Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/2FE3F59C5E0B11EF93D7FD1CC4F9AE02.roa
File: 2FE3F59C5E0B11EF93D7FD1CC4F9AE02.roa (raw, json)
Hash identifier: AEM6U383JQxU9UsDbsTwWfJuvucVFyQMU+HhN0Hz1zY=
Subject key identifier: 34:6C:40:6A:6B:C5:9B:93:08:2E:46:7E:BC:F0:1A:C2:F2:25:BE:ED
Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
Certificate serial: 25BC
Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/2FE3F59C5E0B11EF93D7FD1CC4F9AE02.roa
Signing time: Mon 19 Aug 2024 09:12:42 +0000
ROA not before: Mon 19 Aug 2024 09:12:41 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 133439
IP address blocks: 2001:df4:3800::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 29 Oct 2024 07:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9660 (0x25bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
Validity
Not Before: Aug 19 09:12:41 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66c30c89-680a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1e:38:28:3b:63:7d:2a:65:9d:7a:86:f8:47:
17:a0:60:7f:69:01:26:f2:8d:0a:3d:fe:b1:32:92:
ee:9a:1e:49:cc:32:2b:d1:96:f4:06:76:4b:94:42:
bc:17:6f:22:9e:5a:c3:2f:91:8a:37:be:cd:f0:6f:
55:24:d2:86:17:8b:92:29:bd:a6:a4:e4:0a:b4:67:
4b:41:b1:31:4b:f1:6f:6b:f9:08:a1:5d:82:00:62:
a5:9d:39:bc:8f:45:c2:cc:a4:d6:df:7b:c8:84:40:
19:8b:e4:95:12:e8:e5:f9:9e:de:d9:fd:87:b5:d7:
6f:0a:91:86:7b:cc:59:d6:d2:eb:53:77:ed:61:18:
7a:b2:c0:1c:1c:4d:d2:1f:30:07:1b:84:3a:4d:9d:
04:82:43:5e:d4:79:91:ad:06:15:fb:a1:b1:e5:a9:
ac:fd:5d:b6:7d:38:24:36:d7:ba:e2:e4:bb:53:4d:
e4:44:27:eb:2a:fe:61:1f:88:ca:78:5e:85:54:7d:
86:e9:a0:fc:0c:ea:54:ce:45:89:9f:b9:91:ab:7c:
1a:e2:99:75:3d:f2:1e:5f:8f:64:cc:3c:47:ae:9a:
77:b2:51:ec:1c:bb:17:e6:15:39:27:28:48:de:ca:
e3:ad:fa:ce:fe:da:b6:bc:07:ae:ca:2c:21:49:1e:
8c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6C:40:6A:6B:C5:9B:93:08:2E:46:7E:BC:F0:1A:C2:F2:25:BE:ED
X509v3 Authority Key Identifier:
keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/2FE3F59C5E0B11EF93D7FD1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:3800::/48
Signature Algorithm: sha256WithRSAEncryption
6e:ba:20:a8:19:f1:1e:6b:a0:c2:10:ed:50:40:38:96:83:1b:
e9:ae:6f:6b:be:03:98:2c:a7:a9:c8:04:87:38:ae:06:8a:bb:
3a:ed:bf:68:30:e6:1a:ba:57:aa:ca:26:e4:af:69:9d:ac:0e:
a5:d8:d4:2a:83:71:d9:a0:42:87:4f:0b:d9:9e:2c:74:75:07:
bb:a7:e7:3b:e3:c3:cc:e4:f8:03:09:d6:e2:76:60:21:02:00:
41:56:ae:3d:5f:10:54:c9:ee:04:6b:6b:dc:41:f9:ab:c8:83:
89:b8:2c:34:a2:bc:cf:37:e8:91:d2:3c:1c:41:f7:f5:c4:4a:
22:c7:06:9a:bb:5d:47:4f:7d:fb:8d:07:a2:f5:45:ee:5b:47:
00:40:aa:cd:9c:eb:33:09:a5:51:5f:f1:5c:af:68:10:eb:08:
c7:eb:77:58:24:c6:bf:ad:ed:14:39:d4:52:6e:7b:3c:be:5a:
00:b7:6e:f1:96:e8:3b:69:68:b7:eb:23:f2:6f:39:38:f8:d6:
94:02:34:39:c5:1d:58:c7:5e:99:41:d0:7d:38:db:1b:99:e4:
a2:d9:6c:90:93:30:a8:56:48:88:e4:cf:50:83:a6:3c:ba:a8:
78:05:84:a3:70:c2:51:82:ec:21:47:fc:f8:51:26:12:91:a4:
56:67:14:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 11:58:33 2024 by rpki-client on console-ams.rpki-client.org