Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/BF3102BA3DB711ED8EE44561C4F9AE02.roa
File: BF3102BA3DB711ED8EE44561C4F9AE02.roa (raw, json)
Hash identifier: nD6AOkUKw6G4k6aU9wBq6XtMKeI4ni1spbxANlX+niE=
Subject key identifier: CD:BF:0E:E5:7C:6F:FD:C0:D2:F1:60:B2:5F:0A:8B:B4:2B:3D:60:2D
Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Certificate serial: 01D8
Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/BF3102BA3DB711ED8EE44561C4F9AE02.roa
Signing time: Sat 27 May 2023 05:43:44 +0000
ROA not before: Sat 27 May 2023 05:43:44 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 131171
IP address blocks: 2400:70e0:bed::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Apr 2024 02:55:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Validity
Not Before: May 27 05:43:44 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6471988f-b912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:81:8b:ee:28:c5:eb:fc:e4:37:77:57:de:73:
68:66:66:3c:8d:3c:45:2d:6e:7b:53:28:1d:62:f8:
33:7e:b0:b5:4c:13:75:ed:64:7c:45:91:b5:07:f1:
e3:b3:3c:a7:75:1b:e9:65:33:aa:4b:e9:3d:c6:fc:
ab:a4:26:23:44:2c:cc:10:fc:9f:cd:9a:08:67:c9:
76:eb:60:3b:75:47:b3:98:33:de:69:19:6d:c0:0b:
07:93:fe:a9:3e:62:44:80:0b:29:73:f2:59:c4:60:
b6:87:16:11:7f:33:73:12:cb:6a:1e:44:47:d8:09:
97:ca:3c:aa:2e:4b:ca:88:de:0b:6c:ca:2e:fa:59:
e1:2a:d5:01:36:ca:ad:a9:e4:71:4c:ac:91:41:2c:
c0:07:3f:d9:d4:be:9f:97:44:f9:a1:b9:f0:e3:c8:
76:4a:2b:4e:51:3d:92:7e:a2:7e:6f:7c:40:ab:4b:
6a:a9:67:24:9c:de:f8:07:a5:58:94:dd:82:e1:66:
c4:2a:2a:b5:7e:c9:56:19:bd:5e:27:ed:05:11:01:
1e:ef:f2:9d:d3:84:0c:8c:62:7c:c2:36:40:fa:c1:
1b:d0:d2:24:a3:03:7d:bb:25:a4:0e:77:5b:8c:9d:
76:ff:c2:67:f5:ce:a6:bb:c4:13:4a:d9:06:01:24:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BF:0E:E5:7C:6F:FD:C0:D2:F1:60:B2:5F:0A:8B:B4:2B:3D:60:2D
X509v3 Authority Key Identifier:
keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/BF3102BA3DB711ED8EE44561C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:70e0:bed::/48
Signature Algorithm: sha256WithRSAEncryption
92:6a:02:a1:6e:49:98:0a:a0:22:bb:0b:78:01:4d:38:b9:d1:
6d:0f:59:58:f3:d7:44:8c:d4:b5:42:d8:0d:c0:73:5b:2e:62:
01:5c:ad:d6:f2:ba:4d:46:cd:86:de:11:c8:52:75:6d:d6:6d:
c7:39:c3:78:d2:f9:10:f3:dd:f4:dd:8d:98:bb:c1:8a:ff:f7:
58:2b:44:e7:65:c5:ec:41:35:ef:30:88:5f:33:51:c5:23:e6:
a6:5f:c4:a6:58:d0:e0:91:59:08:68:d4:35:0e:07:a5:f1:e0:
b6:c4:89:f0:59:44:d4:c2:58:f1:a4:23:bd:67:14:07:e0:e8:
62:0f:65:f2:29:db:64:c8:5d:be:db:8a:b8:b5:be:cd:ad:c3:
a5:14:0c:5f:ac:8b:9e:c2:58:db:a5:df:c2:e2:3f:6f:b6:d7:
7f:e0:7d:ea:1b:98:77:6e:52:e9:d0:71:59:2a:5b:32:9b:9e:
a4:63:8e:56:bb:37:2d:2d:70:b6:f6:55:83:9f:5d:47:e2:99:
e0:14:4a:b4:a0:85:56:1d:a9:47:ed:e8:14:d5:39:29:55:fd:
c1:33:58:c5:c8:67:95:dc:81:c0:56:5e:09:a5:a7:57:97:95:
de:ac:f0:37:9a:33:fa:46:86:65:42:c4:f6:3c:dc:fa:d0:11:
a6:80:71:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 03:58:31 2024 by rpki-client on console-fra.rpki-client.org