Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a326630303a3a2f34382d3438203d3e20313437303230.roa
File: 323430313a323036303a326630303a3a2f34382d3438203d3e20313437303230.roa (raw, json)
Hash identifier: VVfpJFldzwkHDZLJT6q0OZmaE083dTBl8aJjxwi+wQ0=
Subject key identifier: 08:BB:3C:1B:83:15:80:0A:3C:0F:13:A1:C6:1A:79:33:91:D1:75:CB
Certificate issuer: /CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
Certificate serial: 53BB734C0514884E5A056C83E9B79F3A107D1779
Authority key identifier: 62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a326630303a3a2f34382d3438203d3e20313437303230.roa
Signing time: Wed 10 Apr 2024 22:54:38 +0000
ROA not before: Wed 10 Apr 2024 22:49:38 +0000
ROA not after: Wed 09 Apr 2025 22:54:38 +0000
asID: 147020
IP address blocks: 2401:2060:2f00::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Jun 2024 22:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:bb:73:4c:05:14:88:4e:5a:05:6c:83:e9:b7:9f:3a:10:7d:17:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
Validity
Not Before: Apr 10 22:49:38 2024 GMT
Not After : Apr 9 22:54:38 2025 GMT
Subject: CN=08BB3C1B8315800A3C0F13A1C61A793391D175CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:a3:9e:80:40:64:8f:b5:4d:0a:b7:42:a1:
bb:04:e7:a9:84:ef:96:10:d2:8c:b9:56:83:e3:56:
97:77:0f:93:68:62:4c:3d:50:db:d2:a4:ee:29:ce:
30:13:fb:a4:76:34:a9:37:fc:27:08:19:3f:19:66:
1a:b0:6e:6d:d9:47:a4:80:44:38:65:56:54:1b:23:
12:ca:b9:1f:73:ce:3d:a7:59:ff:6a:68:99:b8:6f:
54:5c:8f:fd:39:4a:58:2e:95:75:66:ab:fa:b4:4b:
5e:af:18:d1:c5:46:de:41:e1:3f:f5:77:9b:a0:a4:
a7:d5:cf:a6:e7:4c:d1:cf:d2:b1:f8:f0:5d:51:15:
87:0e:6f:53:4d:c3:f2:9d:0b:54:05:3e:b9:ba:2c:
4d:ad:86:3c:08:0a:0b:e9:40:4b:8b:3c:55:0f:f6:
40:b8:5b:6e:17:9e:e1:91:7f:f1:04:20:f5:c9:bf:
94:f0:b2:f0:cf:68:f1:ad:03:e0:ba:8c:f5:74:15:
df:30:17:ff:ab:b5:c9:30:ca:98:bd:3d:82:e5:38:
11:2b:ac:88:62:ed:42:c2:e6:f1:01:e1:0f:4a:0e:
07:8c:95:6d:f5:d6:41:5e:4e:a0:66:c4:77:ee:32:
df:3a:11:47:f0:eb:ff:54:22:02:52:6c:b4:53:72:
a5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BB:3C:1B:83:15:80:0A:3C:0F:13:A1:C6:1A:79:33:91:D1:75:CB
X509v3 Authority Key Identifier:
keyid:62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a326630303a3a2f34382d3438203d3e20313437303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:2060:2f00::/48
Signature Algorithm: sha256WithRSAEncryption
58:10:03:8e:18:62:1d:7c:54:dd:5b:59:08:75:b3:4a:10:cd:
ae:d2:1c:37:ba:a0:d3:bc:12:da:c7:89:f5:34:d8:ad:64:e6:
d9:c3:10:f9:77:dc:02:8a:df:ab:97:3c:dc:d8:cb:28:78:a1:
4f:08:3b:10:51:4f:b4:42:36:7d:ed:7c:41:ab:f0:5b:f9:19:
d7:ba:c3:8e:f6:b4:2b:da:cf:a4:b7:79:1e:05:d2:17:5e:e0:
12:81:51:3e:5b:1e:4b:75:bd:eb:9a:1c:71:76:10:9f:8c:dd:
d3:13:89:0b:9b:06:9b:39:63:36:02:fb:16:23:55:69:d2:0a:
48:f9:38:99:3d:02:6d:f5:35:7a:91:db:1e:37:75:2f:43:00:
30:c8:e5:60:79:14:60:9b:88:03:98:28:fb:16:b1:d2:9c:46:
5b:f7:11:0e:de:ee:d7:e5:11:ee:2b:e5:c2:85:7d:e2:bd:3d:
0e:b8:6e:dc:88:d4:94:79:4a:8b:9d:e9:d0:db:dd:51:62:f9:
f4:c4:cc:70:38:0a:4f:9d:f2:c8:83:a5:87:27:26:26:28:95:
82:4b:50:18:cc:2f:1d:42:4d:00:47:d9:ed:8e:71:af:c1:ef:
1c:36:e8:5f:5c:ff:8a:0f:6e:ca:c9:ce:2e:f0:cf:8a:f0:77:
8a:f0:84:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:26:13 2024 by rpki-client on console-ams.rpki-client.org