Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/73AA7778366C11EEA745131EC4F9AE02.roa
File: 73AA7778366C11EEA745131EC4F9AE02.roa (raw, json)
Hash identifier: xUIf2FZWhsyK2QFuIs3/LlClFb0ThW++F4Y/7gUsxlw=
Subject key identifier: C2:6E:BA:50:1E:CD:E6:17:D0:BC:BC:4B:D0:E1:CB:00:39:BF:67:0A
Certificate issuer: /CN=A91DC5BE/serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
Certificate serial: 3402
Authority key identifier: AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/73AA7778366C11EEA745131EC4F9AE02.roa
Signing time: Wed 09 Aug 2023 04:23:12 +0000
ROA not before: Wed 09 Aug 2023 04:23:12 +0000
ROA not after: Mon 31 Mar 2031 00:00:00 +0000
asID: 9545
IP address blocks: 2001:dd8:f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 30 Aug 2023 00:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13314 (0x3402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC5BE/serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
Validity
Not Before: Aug 9 04:23:12 2023 GMT
Not After : Mar 31 00:00:00 2031 GMT
Subject: CN=64d314b0-2336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:28:6f:c2:4f:35:df:f1:45:7a:29:91:6a:d5:
25:38:93:c9:fb:3c:59:b9:b3:c6:53:4c:ee:83:ee:
e6:a1:32:e8:be:06:64:ba:c6:e4:71:65:a0:bd:8e:
52:09:38:dc:36:cb:41:70:af:ac:b5:de:ac:d7:e6:
99:7f:ef:cd:c2:c6:a9:56:6f:9f:ab:4c:93:60:c9:
1d:eb:0f:d8:91:15:35:d6:e9:5d:7e:ec:82:63:6d:
20:16:c0:2d:c8:3b:3f:15:1f:88:fd:7f:47:eb:eb:
a6:46:28:57:ee:0f:44:f0:3f:05:d3:b1:bb:c2:d8:
61:a4:f4:7f:df:ae:12:55:87:ed:6e:32:38:81:a0:
eb:c0:ab:f1:f5:06:59:77:95:4d:75:11:5b:21:70:
b1:35:c7:44:55:08:0d:a7:35:3b:ff:13:fa:1c:4d:
89:21:d0:e5:b4:ab:3f:77:22:17:82:77:52:a6:b2:
cf:fc:c4:ee:a5:1f:72:3e:1e:21:f5:78:5a:34:78:
61:10:82:4d:e5:37:8d:f6:e4:76:69:85:70:84:ea:
8c:65:a4:bf:99:75:10:87:e7:72:53:0d:7b:38:99:
55:66:60:cb:83:05:19:17:23:96:86:d7:12:fe:01:
8a:ed:b1:62:45:68:64:1d:8f:a2:e5:97:69:c3:40:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6E:BA:50:1E:CD:E6:17:D0:BC:BC:4B:D0:E1:CB:00:39:BF:67:0A
X509v3 Authority Key Identifier:
keyid:AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/73AA7778366C11EEA745131EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:dd8:f::/48
Signature Algorithm: sha256WithRSAEncryption
3b:ac:71:b2:9f:d7:64:aa:11:99:86:a3:84:6f:7c:ae:9b:12:
da:11:7f:d4:24:8e:82:bf:36:34:0e:c5:c8:a2:ec:b9:1d:c4:
6e:7e:3a:55:92:82:a9:57:9c:5e:0d:fb:04:92:05:1e:70:31:
3d:a4:ad:2b:3e:61:61:a5:36:fa:85:a3:e1:77:ef:99:1d:0d:
22:93:55:e0:34:46:19:3c:33:af:38:7a:fc:e9:6c:ea:d1:27:
e3:bb:28:ae:44:8e:7f:97:f4:1a:a9:c9:ef:a9:4d:69:19:5d:
1e:f2:cd:e2:a5:d0:29:91:f1:c8:84:4a:54:14:a3:de:d6:da:
6a:f2:bf:db:ef:47:d3:e3:64:36:c3:64:5c:8f:18:dc:21:28:
6a:cc:d0:b3:cf:cf:33:b0:9f:ad:36:7a:31:61:e5:cb:a6:b8:
26:2c:61:3d:3b:ee:bf:8a:49:8d:c4:56:0d:3b:1d:51:8d:f5:
0a:14:7e:30:14:d0:5f:16:f9:aa:18:a2:ad:e2:69:51:d4:bc:
cb:78:8e:ca:99:64:42:e3:4c:38:9e:fc:b7:46:df:69:71:b3:
75:f5:6d:cb:74:d4:6a:95:05:23:96:62:8a:60:2d:fb:ba:6b:
3d:37:88:b1:9a:ae:22:64:d0:e4:86:93:f7:e0:f4:b9:b2:4b:
37:de:51:ec
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICNAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REM1QkUxMTAvBgNVBAUTKEFEQThBRUQzMkIxNUI4N0U2MTEyNTJEMjlEMUUxRDVC
REU1ODE2NDYwHhcNMjMwODA5MDQyMzEyWhcNMzEwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGQzMTRiMC0yMzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3ihvwk813/FFeimRatUlOJPJ+zxZubPGU0zug+7moTLovgZkusbkcWWgvY5S
CTjcNstBcK+std6s1+aZf+/NwsapVm+fq0yTYMkd6w/YkRU11uldfuyCY20gFsAt
yDs/FR+I/X9H6+umRihX7g9E8D8F07G7wthhpPR/364SVYftbjI4gaDrwKvx9QZZ
d5VNdRFbIXCxNcdEVQgNpzU7/xP6HE2JIdDltKs/dyIXgndSprLP/MTupR9yPh4h
9XhaNHhhEIJN5TeN9uR2aYVwhOqMZaS/mXUQh+dyUw17OJlVZmDLgwUZFyOWhtcS
/gGK7bFiRWhkHY+i5Zdpw0BZXQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMJuulAe
zeYX0Ly8S9DhywA5v2cKMB8GA1UdIwQYMBaAFK2ortMrFbh+YRJS0p0eHVveWBZG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzVCRS9ENDAxNjE5QTFE
NjkxMUUyQUZCNjRFQTcwOEIwMkNEMi9yYWl1MHlzVnVINWhFbExTblI0ZFc5NVlG
a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JhaXUweXNWdUg1aEVsTFNuUjRkVzk1WUZrWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REM1QkUvRDQwMTYxOUExRDY5MTFFMkFGQjY0RUE3MDhCMDJDRDIvNzNBQTc3Nzgz
NjZDMTFFRUE3NDUxMzFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ3YAA8wDQYJKoZIhvcNAQELBQADggEBADuscbKf12Sq
EZmGo4RvfK6bEtoRf9QkjoK/NjQOxcii7LkdxG5+OlWSgqlXnF4N+wSSBR5wMT2k
rSs+YWGlNvqFo+F375kdDSKTVeA0Rhk8M684evzpbOrRJ+O7KK5Ejn+X9Bqpye+p
TWkZXR7yzeKl0CmR8ciESlQUo97W2mryv9vvR9PjZDbDZFyPGNwhKGrM0LPPzzOw
n602ejFh5cumuCYsYT077r+KSY3EVg07HVGN9QoUfjAU0F8W+aoYoq3iaVHUvMt4
jsqZZELjTDie/LdG32lxs3X1bct01GqVBSOWYopgLfu6az03iLGariJk0OSGk/fg
9LmySzfeUew=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:30 2024 by rpki-client on console-ams.rpki-client.org