Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/10F5B064AD5011EF9E078283C4F9AE02.roa
File: 10F5B064AD5011EF9E078283C4F9AE02.roa (raw, json)
Hash identifier: ForFFpsnGwNrhgk3tSZoi1wtXywwT4sKaOiLg9r1M+U=
Subject key identifier: 04:06:90:F3:51:A4:D5:95:DC:09:98:5B:54:F7:68:C8:78:52:6B:41
Certificate issuer: /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34
Certificate serial: 3F
Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/10F5B064AD5011EF9E078283C4F9AE02.roa
Signing time: Thu 28 Nov 2024 06:14:47 +0000
ROA not before: Thu 28 Nov 2024 06:14:47 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 38520
IP address blocks: 2404:7f40::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 30 Nov 2024 05:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCF44
Validity
Not Before: Nov 28 06:14:47 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67480a56-d35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:5d:1c:4d:2c:ef:80:a6:35:27:84:71:51:
be:6e:2c:cc:d7:38:87:a3:8f:8b:82:fb:36:83:18:
4c:22:8d:6f:a5:bd:4f:f5:13:90:e7:d3:c5:f2:68:
49:a5:05:9e:30:82:72:42:b4:8c:69:5b:86:35:b3:
ee:31:0b:6b:df:7f:cd:23:cc:a2:04:82:d6:38:ff:
e3:65:9c:94:b1:13:44:dd:7a:a6:ad:97:4c:5f:ac:
f4:62:15:eb:38:96:55:d9:5a:e6:e1:9c:9b:9b:9f:
4c:ef:f9:ac:3e:8f:e4:54:13:7e:9a:f3:be:79:91:
47:af:e0:0d:1a:0c:41:30:48:ad:a2:78:e1:7a:58:
15:ce:cf:24:d7:6c:d2:2a:e0:58:cd:6e:20:e5:98:
a9:03:b1:9f:99:c3:7c:ef:93:c1:36:17:29:12:75:
b7:8a:84:99:90:f5:4f:eb:05:e5:23:3e:8f:2e:6b:
bb:d4:1e:ff:d1:23:7b:e5:88:6d:94:0b:45:ba:ff:
d3:5d:63:34:57:cf:33:b6:b4:8c:91:e8:2c:a9:4b:
08:77:80:68:a0:b7:17:0e:98:6a:36:ec:52:bb:5f:
c4:bf:5e:8c:b9:94:d0:52:36:45:74:9f:a3:16:d8:
51:74:a9:c4:8c:a9:02:52:d0:2b:f4:89:92:90:34:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:06:90:F3:51:A4:D5:95:DC:09:98:5B:54:F7:68:C8:78:52:6B:41
X509v3 Authority Key Identifier:
keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/10F5B064AD5011EF9E078283C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:7f40::/32
Signature Algorithm: sha256WithRSAEncryption
01:61:23:bf:bf:86:44:4d:5a:0a:8a:82:39:77:d7:82:7a:c0:
22:1b:ac:3d:e5:d5:41:ff:b8:f0:36:aa:5a:fb:f7:65:9f:57:
ce:56:ce:2e:7b:7f:be:e9:24:e5:c1:7c:e7:00:2d:bd:e1:d1:
d0:09:f5:2f:5c:9b:7b:77:29:c3:a2:f5:b7:2b:70:fd:28:84:
63:90:b6:92:36:98:d2:61:cc:3a:b2:78:cf:80:10:b3:cc:a0:
65:a3:93:85:56:ad:9e:4a:96:a5:e8:99:12:34:e8:75:e6:c4:
70:3c:d0:79:e1:35:0c:50:5d:c7:f2:77:a4:07:4b:c8:79:bb:
31:d9:8a:f2:0c:a9:80:d9:03:39:30:d6:8c:7f:d0:68:a9:3b:
29:24:84:25:98:27:b1:94:6a:ba:74:a7:e5:dd:3e:54:bb:77:
aa:01:5c:c6:b2:42:57:29:02:dd:4f:ef:8a:7b:55:32:e8:49:
75:5a:60:6d:4b:40:a9:d4:c4:22:8a:44:ea:9c:20:07:58:e4:
5c:35:e1:5f:bd:49:e2:3b:b3:99:1a:3c:84:cb:df:61:80:9c:
7e:3a:44:52:ba:f7:f5:ec:be:f6:74:16:4d:ea:1f:8f:b7:e6:
ea:d5:1e:e0:a7:0e:bc:3c:8b:dd:ab:b2:23:b8:83:d3:16:43:
b5:55:f0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:20:36 2025 by rpki-client