Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a323030303a3a2f33362d3336203d3e20313437303230.roa
File: 323430313a323036303a323030303a3a2f33362d3336203d3e20313437303230.roa (raw, json)
Hash identifier: nqu2FMfFuiX4Iyy+V5SRDwVzwN2OjWoO2awUFDd4Dfc=
Subject key identifier: 48:47:5F:BD:26:5C:26:6B:97:19:ED:50:2E:46:30:1E:DD:EF:19:E8
Certificate issuer: /CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
Certificate serial: 23F9257A1BA985869B67EA05CFC5A3B04F7004E7
Authority key identifier: 62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a323030303a3a2f33362d3336203d3e20313437303230.roa
Signing time: Mon 27 Nov 2023 09:34:20 +0000
ROA not before: Mon 27 Nov 2023 09:29:20 +0000
ROA not after: Mon 25 Nov 2024 09:34:20 +0000
asID: 147020
IP address blocks: 2401:2060:2000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sat 01 Jun 2024 22:05:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f9:25:7a:1b:a9:85:86:9b:67:ea:05:cf:c5:a3:b0:4f:70:04:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
Validity
Not Before: Nov 27 09:29:20 2023 GMT
Not After : Nov 25 09:34:20 2024 GMT
Subject: CN=48475FBD265C266B9719ED502E46301EDDEF19E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:24:34:e7:ae:8d:27:94:be:bc:f7:14:34:9c:
ce:19:59:e2:00:95:ca:bd:53:18:72:57:9f:59:2b:
d5:c3:c0:54:18:49:d8:2c:71:eb:70:39:73:17:67:
6b:b6:ed:99:bb:56:12:0c:54:68:f6:15:7d:9e:8c:
62:cc:54:f8:0d:a7:08:a4:a2:b1:57:e3:dc:e8:bc:
86:f3:db:48:a1:08:b8:b2:e1:df:90:ca:8a:23:bd:
d2:d0:f2:9e:12:f7:0a:bc:c0:97:cc:42:7d:4e:a6:
87:72:50:81:62:22:b2:c0:d3:7d:0d:22:bb:c1:08:
38:13:39:8f:48:f9:ec:65:28:0c:92:a9:6b:ae:d8:
c5:17:ac:5d:79:48:ab:5d:32:fb:7c:a2:f9:09:1d:
9b:95:fa:30:97:a1:b5:61:08:46:21:fa:2e:7b:76:
50:75:10:c4:01:87:a2:4c:2d:c8:c9:66:c7:ab:69:
c2:c7:30:12:fc:c1:cc:76:fc:f0:fc:80:41:c1:18:
ef:ad:c7:57:d4:b2:f9:61:7d:18:19:3f:bb:49:a7:
f1:52:f3:a7:1a:5b:53:9c:6a:6c:5f:84:be:d3:96:
49:c1:fb:fc:86:bc:99:85:52:8f:d0:fb:c7:53:8b:
ff:21:e2:7b:3e:78:8b:be:4a:79:70:01:b0:55:40:
98:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:47:5F:BD:26:5C:26:6B:97:19:ED:50:2E:46:30:1E:DD:EF:19:E8
X509v3 Authority Key Identifier:
keyid:62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a323030303a3a2f33362d3336203d3e20313437303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:2060:2000::/36
Signature Algorithm: sha256WithRSAEncryption
5a:ee:c9:c3:63:1e:d9:e6:52:01:30:b2:81:e9:20:7f:6c:3c:
af:cb:dd:cc:be:43:e5:a1:a2:8e:3d:d6:20:70:1a:92:78:72:
c6:4e:16:03:41:d5:a6:81:1f:10:f2:63:38:da:d2:96:ba:98:
8d:fd:10:f7:9d:27:d6:fa:03:ff:ac:84:f9:51:a7:59:74:ea:
93:d1:f7:4e:96:8d:38:36:b8:2e:83:80:bf:53:ef:b3:70:63:
bd:c8:92:38:b5:7f:44:e9:ad:0c:e2:3b:89:dc:6a:29:e7:4e:
f8:d4:60:a9:ce:b6:94:b7:ce:06:f6:04:b5:5c:5f:d7:99:a8:
cb:ad:94:43:c5:f7:21:a9:33:ad:9d:f1:f3:65:ed:5e:20:23:
dc:54:45:0c:36:e9:28:47:82:e4:4b:e2:2e:11:83:47:dd:c4:
eb:ca:62:44:53:30:6a:d8:ff:37:16:62:5f:21:75:f5:b1:05:
54:40:f1:f8:08:1f:46:a8:a7:ba:7a:2f:9f:f3:31:86:e0:41:
36:01:cf:ee:8d:eb:f2:df:a3:db:72:a8:81:42:18:e1:09:c4:
73:cc:3c:bb:6d:d9:8b:01:e9:ae:ff:aa:d8:6a:68:02:56:b9:
58:32:b9:6c:3e:c6:8a:23:39:ce:f2:2d:dc:2c:16:d7:ba:a8:
ee:4f:01:69
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUI/klehuphYabZ+oFz8WjsE9wBOcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNTBFNEQwMDAwMTEwLwYDVQQFEyg2MjI4QTNDNkQ2
Mzc4MDE2OTJGN0Q3RDQ4MjUxREFEMzZBM0NEQjdGMB4XDTIzMTEyNzA5MjkyMFoX
DTI0MTEyNTA5MzQyMFowMzExMC8GA1UEAxMoNDg0NzVGQkQyNjVDMjY2Qjk3MTlF
RDUwMkU0NjMwMUVEREVGMTlFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANwkNOeujSeUvrz3FDSczhlZ4gCVyr1TGHJXn1kr1cPAVBhJ2Cxx63A5cxdn
a7btmbtWEgxUaPYVfZ6MYsxU+A2nCKSisVfj3Oi8hvPbSKEIuLLh35DKiiO90tDy
nhL3CrzAl8xCfU6mh3JQgWIissDTfQ0iu8EIOBM5j0j57GUoDJKpa67YxResXXlI
q10y+3yi+Qkdm5X6MJehtWEIRiH6Lnt2UHUQxAGHokwtyMlmx6tpwscwEvzBzHb8
8PyAQcEY763HV9Sy+WF9GBk/u0mn8VLzpxpbU5xqbF+EvtOWScH7/Ia8mYVSj9D7
x1OL/yHiez54i75KeXABsFVAmN8CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRIR1+9
Jlwma5cZ7VAuRjAe3e8Z6DAfBgNVHSMEGDAWgBRiKKPG1jeAFpL319SCUdrTajzb
fzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE1MEU0RDAwMDAvMC82MjI4QTND
NkQ2Mzc4MDE2OTJGN0Q3RDQ4MjUxREFEMzZBM0NEQjdGLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZaWlqeHRZM2dC
YVM5OWZVZ2xIYTAybzgyMzguY2VyMIGYBggrBgEFBQcBCwSBizCBiDCBhQYIKwYB
BQUHMAuGeXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkx
NTBFNEQwMDAwLzAvMzIzNDMwMzEzYTMyMzAzNjMwM2EzMjMwMzAzMDNhM2EyZjMz
MzYyZDMzMzYyMDNkM2UyMDMxMzQzNzMwMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCQBIGAgMA0G
CSqGSIb3DQEBCwUAA4IBAQBa7snDYx7Z5lIBMLKB6SB/bDyvy93MvkPloaKOPdYg
cBqSeHLGThYDQdWmgR8Q8mM42tKWupiN/RD3nSfW+gP/rIT5UadZdOqT0fdOlo04
Nrgug4C/U++zcGO9yJI4tX9E6a0M4juJ3Gop50741GCpzraUt84G9gS1XF/XmajL
rZRDxfchqTOtnfHzZe1eICPcVEUMNukoR4LkS+IuEYNH3cTrymJEUzBq2P83FmJf
IXX1sQVUQPH4CB9GqKe6ei+f8zGG4EE2Ac/ujevy36PbcqiBQhjhCcRzzDy7bdmL
Aemu/6rYamgCVrlYMrlsPsaKIznO8i3cLBbXuqjuTwFp
-----END CERTIFICATE-----
Generated at Sat Jun 1 23:05:31 2024 by rpki-client on console-fra.rpki-client.org