Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/3E0E4C3A636F11EFB3362B4DC4F9AE02.roa
File: 3E0E4C3A636F11EFB3362B4DC4F9AE02.roa (raw, json)
Hash identifier: Ur+24j4wPQdw2dJQTbZo2OQyePV5PAm9eA1l/sZZoz4=
Subject key identifier: BE:8C:76:9C:05:57:7E:4A:3D:A9:0E:F6:52:C1:84:0C:24:4D:53:7C
Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial: 3579
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/3E0E4C3A636F11EFB3362B4DC4F9AE02.roa
Signing time: Mon 26 Aug 2024 05:51:30 +0000
ROA not before: Mon 26 Aug 2024 05:51:30 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 203
IP address blocks: 2406:6400:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 02 Oct 2024 09:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13689 (0x3579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Validity
Not Before: Aug 26 05:51:30 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66cc17e2-fb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:f0:02:76:0f:c6:20:a1:f3:d7:35:cc:43:c0:
fd:13:d5:1c:16:92:13:8a:b3:4b:37:49:6c:c2:82:
87:f7:ea:88:aa:15:a8:22:61:0b:99:a0:5d:d0:7e:
b1:71:92:d5:be:ac:fd:ef:dc:39:8c:f3:dd:2f:e3:
36:a9:4a:b5:35:c8:74:56:83:0b:ba:5b:28:2a:d7:
0b:df:47:53:df:ba:9f:58:9a:e1:50:8c:ea:93:ce:
2c:0e:e8:c8:5e:06:02:64:fc:fb:29:c2:a1:4a:6d:
8e:cc:2e:44:64:b0:aa:d6:e3:a0:b0:93:29:03:9d:
ca:2a:34:32:9b:51:44:42:e3:a5:f6:b7:23:38:63:
56:14:70:0f:46:b6:48:99:87:44:da:36:cc:e2:46:
82:2a:0d:df:95:c8:36:ae:6b:14:aa:1a:8f:e7:b6:
0e:bd:b8:47:9b:4a:d3:39:72:fb:a3:60:68:6d:a5:
bd:07:b7:ba:02:4f:16:03:15:4f:f0:c4:c4:84:16:
43:da:f3:b4:23:7e:b4:e6:27:19:37:39:96:42:61:
5c:40:74:4d:97:6b:58:04:cd:23:7c:cf:05:e3:25:
05:7b:65:13:83:b8:1c:ec:7d:bf:b6:2b:f9:a4:f2:
90:5f:5f:5e:b5:88:ad:bc:e2:f5:42:c9:95:87:fa:
b0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8C:76:9C:05:57:7E:4A:3D:A9:0E:F6:52:C1:84:0C:24:4D:53:7C
X509v3 Authority Key Identifier:
keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/3E0E4C3A636F11EFB3362B4DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:6400:1000::/48
Signature Algorithm: sha256WithRSAEncryption
33:d6:27:97:a4:23:6a:50:83:2a:7f:5b:a5:d9:d3:40:29:17:
c1:e5:a0:7a:2d:12:77:e1:cc:84:5b:82:89:78:6e:72:1d:7f:
11:f4:ba:86:33:c4:97:65:ae:d6:47:9b:36:c2:6d:2a:0f:e1:
ba:2a:ff:c5:35:d6:e4:14:38:c0:97:90:c1:8a:49:de:36:43:
92:e4:e2:36:e9:ce:cd:9f:6f:51:85:22:8a:98:99:ca:b6:63:
e8:11:b6:68:8d:90:50:a4:bd:fb:6b:23:17:23:f4:43:c7:31:
71:42:87:94:b2:50:62:b9:7e:39:ae:ed:dc:f7:b4:0d:7c:3f:
f0:f5:f3:7f:e9:d9:04:b6:b1:bf:bf:2a:6f:1c:79:47:06:41:
56:d3:e1:13:66:f6:03:b9:85:de:df:ec:df:a5:73:cc:30:c1:
61:52:de:2c:20:76:59:c4:5c:0d:65:7e:2e:d2:14:8f:38:fb:
7c:69:c1:de:e6:a8:3d:4e:2b:c3:c2:3b:91:29:e0:28:ab:14:
a3:62:fa:12:bf:76:e5:fa:ed:9e:c2:e2:b2:6f:b8:84:f9:85:
20:50:8b:3f:75:8e:4c:8e:e1:dc:a7:50:b9:18:15:d2:2a:c1:
32:76:e7:cf:e9:31:c7:34:38:04:55:1a:7f:73:7d:c8:dc:18:
49:10:f4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 14:01:01 2024 by rpki-client on console-ams.rpki-client.org