Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/A4A1BFC29A7E11EF8575883FC4F9AE02.roa
File: A4A1BFC29A7E11EF8575883FC4F9AE02.roa (raw, json)
Hash identifier: iMrV70DTVyAdJiqrb2PUR6OgiJ0aR28LT/pPfXKGNNA=
Subject key identifier: 8C:60:55:C6:89:A9:B8:FD:BA:D8:B6:DF:8D:8C:18:18:4B:0C:4E:4D
Certificate issuer: /CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557
Certificate serial: 02
Authority key identifier: D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/A4A1BFC29A7E11EF8575883FC4F9AE02.roa
Signing time: Mon 04 Nov 2024 07:30:20 +0000
ROA not before: Mon 04 Nov 2024 07:30:20 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 56264
IP address blocks: 2001:df4:87c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 05 Nov 2024 07:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557
Validity
Not Before: Nov 4 07:30:20 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6728780b-8cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6c:42:b4:9f:6b:ef:f8:3a:ac:aa:b5:b4:72:
ec:c1:83:96:26:b5:5b:22:9b:fb:1f:68:78:9d:4f:
6e:8a:9e:a0:fb:c3:9f:36:44:f7:57:7b:95:23:27:
73:5d:db:16:31:91:fb:54:4b:85:c8:bf:35:5f:ac:
5e:a3:a0:6e:d5:75:36:e4:ce:18:5a:28:79:50:e5:
5a:80:19:2c:18:b7:fc:e0:3d:83:82:df:e1:f3:3f:
f7:ad:66:64:05:bf:cc:dd:2e:1d:83:ec:04:4c:1e:
6d:19:ca:db:4a:b9:97:10:14:82:92:4b:a5:03:92:
26:2e:74:b0:5d:8f:49:13:96:a1:fe:92:0b:96:2a:
bf:d7:97:db:d4:23:6d:d3:b2:7c:e1:26:fb:d8:02:
77:d5:93:a1:1f:9c:c1:ee:39:9e:2e:01:94:26:79:
c9:0a:dd:37:c1:bf:c9:b4:9f:e3:6f:a0:b8:a0:3b:
29:84:d4:45:6b:9b:3d:fb:45:49:52:df:3f:a9:3f:
32:de:1a:a4:e7:9a:f5:ba:ef:ba:59:6c:97:3c:f7:
a8:81:43:e2:c0:7a:66:57:12:f9:b6:47:d8:2c:c1:
51:e4:0e:13:b1:90:d5:bd:ce:9e:3b:a2:63:6a:f3:
4e:b8:09:b4:c0:28:60:47:05:3f:dc:41:e2:a3:10:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:60:55:C6:89:A9:B8:FD:BA:D8:B6:DF:8D:8C:18:18:4B:0C:4E:4D
X509v3 Authority Key Identifier:
keyid:D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/A4A1BFC29A7E11EF8575883FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:87c0::/48
Signature Algorithm: sha256WithRSAEncryption
10:dc:c0:f6:4e:99:67:f0:ea:4b:52:b1:40:2f:a7:d4:9e:9a:
43:72:67:29:cd:32:73:c8:76:50:8d:b4:bd:e2:0e:2a:14:3d:
a7:33:40:b8:ae:07:16:71:bf:0c:44:fe:e7:d9:59:db:23:b3:
3b:0d:9a:d7:7b:83:96:51:b8:72:ad:3d:1b:c7:1e:ca:60:39:
38:07:6b:b7:be:14:80:d7:31:c0:49:df:a8:36:8a:da:3f:73:
29:30:b2:ab:a7:25:99:e5:a8:92:eb:2e:ba:e3:c8:c0:b4:d2:
11:20:8e:cd:7b:e6:6f:cc:40:cf:03:68:34:4e:26:e4:e8:00:
47:c8:81:23:70:11:3e:f0:7e:61:1a:86:26:ee:ef:d3:f9:42:
b7:d1:18:c3:88:d9:cd:e0:31:7a:32:a2:5d:53:20:aa:c6:18:
7a:41:da:03:a5:51:34:90:1f:31:c9:5c:0e:de:f1:2d:86:64:
55:a9:61:06:73:e7:30:4b:de:eb:2f:e7:d4:9c:36:e8:56:64:
e6:4f:fe:44:99:9b:47:85:e6:f4:dc:fd:ad:89:ff:fa:71:32:
b7:fe:7a:4d:ff:c5:45:1f:05:35:1e:80:40:14:2c:51:92:7f:
f7:47:68:45:51:dc:b4:47:d5:d7:9b:76:7f:b7:1a:82:47:be:
3f:eb:ad:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 09:40:59 2024 by rpki-client on console-ams.rpki-client.org