Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/0C144B30581711EE8B6B9354C4F9AE02.roa
File: 0C144B30581711EE8B6B9354C4F9AE02.roa (raw, json)
Hash identifier: yjpmBWWrFUHT859rNvnz7pwtBjT3Mj/o4qD1NEOXNiM=
Subject key identifier: 3B:40:C7:E1:42:5D:33:FD:71:AF:41:77:7B:16:D8:7F:4F:6D:9A:67
Certificate issuer: /CN=A91E8DF5/serialNumber=029649105BEF3C16B764C83E0121F63BF5032CAA
Certificate serial: 68
Authority key identifier: 02:96:49:10:5B:EF:3C:16:B7:64:C8:3E:01:21:F6:3B:F5:03:2C:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ApZJEFvvPBa3ZMg-ASH2O_UDLKo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/0C144B30581711EE8B6B9354C4F9AE02.roa
Signing time: Thu 21 Sep 2023 00:37:31 +0000
ROA not before: Thu 21 Sep 2023 00:37:31 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 945
IP address blocks: 2001:df2:45c0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8DF5/serialNumber=029649105BEF3C16B764C83E0121F63BF5032CAA
Validity
Not Before: Sep 21 00:37:31 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=650b904a-9fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:69:2d:43:38:a9:dd:67:27:fa:cc:41:4c:c0:
c1:bb:6b:af:e4:6a:1b:13:2d:86:e9:4a:85:80:f8:
07:ea:67:90:7b:cd:2e:e5:c6:fe:a6:8c:eb:6f:de:
95:62:c5:06:89:71:cd:30:7b:b0:90:ba:32:72:75:
72:27:ac:48:5e:01:40:65:ba:af:95:aa:8d:7c:aa:
d2:db:93:c3:38:81:78:00:d8:9d:f4:34:65:0f:d9:
d5:4f:5c:b6:ba:27:ee:64:ad:25:54:1c:85:74:fa:
b9:a2:57:04:b0:7d:01:9f:a5:7e:d0:1f:ac:a2:2d:
df:ed:76:77:7b:af:55:d6:cb:9c:39:de:90:f0:66:
02:4e:17:8b:96:42:bd:9f:35:a1:b4:db:07:86:a6:
42:2a:19:2b:2b:8a:26:d8:b0:29:c6:d0:ec:2b:aa:
88:02:69:7c:f3:40:b4:0e:03:72:e4:7e:30:00:ae:
7b:d7:b3:3c:a6:c9:80:8e:da:7b:76:a5:cc:27:ac:
f1:5d:29:9e:25:d0:1a:d5:b2:be:2f:7e:55:11:81:
87:33:cf:b1:a1:11:a8:13:67:43:ea:a5:66:03:78:
65:44:d8:e3:0a:9a:57:9e:51:60:56:44:db:61:8e:
0e:68:f7:2e:bf:9a:73:73:2a:58:a5:1d:a1:2b:f5:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:40:C7:E1:42:5D:33:FD:71:AF:41:77:7B:16:D8:7F:4F:6D:9A:67
X509v3 Authority Key Identifier:
keyid:02:96:49:10:5B:EF:3C:16:B7:64:C8:3E:01:21:F6:3B:F5:03:2C:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/ApZJEFvvPBa3ZMg-ASH2O_UDLKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ApZJEFvvPBa3ZMg-ASH2O_UDLKo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/0C144B30581711EE8B6B9354C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:45c0::/48
Signature Algorithm: sha256WithRSAEncryption
c2:f3:2d:43:09:76:2e:46:fb:a7:b2:67:29:75:7b:c0:d7:67:
86:cd:3b:7d:e8:b0:e3:83:40:85:41:26:7a:0e:cf:2d:38:25:
09:fb:be:64:9a:91:d5:66:78:0a:f4:2f:49:49:dc:40:b4:10:
57:13:70:25:28:e6:23:de:ba:dc:e2:a2:96:ee:e5:6b:2b:da:
8f:1b:54:2b:b3:8b:0c:98:40:94:10:5f:ce:d1:f5:5a:e2:91:
0c:2d:97:73:04:bb:43:ed:65:16:50:90:1c:46:29:8a:92:e0:
ce:f5:7f:97:8e:69:71:fd:a2:9e:e2:0f:01:c4:6a:65:00:44:
12:2a:f0:36:d0:66:40:45:db:34:d3:e0:7b:37:15:a6:38:1d:
30:8c:21:38:ac:42:96:20:94:93:ad:ba:d8:70:d4:5d:b7:0e:
0a:83:aa:3d:7c:b0:cc:4c:a2:e5:ee:4e:20:85:54:5e:d8:f9:
b1:77:11:4e:b8:32:e6:d1:47:e8:ec:6a:63:24:43:d1:33:c5:
3a:1b:bb:2a:55:07:1b:5c:07:d5:d4:98:92:89:26:cf:e6:7a:
77:c6:f4:6a:4a:68:80:93:d2:bf:d7:ea:51:a6:e8:5a:15:1f:
7d:35:ea:df:b2:74:23:68:24:6b:ac:fa:1f:b6:c8:54:24:33:
1f:f2:29:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 8 22:15:25 2023 by rpki-client on console-fra.rpki-client.org