401:fa00:a500::/40 maxlen: 40
2401:fa00:a600::/40 maxlen: 40
2401:fa00:a700::/40 maxlen: 40
2401:fa00:a800::/40 maxlen: 40
2401:fa00:a900::/40 maxlen: 40
2401:fa00:aa00::/40 maxlen: 40
2401:fa00:ab00::/40 maxlen: 40
2401:fa00:ac00::/40 maxlen: 40
2401:fa00:ad00::/40 maxlen: 40
2401:fa00:ae00::/40 maxlen: 40
2401:fa00:af00::/40 maxlen: 40
2401:fa00:b000::/40 maxlen: 40
2401:fa00:b100::/40 maxlen: 40
2401:fa00:b200::/40 maxlen: 40
2401:fa00:b300::/40 maxlen: 40
2401:fa00:b400::/40 maxlen: 40
2401:fa00:b500::/40 maxlen: 40
2401:fa00:b600::/40 maxlen: 40
2401:fa00:b700::/40 maxlen: 40
2401:fa00:b800::/40 maxlen: 40
2401:fa00:b900::/40 maxlen: 40
2401:fa00:ba00::/40 maxlen: 40
2401:fa00:bb00::/40 maxlen: 40
2401:fa00:bc00::/40 maxlen: 40
2401:fa00:bd00::/40 maxlen: 40
2401:fa00:be00::/40 maxlen: 40
2401:fa00:bf00::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 05 Aug 2024 23:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Validity
Not Before: Aug 5 21:17:27 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=66b14166-3335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ee:15:c8:08:09:d7:bd:69:52:aa:78:7d:d6:
16:0b:85:94:4e:7b:db:ab:b9:4a:69:c6:6d:90:2c:
4d:bf:d4:29:5f:8b:6b:9d:ab:cd:a2:65:82:c4:28:
2f:46:26:a6:de:9d:70:7d:1a:e3:89:e7:52:d0:ff:
f6:65:5d:c8:a9:f7:b3:12:ac:7e:dd:8e:87:1e:34:
11:f1:48:69:ee:db:62:ac:0b:d5:61:02:c8:dc:9f:
52:57:87:a5:ec:dc:53:ad:1b:79:6c:15:98:5a:5c:
a7:0a:aa:c0:d5:23:d3:32:1d:04:8e:05:0f:b4:32:
c0:3f:a5:63:7c:b4:a0:77:57:78:cf:51:16:46:ce:
8a:72:1e:8a:3c:e2:93:32:a2:a8:f0:65:d7:28:a7:
58:1a:b6:be:d2:ac:06:78:64:b7:94:d6:66:34:5d:
e8:8c:43:fb:85:19:69:0f:1a:f0:6f:ca:13:df:2e:
c7:70:cd:0b:6e:ae:e6:b8:64:9b:8e:13:53:2e:24:
33:c2:3d:4e:58:19:21:b7:23:3d:0f:b1:a6:6b:bf:
b9:fb:50:44:fb:b0:86:fc:cd:8d:a5:52:7f:9f:26:
ad:6c:7e:ab:a5:cd:22:26:37:49:ac:dc:99:ec:83:
7f:c5:d9:49:5d:a2:05:b2:9d:16:2a:01:f0:6c:83:
93:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:31:9B:78:BE:91:1D:CD:EC:C5:42:18:DF:51:B8:66:88:09:82:BE
X509v3 Authority Key Identifier:
keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/2D526C58536D11EFA695AF2AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:fa00:8000::/34
Signature Algorithm: sha256WithRSAEncryption
78:93:8c:ba:21:85:5e:71:da:63:5a:00:0b:ce:6d:b2:d7:92:
a8:ca:c8:93:1b:54:c6:8b:3b:1c:17:62:f2:d1:21:30:d4:03:
d7:2b:4a:b7:77:28:64:04:98:e8:69:3e:6d:0a:38:e5:0b:26:
f4:ab:f9:00:09:8b:ad:0e:42:aa:af:8c:b9:04:ca:71:9a:0c:
c9:c3:ac:3a:a8:c0:3b:65:7d:bb:58:6b:09:0a:e2:52:b4:cd:
cc:44:a1:60:5e:59:9a:35:56:f0:55:48:36:18:05:e7:90:b9:
ce:0e:bc:c2:3b:07:68:2f:ca:2e:3c:8c:a4:2c:c1:33:6f:9b:
87:a7:d8:d4:54:99:33:7f:de:5e:b2:d4:76:db:6f:56:2a:16:
4b:05:50:43:ad:fc:2c:9c:e8:e3:d5:8f:c6:2c:08:3e:30:e2:
bc:e5:4d:a3:7f:e9:74:0e:c2:7e:a4:39:6e:e2:ea:de:9d:64:
e4:b9:70:87:21:e6:72:dd:88:5d:89:32:db:70:8e:02:f2:d6:
2c:05:f2:01:a4:87:78:95:18:c4:51:66:0a:fc:df:18:30:08:
30:7e:1c:1d:3a:b3:68:21:cc:96:72:f3:52:71:c9:93:88:78:
72:77:ac:48:47:9b:65:ab:4c:2c:0d:46:19:c6:56:2f:48:9f:
b3:69:5c:0b
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEOTIxMTAvBgNVBAUTKDYxMTE4MDdFODI4QUM0Rjk4NDI2OTNEMzg2MTE5NTJE
RjAzRDcyNDcwHhcNMjQwODA1MjExNzI3WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmIxNDE2Ni0zMzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoO4VyAgJ171pUqp4fdYWC4WUTnvbq7lKacZtkCxNv9QpX4trnavNomWCxCgv
Riam3p1wfRrjiedS0P/2ZV3IqfezEqx+3Y6HHjQR8Uhp7ttirAvVYQLI3J9SV4el
7NxTrRt5bBWYWlynCqrA1SPTMh0EjgUPtDLAP6VjfLSgd1d4z1EWRs6Kch6KPOKT
MqKo8GXXKKdYGra+0qwGeGS3lNZmNF3ojEP7hRlpDxrwb8oT3y7HcM0Lbq7muGSb
jhNTLiQzwj1OWBkhtyM9D7Gma7+5+1BE+7CG/M2NpVJ/nyatbH6rpc0iJjdJrNyZ
7IN/xdlJXaIFsp0WKgHwbIOTYQIDAQABo4IClzCCApMwHQYDVR0OBBYEFEwxm3i+
kR3N7MVCGN9RuGaICYK+MB8GA1UdIwQYMBaAFGERgH6CisT5hCaT04YRlS3wPXJH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ5Mi8zNTc3OThCMDQw
MkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQbUVKcFBUaGhHVkxmQTlj
a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lSR0Fmb0tLeFBtRUpwUFRoaEdWTGZBOWNrYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjVEOTIvMzU3Nzk4QjA0MDJBMTFFRUE3MTYxODcyQzRGOUFFMDIvMkQ1MjZDNTg1
MzZEMTFFRkE2OTVBRjJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgYkAfoAgDANBgkqhkiG9w0BAQsFAAOCAQEAeJOMuiGFXnHa
Y1oAC85tsteSqMrIkxtUxos7HBdi8tEhMNQD1ytKt3coZASY6Gk+bQo45Qsm9Kv5
AAmLrQ5Cqq+MuQTKcZoMycOsOqjAO2V9u1hrCQriUrTNzEShYF5ZmjVW8FVINhgF
55C5zg68wjsHaC/KLjyMpCzBM2+bh6fY1FSZM3/eXrLUdttvVioWSwVQQ638LJzo
49WPxiwIPjDivOVNo3/pdA7CfqQ5buLq3p1k5LlwhyHmct2IXYky23COAvLWLAXy
AaSHeJUYxFFmCvzfGDAIMH4cHTqzaCHMlnLzUnHJk4h4cnesSEebZatMLA1GGcZW
L0ifs2lcCw==
-----END CERTIFICATE-----
Generated at Tue Aug 6 01:47:03 2024 by rpki-client on console-ams.rpki-client.org