Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a326630313a3a2f34382d3438203d3e20313437303230.roa
File: 323430313a323036303a326630313a3a2f34382d3438203d3e20313437303230.roa (raw, json)
Hash identifier: zHjRQy4CHaOINV7bJnG2OlGNSE8WeIlWyKhF7yB98j0=
Subject key identifier: 56:70:51:C5:7F:E9:18:69:3D:52:CE:76:B1:E1:F0:CF:B8:E6:E2:41
Certificate issuer: /CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
Certificate serial: 76C4D7B74FE54A995D684D948E439C0178CC3324
Authority key identifier: 62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a326630313a3a2f34382d3438203d3e20313437303230.roa
Signing time: Wed 10 Apr 2024 22:54:55 +0000
ROA not before: Wed 10 Apr 2024 22:49:55 +0000
ROA not after: Wed 09 Apr 2025 22:54:55 +0000
asID: 147020
IP address blocks: 2401:2060:2f01::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Jun 2024 22:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:c4:d7:b7:4f:e5:4a:99:5d:68:4d:94:8e:43:9c:01:78:cc:33:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
Validity
Not Before: Apr 10 22:49:55 2024 GMT
Not After : Apr 9 22:54:55 2025 GMT
Subject: CN=567051C57FE918693D52CE76B1E1F0CFB8E6E241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:21:bf:b9:9e:fc:da:00:21:b5:e9:b5:54:
3b:00:5a:cd:98:9d:cf:02:4e:fb:c4:c7:c5:6e:17:
e2:71:e7:d9:f8:db:83:c2:d4:e4:3d:80:2d:d7:11:
9d:37:19:5b:67:46:4d:61:39:d7:fc:a8:8f:69:bf:
bf:8c:3c:05:a5:40:a8:94:2b:ad:18:be:84:ca:9f:
df:42:76:78:50:aa:98:11:19:44:ec:7b:2b:1a:73:
30:87:da:64:e0:87:bb:c8:bd:d4:23:3f:18:2c:c4:
7d:7a:25:71:55:cc:ad:84:94:6a:58:01:5c:80:08:
d5:e6:98:cc:40:3c:02:42:2f:4d:db:66:6b:8a:6b:
4c:19:a7:a9:49:ad:d2:14:60:65:eb:00:71:e9:b9:
cb:3d:35:8b:be:da:30:06:a7:dd:8c:60:f9:4c:3a:
0b:32:27:d1:4d:70:f4:9e:0e:69:cf:f4:e4:84:38:
b5:2e:9e:da:21:de:0f:3e:fc:40:48:e7:fe:42:11:
39:aa:ef:06:12:02:27:78:d3:08:f9:f2:69:2f:10:
fc:0b:79:70:e1:99:3c:96:2d:34:45:c6:bc:a2:e1:
3d:2b:f2:b7:b0:dc:0b:74:c9:ec:85:ee:2e:99:aa:
a0:fb:56:b9:5a:8f:62:1c:bc:b5:5f:34:3b:f2:ff:
61:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:70:51:C5:7F:E9:18:69:3D:52:CE:76:B1:E1:F0:CF:B8:E6:E2:41
X509v3 Authority Key Identifier:
keyid:62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a326630313a3a2f34382d3438203d3e20313437303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:2060:2f01::/48
Signature Algorithm: sha256WithRSAEncryption
73:6c:96:59:89:3f:ed:c5:fb:2d:70:0a:b2:f9:4d:61:45:ee:
87:7d:a3:8c:25:da:27:d2:86:a4:b2:c9:d1:6c:8a:52:6d:b9:
c7:48:bb:63:77:4f:fd:ab:6a:4d:c6:ee:9f:78:fb:de:90:33:
f7:54:5e:37:0a:36:37:b1:15:2b:1c:b2:f3:fb:96:17:fc:e5:
35:57:8c:2c:0a:68:bc:3b:f9:8c:65:3f:4d:1b:b3:12:d0:a6:
59:6f:7b:f1:04:a8:71:d2:b3:5d:e7:e7:fc:d1:b7:66:bb:d1:
c9:89:b7:d1:b1:db:bf:f6:b9:f0:79:9a:b8:03:18:18:8e:4a:
66:de:00:12:5e:fa:a9:54:7e:ff:c1:6b:54:85:e8:e1:3e:2d:
2a:af:73:8e:71:0a:c8:d1:bd:ad:58:c3:dc:ff:82:10:33:bd:
c7:e9:9c:cb:08:88:d9:a8:eb:d3:b6:98:a0:1e:83:eb:e4:b0:
18:6e:0b:af:6e:08:fe:10:80:04:4e:0b:88:a6:3f:56:07:f7:
c1:7a:41:0f:d7:00:fe:20:1b:90:ac:a3:98:a7:ed:08:22:ce:
27:af:57:0f:20:44:7d:bf:b7:ad:21:25:c4:21:89:21:ea:0d:
c5:66:73:d9:eb:33:a2:28:d5:43:8a:18:bf:7c:f5:0e:3d:68:
16:3b:f3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:05:31 2024 by rpki-client on console-fra.rpki-client.org