Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a326666313a3a2f34382d3438203d3e20313437303230.roa
File: 323430313a323036303a326666313a3a2f34382d3438203d3e20313437303230.roa (raw, json)
Hash identifier: y1S158nhPS7JVr7vT8DlNzGrwqGuVvu0lHun/155XRs=
Subject key identifier: FD:5D:64:77:9B:F0:E9:20:D5:A4:47:58:1C:47:43:1B:BE:39:3E:17
Certificate issuer: /CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
Certificate serial: 3B3AFA7B02AA4316E39B39A514E0BF07AAFDB3D8
Authority key identifier: 62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a326666313a3a2f34382d3438203d3e20313437303230.roa
Signing time: Wed 10 Apr 2024 22:55:07 +0000
ROA not before: Wed 10 Apr 2024 22:50:07 +0000
ROA not after: Wed 09 Apr 2025 22:55:07 +0000
asID: 147020
IP address blocks: 2401:2060:2ff1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Jun 2024 22:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:3a:fa:7b:02:aa:43:16:e3:9b:39:a5:14:e0:bf:07:aa:fd:b3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
Validity
Not Before: Apr 10 22:50:07 2024 GMT
Not After : Apr 9 22:55:07 2025 GMT
Subject: CN=FD5D64779BF0E920D5A447581C47431BBE393E17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:5f:0a:b2:55:e5:7f:66:c5:3a:f2:af:80:
06:22:e4:fa:f0:40:39:c4:ae:89:60:aa:44:ec:fc:
de:2c:87:59:00:03:82:61:d1:25:8a:55:a1:e4:b1:
23:a7:f1:79:bb:e1:2c:fe:25:ae:c4:08:2d:2e:16:
c4:15:b9:88:6f:de:32:90:a5:0c:bf:a9:14:6d:be:
cc:2b:03:10:f9:fa:dd:aa:5c:b1:24:a2:bf:c4:70:
72:52:da:94:75:ed:1b:85:5d:de:d6:8f:f5:c6:64:
3c:8b:26:ea:e8:bd:7d:9a:41:46:00:ca:3a:95:f0:
23:04:0f:95:8f:36:67:38:08:16:70:27:99:32:36:
e0:32:4b:86:da:75:cd:47:0c:0c:60:4f:fb:9d:77:
8c:a6:05:bf:c6:41:23:d3:0d:2a:ff:08:08:a7:85:
d3:bf:8d:3f:1e:4a:b7:9f:6e:5a:5a:ca:09:23:39:
46:1f:56:f7:e1:3e:3f:32:29:7d:f4:93:80:93:c3:
45:48:9a:16:47:68:a2:c4:e8:9d:2b:16:f6:50:d8:
a7:a5:c2:7e:fa:33:92:e4:e3:9f:99:c2:91:c1:42:
e0:04:5e:95:c0:89:48:7e:94:42:79:8d:66:98:36:
23:1a:dc:8b:e8:17:91:48:5d:c0:ad:e3:dd:b8:aa:
8b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5D:64:77:9B:F0:E9:20:D5:A4:47:58:1C:47:43:1B:BE:39:3E:17
X509v3 Authority Key Identifier:
keyid:62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a326666313a3a2f34382d3438203d3e20313437303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:2060:2ff1::/48
Signature Algorithm: sha256WithRSAEncryption
40:63:09:26:4c:4b:35:c1:32:fb:9f:71:0f:84:8a:92:f4:08:
84:74:5e:a6:be:77:aa:a5:36:ae:75:f3:02:2a:88:de:98:99:
20:f4:45:0c:47:92:5e:54:87:92:f4:d7:6c:35:84:37:64:f5:
48:c0:6a:48:c2:71:72:dc:42:15:df:24:f6:5c:27:72:ae:76:
44:1c:c2:0b:52:f5:01:5f:2a:bf:66:a5:0f:17:73:da:2e:24:
d7:f6:dc:89:65:5c:1d:15:f6:65:2d:db:b1:8a:4f:9e:f1:73:
46:53:88:4d:75:eb:fd:c1:dd:4c:af:88:6c:3a:22:5b:36:8a:
a6:e3:79:8e:ad:d5:e8:92:39:83:40:54:10:42:7f:6e:d1:2d:
a8:e8:58:ad:e9:ef:93:65:4a:08:0f:18:b0:82:c4:43:4b:b2:
82:8e:01:18:47:18:87:ed:41:c5:af:93:7d:3c:2f:5e:05:6a:
28:7b:da:1a:4b:cb:25:b5:f9:d8:0c:6b:c3:50:25:2c:dd:e2:
0a:d0:86:cb:2c:5c:72:c4:fb:e0:0c:34:1a:cd:07:61:68:7d:
08:be:fe:e8:eb:20:7e:5b:e4:e5:c5:43:10:d2:48:61:77:fb:
10:67:a6:f6:bf:29:78:57:01:77:df:06:93:a7:5b:84:85:87:
71:2e:60:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:05:31 2024 by rpki-client on console-fra.rpki-client.org