Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/0F49E2DA704011ECBD6F2E5BC4F9AE02.roa
File: 0F49E2DA704011ECBD6F2E5BC4F9AE02.roa (raw, json)
Hash identifier: MgQ3C4J8qtzsslJdaw2WAhmbrji7ScjX1M71Z3bNCnY=
Subject key identifier: 47:AC:12:D1:F1:D7:F3:D6:9E:45:87:BF:16:BE:14:D8:88:92:30:A1
Certificate issuer: /CN=A911662A/serialNumber=D3E475DE9BA7B7372BD1936A906E86697C7EA33B
Certificate serial: 040F
Authority key identifier: D3:E4:75:DE:9B:A7:B7:37:2B:D1:93:6A:90:6E:86:69:7C:7E:A3:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-R13puntzcr0ZNqkG6GaXx-ozs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/0F49E2DA704011ECBD6F2E5BC4F9AE02.roa
Signing time: Thu 31 Aug 2023 01:13:09 +0000
ROA not before: Thu 31 Aug 2023 01:13:09 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 137951
IP address blocks: 2403:27c0:c01::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 19 Jan 2024 10:46:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1039 (0x40f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911662A/serialNumber=D3E475DE9BA7B7372BD1936A906E86697C7EA33B
Validity
Not Before: Aug 31 01:13:09 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64efe924-3644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:34:ca:6f:63:c3:f9:b7:05:11:44:76:eb:21:
9e:23:ff:3c:87:ca:f1:18:3e:26:f8:1d:eb:91:b5:
e5:e7:d1:fd:df:97:d7:fe:28:d1:3b:b4:e5:e5:8e:
3b:43:f3:de:51:c9:c6:8e:99:e8:8f:66:3c:14:03:
1c:7d:b5:e3:30:65:83:f6:a0:da:5a:f9:d2:db:91:
85:71:5f:46:f6:fe:e5:41:9a:2c:9f:40:91:58:45:
33:34:11:04:60:16:71:47:74:24:56:ba:68:10:26:
9e:a7:b0:0f:dd:60:aa:26:a7:0e:b5:7c:b8:71:fe:
7c:63:21:60:d5:cd:59:3d:fc:bd:20:5d:41:54:76:
9e:af:e4:1e:fc:e4:c4:25:f5:0b:63:7a:01:c3:6f:
8b:a4:79:9d:90:fb:87:e9:ef:98:46:86:c1:fa:e4:
e7:4d:7c:69:ff:38:48:d3:f0:43:11:3a:52:4d:41:
4c:0b:f1:25:73:74:1a:e2:4d:d9:92:c7:8f:c6:45:
74:76:ae:64:f9:0f:57:a0:2e:98:24:60:b3:b0:a0:
3c:a1:1c:11:35:87:18:4b:2e:1e:f9:d0:0f:83:9c:
e3:a0:4f:2b:d6:a2:c9:fc:35:67:f7:1b:1d:2b:8f:
f2:be:82:58:0a:23:1e:a0:c8:f4:66:4e:b8:ef:96:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AC:12:D1:F1:D7:F3:D6:9E:45:87:BF:16:BE:14:D8:88:92:30:A1
X509v3 Authority Key Identifier:
keyid:D3:E4:75:DE:9B:A7:B7:37:2B:D1:93:6A:90:6E:86:69:7C:7E:A3:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/0-R13puntzcr0ZNqkG6GaXx-ozs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-R13puntzcr0ZNqkG6GaXx-ozs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/0F49E2DA704011ECBD6F2E5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:27c0:c01::/48
Signature Algorithm: sha256WithRSAEncryption
41:c9:a3:13:2e:7c:d9:91:f7:b2:2b:4c:5b:84:04:05:2e:9a:
70:61:57:77:22:b8:68:7a:63:8f:c5:c6:e9:70:c6:80:ef:c4:
35:27:11:07:ab:f2:e9:39:0a:76:9f:53:69:4b:36:28:db:0c:
8b:3c:d8:41:2e:00:ef:90:40:60:64:89:51:a9:0d:7a:1e:31:
7b:5a:06:e1:d1:3f:54:00:81:ee:b6:50:f9:cc:77:11:07:67:
81:7c:20:75:90:17:c6:8e:63:3f:56:65:6a:7f:52:8b:27:48:
af:9c:e8:e8:b1:e7:c7:cc:b7:89:19:a5:24:e0:0c:98:ad:00:
4a:d8:d9:67:c8:cb:91:4e:0d:db:52:a4:64:3f:4b:bc:73:3b:
7e:d1:0f:8b:59:95:54:1d:a1:3b:cd:18:91:43:44:e5:03:ec:
ec:90:04:91:06:24:ac:27:09:0c:cd:98:8a:24:52:bd:d0:ba:
af:e3:77:1e:29:95:09:9e:a0:52:64:ee:6f:97:c5:bf:19:cd:
3e:e8:7d:09:58:a2:48:82:1f:ea:c7:65:1c:c9:89:a9:e3:c2:
67:e9:ea:d5:c2:25:52:f8:28:0e:d5:90:2e:e5:ea:27:62:0e:
d3:cf:bf:cc:97:e7:0f:5c:45:af:5e:5d:35:1c:57:0d:32:8c:
df:94:de:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 15:22:58 2024 by rpki-client on console-fra.rpki-client.org