Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/47B1AD88EAB411EEA3E6C84EC4F9AE02.roa
File: 47B1AD88EAB411EEA3E6C84EC4F9AE02.roa (raw, json)
Hash identifier: J2PrG7tkeOmO4Yg+7G7CL5xmsgkIAlGkZRikqW3XHQE=
Subject key identifier: C9:F3:F6:34:5E:BA:E7:9E:5F:A2:AF:34:D5:24:DE:7F:1D:9E:42:59
Certificate issuer: /CN=A913FF2C/serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E
Certificate serial: 0374
Authority key identifier: FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/47B1AD88EAB411EEA3E6C84EC4F9AE02.roa
Signing time: Mon 25 Mar 2024 14:30:52 +0000
ROA not before: Mon 25 Mar 2024 14:30:52 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 139311
IP address blocks: 2001:df0:32c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 31 Mar 2024 18:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884 (0x374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FF2C/serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E
Validity
Not Before: Mar 25 14:30:52 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=66018a9b-13d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:92:1b:76:cc:c7:b2:77:d5:cb:79:52:90:
1b:e0:35:30:1a:a2:7a:14:bf:3f:0e:5f:16:ff:f0:
34:a8:32:4f:2e:2c:9a:9f:68:64:4d:18:a5:66:84:
39:8c:03:87:47:51:2e:2b:d5:b4:e6:63:76:f1:53:
19:7c:56:93:3c:67:8e:b3:c8:33:37:d3:7f:e4:ee:
16:d1:5e:42:fb:27:d7:f6:d9:c7:f6:b6:55:d8:0d:
93:10:32:0a:4a:1b:f2:67:8a:b7:22:97:4d:54:68:
b6:ee:d4:80:dd:59:32:d1:47:66:51:fa:bb:e9:52:
04:a4:6c:97:ca:ad:aa:76:d3:f5:10:ca:8c:aa:3f:
28:37:46:ab:ac:78:f7:00:45:c9:a6:5d:26:62:32:
97:0a:8a:7c:06:1f:61:c9:f6:51:2f:d2:15:4d:ba:
2c:06:ba:7b:34:85:4a:91:fd:b7:54:4b:cd:56:ca:
81:bc:2e:3f:a4:8c:55:72:f9:f0:a4:da:65:e5:f3:
f0:5c:6c:f1:46:58:7b:0c:66:e3:33:b3:59:3a:71:
0a:88:02:71:36:b9:3d:b6:bb:2e:5f:f4:64:c8:98:
3e:c5:8c:a5:be:6e:4a:c1:ac:29:61:4b:eb:39:20:
f2:12:db:6e:fb:a1:2a:9c:90:8a:cc:8e:de:0e:71:
e6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F3:F6:34:5E:BA:E7:9E:5F:A2:AF:34:D5:24:DE:7F:1D:9E:42:59
X509v3 Authority Key Identifier:
keyid:FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/47B1AD88EAB411EEA3E6C84EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:32c0::/48
Signature Algorithm: sha256WithRSAEncryption
5f:d3:af:4b:af:8d:7c:1e:fa:60:b1:12:9b:64:a9:1f:65:c2:
d3:f1:34:af:fa:35:e9:fb:20:a6:1a:dd:99:b0:f9:af:55:ee:
e7:b6:6a:6c:38:1c:3c:6f:3d:02:57:e3:e1:0b:3e:c6:3f:ea:
ed:cd:58:12:f4:aa:cd:ac:c7:de:de:90:54:6e:b4:25:36:a8:
7f:32:d1:69:b2:1c:c1:e3:8a:14:5b:e2:de:37:27:1e:db:d8:
b7:68:45:52:d2:c1:0e:d3:d5:c2:ba:8b:67:0b:36:0b:49:73:
d6:8f:2f:ca:70:f0:9c:d8:52:ef:14:f3:2e:25:a2:8b:8a:0a:
c9:ba:71:28:40:3b:4f:7a:10:64:e2:32:4e:be:c3:82:71:d7:
12:f0:a4:57:b1:1d:38:29:02:7b:a6:85:13:1e:d6:a8:21:31:
20:a4:41:7f:93:eb:71:79:af:67:e4:6b:2f:3d:97:a2:b0:dd:
40:fe:f6:fd:ad:57:69:8c:9f:6f:a2:93:f3:2e:f5:90:5a:66:
a0:85:4a:ee:c0:6c:31:59:30:b1:61:81:a9:fe:64:f1:1e:40:
a8:11:10:f8:04:d8:58:cc:ea:0b:29:53:73:da:a6:b5:a6:64:
b9:ab:40:e5:f4:45:43:06:bd:2b:23:8f:71:ec:ef:bd:36:c5:
1a:fa:f7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 22:31:52 2024 by rpki-client on console-ams.rpki-client.org