Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a343a3a2f34382d3438203d3e203136353039.roa
File: 326130323a356265303a343a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier: 18u6Aaghhe1BXy40UPS8rP0yFsJIV04SHQR0M+bZoIM=
Subject key identifier: C7:85:F5:8A:51:93:0B:75:9F:05:60:D6:29:2D:61:EE:6D:3D:8B:39
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 291743DE033D95C37ACEC7AC92BFD308DC356E86
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a343a3a2f34382d3438203d3e203136353039.roa
Signing time: Thu 17 Aug 2023 08:54:15 +0000
ROA not before: Thu 17 Aug 2023 08:49:15 +0000
ROA not after: Thu 15 Aug 2024 08:54:15 +0000
asID: 16509
IP address blocks: 2a02:5be0:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 17 Aug 2023 10:06:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:17:43:de:03:3d:95:c3:7a:ce:c7:ac:92:bf:d3:08:dc:35:6e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Aug 17 08:49:15 2023 GMT
Not After : Aug 15 08:54:15 2024 GMT
Subject: CN=C785F58A51930B759F0560D6292D61EE6D3D8B39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:bb:bb:52:ae:28:63:ac:04:bf:9e:75:d2:
97:0a:79:03:a9:4d:ce:07:89:7f:ce:a7:64:75:a1:
5b:75:7c:7d:e2:00:08:53:6b:8d:d2:f7:a5:16:73:
28:3f:34:1f:2a:de:ab:6b:e5:af:68:a2:bc:1c:4e:
38:b3:2a:ee:6e:57:d6:4b:29:7d:45:78:24:8a:85:
e9:11:b5:74:c2:b8:20:78:6f:2d:90:6f:e7:8e:d9:
60:b3:88:a4:78:68:f3:25:52:16:6e:14:02:6e:65:
24:c9:b2:8d:ab:0c:bf:3e:d3:4a:3c:4e:8f:5d:d8:
bd:c9:e7:85:9f:1a:6b:f5:ea:71:09:c6:44:76:aa:
df:ce:72:44:d3:3b:f9:4e:78:e2:e3:12:51:d8:7b:
bb:f0:f4:d5:2b:77:fe:59:a4:59:32:90:b4:06:2c:
40:81:62:0a:af:d0:fc:43:be:f9:8c:3f:b2:4b:9d:
d5:ef:f2:49:a4:03:47:4f:19:85:3d:5d:2f:f7:54:
23:44:62:09:68:f7:2e:9c:c3:42:3d:8d:38:8e:1a:
57:5a:c3:f1:37:a6:3e:c6:b1:e5:a3:98:7f:cd:4c:
95:1e:b5:03:ac:33:60:49:84:09:8d:29:af:4a:44:
13:8c:5b:af:44:22:48:14:6b:07:02:56:16:12:61:
fd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:85:F5:8A:51:93:0B:75:9F:05:60:D6:29:2D:61:EE:6D:3D:8B:39
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a343a3a2f34382d3438203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5be0:4::/48
Signature Algorithm: sha256WithRSAEncryption
33:8a:a1:75:bf:3f:0a:b4:99:ca:49:68:5e:4c:85:44:e2:56:
1f:90:bb:1a:0f:82:7c:e2:c8:79:1c:8a:5c:1a:40:4a:ea:f5:
f3:65:63:f8:4a:03:4c:02:eb:18:7e:da:f6:de:fe:1a:b7:b0:
18:6d:0b:a4:eb:9e:e2:9e:5c:6b:a6:2c:b4:51:25:1f:69:61:
e1:3e:21:29:29:cb:80:3e:47:60:65:5e:1d:51:1f:43:2d:bd:
bd:30:6f:bc:ef:15:8a:ee:b9:f3:c4:1f:bf:a5:32:f1:ce:fb:
7c:9f:6a:12:2b:56:bf:cd:1b:cc:29:5c:cf:59:7e:aa:bb:26:
6a:64:2d:18:d2:55:f8:9b:fc:b5:c7:df:26:20:72:3e:48:08:
6e:d9:98:0f:d4:c5:3d:06:3c:6a:bc:c6:62:8c:48:e3:78:0c:
d9:af:a4:a9:8a:46:65:4a:73:d6:0b:ae:e8:4f:a5:d7:70:59:
0d:a8:af:96:ed:2d:96:92:da:10:ea:63:64:a0:da:b8:47:02:
2c:6d:a2:e9:c0:b8:e0:cc:bb:cf:9e:43:63:8f:25:df:97:18:
70:61:2a:cd:b5:42:f2:85:de:5c:39:c7:18:0a:cf:69:c9:d4:
58:4f:ab:d7:a1:29:b1:7a:7d:b9:17:2b:f5:74:ad:ce:10:0d:
58:f4:99:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:51 2024 by rpki-client on console-ams.rpki-client.org