Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a343a3a2f34382d3438203d3e203432343237.roa
File: 326130323a356265303a343a3a2f34382d3438203d3e203432343237.roa (raw, json)
Hash identifier: njMjMk+tC2F2Cl3O8cI8n+46Pp/Pjxp5wh5Ui5nXRss=
Subject key identifier: EC:2C:65:EA:86:9F:6F:7A:5F:4E:EC:F7:3B:A7:4B:FA:02:B9:2C:63
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 371367D1E7B7207A942F7343DFF9F9FF9351656B
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a343a3a2f34382d3438203d3e203432343237.roa
Signing time: Thu 17 Aug 2023 08:54:06 +0000
ROA not before: Thu 17 Aug 2023 08:49:06 +0000
ROA not after: Thu 15 Aug 2024 08:54:06 +0000
asID: 42427
IP address blocks: 2a02:5be0:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 17 Aug 2023 10:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:13:67:d1:e7:b7:20:7a:94:2f:73:43:df:f9:f9:ff:93:51:65:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Aug 17 08:49:06 2023 GMT
Not After : Aug 15 08:54:06 2024 GMT
Subject: CN=EC2C65EA869F6F7A5F4EECF73BA74BFA02B92C63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:64:c7:0f:f4:8a:e0:d1:67:a8:9b:d0:55:
a4:25:c7:fa:2c:39:0a:f6:bc:30:3a:7e:ed:87:af:
2d:13:fc:38:94:c8:75:c4:71:18:00:c0:ab:4a:4d:
90:90:3f:a8:9d:cc:25:aa:54:cf:75:68:de:34:bb:
a9:d1:31:52:17:f6:8a:2b:43:5e:5e:dd:13:d2:d5:
75:c0:43:ad:a1:d6:77:81:74:a1:87:33:b7:08:c9:
e2:c2:72:62:d0:e0:58:e0:b5:09:19:4d:e2:fe:82:
0b:56:80:0c:f2:c6:f1:83:29:08:d3:db:de:cc:d1:
5b:ce:f6:d5:2a:45:83:63:e0:17:e3:1c:14:d2:03:
6c:ba:17:b2:9f:82:a6:4f:24:75:57:9b:d6:9d:71:
ae:3e:92:9e:f2:82:07:69:6e:ff:a2:87:43:90:c7:
26:67:34:73:43:b0:13:6a:09:ee:9b:98:23:8d:01:
1e:dd:c7:0f:90:e3:42:9c:da:8d:bf:5a:3d:e5:66:
ec:20:a2:62:c1:f1:d0:69:d3:b1:ca:da:c4:94:a4:
ce:c0:17:ba:3e:95:33:2d:f6:93:5b:09:12:d5:e9:
af:13:a6:c7:1b:0d:31:bb:38:a3:33:58:89:7f:58:
03:87:39:1b:07:8b:2a:5b:e6:c8:e0:ee:d0:91:08:
67:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2C:65:EA:86:9F:6F:7A:5F:4E:EC:F7:3B:A7:4B:FA:02:B9:2C:63
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a343a3a2f34382d3438203d3e203432343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5be0:4::/48
Signature Algorithm: sha256WithRSAEncryption
69:90:b0:c1:1f:2d:79:e0:d3:87:fc:5b:e7:b6:d5:ec:d0:8c:
a4:50:75:38:2c:ab:7c:03:47:5a:9a:6b:c5:ab:e4:90:d4:dc:
b1:d0:f6:ee:ed:14:b1:5c:b1:dd:07:17:2c:73:c9:6b:3a:34:
c3:67:b3:fd:fe:11:7f:08:cd:87:5f:e2:dc:cc:89:9f:e1:2a:
ec:3a:5b:dc:09:d9:30:f1:2e:d7:df:bf:34:9e:8a:7c:08:5d:
a7:86:c4:75:fa:04:46:da:b6:23:9c:c6:10:62:76:2a:7f:e5:
f0:74:63:d1:c1:25:d5:d9:17:f0:bc:0b:9d:c2:4c:06:a1:75:
4f:42:34:1d:ae:34:2e:85:4e:c9:9f:51:fa:96:f0:48:27:cf:
29:4e:75:80:1c:6f:49:f1:5e:cc:58:99:29:0a:1c:fa:87:90:
0e:39:e0:4b:61:f6:ec:55:c0:e1:70:16:f2:02:f0:95:41:60:
29:75:92:ea:4b:5e:cb:db:fb:25:03:b0:94:e7:5a:e2:1b:fb:
5e:c0:9f:22:bf:22:a8:f0:f3:7e:99:da:49:23:74:56:9a:f6:
23:87:f8:5a:03:ac:a4:0c:83:ad:ba:1c:46:c3:9f:17:21:13:
b7:2f:61:fb:08:51:9b:22:9c:7a:a0:1e:92:89:5a:0d:0d:d8:
17:ab:df:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:51 2024 by rpki-client on console-ams.rpki-client.org