Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/A55C2AD8ACD111EEA09C9615C4F9AE02.roa
File: A55C2AD8ACD111EEA09C9615C4F9AE02.roa (raw, json)
Hash identifier: nVMd2+v7/9g1KlX1FcUpigRjrcDSwnwjxz+ybJAc/gQ=
Subject key identifier: 95:68:8E:6C:53:40:26:42:3C:9F:E6:37:A9:98:38:B8:94:66:4C:EB
Certificate issuer: /CN=A915ADC4/serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12
Certificate serial: 0D
Authority key identifier: 1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/A55C2AD8ACD111EEA09C9615C4F9AE02.roa
Signing time: Sat 06 Jan 2024 20:24:52 +0000
ROA not before: Sat 06 Jan 2024 20:24:52 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 152300
IP address blocks: 2401:72a0::/32 maxlen: 36
Validation: Failed, certificate revoked on Thu 11 Jan 2024 19:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ADC4/serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12
Validity
Not Before: Jan 6 20:24:52 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6599b714-0bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:92:6f:4e:d1:5e:29:cc:f1:80:66:5f:5a:
30:c5:18:72:98:26:44:0f:90:03:32:65:f5:b7:01:
5a:fe:4f:4f:75:13:7f:60:9d:cb:f0:9e:11:13:1d:
69:88:eb:e7:bb:a1:5e:4c:ff:b2:4d:68:d0:14:69:
c6:cf:bb:52:7f:01:84:41:5c:7e:39:04:0e:2a:ab:
5d:ef:f6:4a:41:2c:f4:97:33:73:6d:fc:5b:a4:6d:
32:e6:e7:54:56:43:e8:24:db:43:a3:f5:9f:fc:10:
c5:48:05:79:e7:7b:83:52:35:79:86:bc:ab:34:f6:
00:f5:d1:b8:85:e2:a6:aa:c0:0b:55:12:de:84:53:
7a:3a:96:11:88:af:e5:cf:d3:1d:a0:47:03:0b:db:
c9:4e:4d:15:02:71:fe:70:6b:88:f0:91:16:16:9e:
d0:70:3f:40:4e:56:67:4b:fb:e1:a4:83:c7:22:15:
e2:f1:87:67:e7:bf:4b:62:b3:45:e0:ef:9c:bb:cd:
d3:58:01:d3:95:4c:33:e5:32:c7:ab:0c:38:10:4b:
29:24:24:8e:cf:f0:f3:61:b6:4b:83:2d:1e:8f:11:
64:08:c1:5f:cb:e9:8b:9d:a9:5c:bd:ff:e4:95:63:
95:51:16:3d:3f:c9:c4:64:45:b7:3d:04:6f:6d:1f:
7d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:68:8E:6C:53:40:26:42:3C:9F:E6:37:A9:98:38:B8:94:66:4C:EB
X509v3 Authority Key Identifier:
keyid:1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/A55C2AD8ACD111EEA09C9615C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:72a0::/32
Signature Algorithm: sha256WithRSAEncryption
88:31:7e:92:fb:b7:73:13:40:0f:d8:26:f9:fe:68:cf:82:ad:
9b:47:27:e8:91:66:9a:a0:01:46:a9:c2:b8:a7:ba:0e:91:15:
99:ac:05:c5:cc:94:00:62:19:c6:ab:2c:2f:bc:33:91:60:53:
a2:65:4e:65:50:1b:85:a0:45:02:83:b4:69:0a:64:9a:a7:08:
eb:a2:85:56:56:17:b3:85:2b:e0:e7:68:d3:06:f9:71:62:94:
62:80:62:83:60:bb:f7:69:10:04:62:95:44:3e:7a:fd:64:dc:
de:ab:7e:9b:49:1e:39:55:d8:81:18:6c:2a:dd:45:c0:3e:30:
0f:16:3f:67:9d:7a:3d:3e:8c:95:78:8b:6d:97:87:07:f8:ab:
8c:57:c6:33:1d:d9:4f:66:14:ed:48:3e:59:00:e6:a1:42:60:
d3:2e:c0:8e:dc:1f:ab:43:94:32:88:4c:60:10:10:bd:04:28:
9b:a8:c6:ca:7c:4b:08:54:60:f9:43:89:50:6e:7d:94:6e:ad:
cf:ae:36:c8:9a:5f:77:59:71:c0:ad:fd:53:85:0a:f0:e9:f8:
99:33:2c:d4:44:1d:b9:73:90:a4:c8:6c:3e:19:0e:13:02:64:
d7:b9:e7:9e:32:7f:03:e0:14:56:f7:8d:07:a0:a2:09:08:4a:
64:07:82:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-ams.rpki-client.org