Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/64B3C166379211EF9C6E696FC4F9AE02.roa
File: 64B3C166379211EF9C6E696FC4F9AE02.roa (raw, json)
Hash identifier: 5Kf4XPOgy9CBGZikiOJlnlDd9m5amxkRjqMaM+xgEaA=
Subject key identifier: A9:6E:9F:03:71:93:84:14:0C:35:84:D7:7F:5F:3E:68:A3:CB:29:09
Certificate issuer: /CN=A917AD0E/serialNumber=C9BB92FAC6A5532E423556751D0EA72891E6DE7A
Certificate serial: 0702
Authority key identifier: C9:BB:92:FA:C6:A5:53:2E:42:35:56:75:1D:0E:A7:28:91:E6:DE:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybuS-salUy5CNVZ1HQ6nKJHm3no.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/64B3C166379211EF9C6E696FC4F9AE02.roa
Signing time: Mon 01 Jul 2024 10:12:17 +0000
ROA not before: Mon 01 Jul 2024 10:12:17 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 56110
IP address blocks: 2001:df5:c100::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 Aug 2024 00:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1794 (0x702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AD0E/serialNumber=C9BB92FAC6A5532E423556751D0EA72891E6DE7A
Validity
Not Before: Jul 1 10:12:17 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=66828100-0b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:65:31:e9:98:a7:55:34:f8:05:b8:ad:07:68:
07:c7:0f:f3:a8:59:3a:34:de:3d:bd:39:2c:59:f7:
14:b0:ea:c0:ff:56:bb:30:a1:d8:b6:3a:65:cc:6c:
fb:ca:0a:d5:cc:81:dd:9d:b4:f1:97:e8:87:62:3c:
66:f6:0e:00:4c:ba:e0:ae:3d:11:14:62:cf:f5:f0:
0b:89:7b:7b:1e:e8:e7:86:38:d4:76:26:79:32:76:
d4:53:33:17:d6:0e:29:2c:33:c4:ea:79:9b:a2:f8:
c1:cc:f0:ff:1a:d2:89:36:4b:d2:61:a2:86:96:53:
ff:94:ea:ce:6f:e6:8c:21:53:41:11:c8:66:57:62:
d1:6c:37:2f:79:56:8d:20:81:ac:73:c8:ac:83:79:
50:56:50:a3:3d:d9:79:ce:d4:d1:22:9e:4f:65:48:
24:72:79:fc:59:27:a9:a6:47:fa:06:28:cd:04:42:
bd:7f:0d:fa:74:aa:0d:e3:f5:48:7f:18:f3:28:5a:
28:30:ce:85:9e:48:5c:2a:1f:56:5a:56:05:95:99:
1c:52:d0:f4:9e:89:63:22:5a:af:ec:93:7d:bb:fb:
4a:2e:78:e6:8f:39:94:04:be:a9:e7:0b:c9:85:19:
35:67:65:91:48:40:78:65:2f:82:13:e5:12:25:97:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6E:9F:03:71:93:84:14:0C:35:84:D7:7F:5F:3E:68:A3:CB:29:09
X509v3 Authority Key Identifier:
keyid:C9:BB:92:FA:C6:A5:53:2E:42:35:56:75:1D:0E:A7:28:91:E6:DE:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/ybuS-salUy5CNVZ1HQ6nKJHm3no.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybuS-salUy5CNVZ1HQ6nKJHm3no.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/64B3C166379211EF9C6E696FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:c100::/48
Signature Algorithm: sha256WithRSAEncryption
61:53:31:c1:95:90:75:4b:0d:85:1d:80:db:5a:93:92:c6:3e:
83:e8:e7:49:28:f9:b9:a2:ca:da:b2:2a:3d:03:ec:53:b5:5a:
ab:bf:2e:72:82:d5:7f:9b:53:97:61:c5:cb:84:43:d6:0d:c4:
b9:8d:e5:fa:44:37:49:94:16:8a:f5:f9:72:cd:fa:35:3c:cb:
f0:66:3e:46:e9:df:5e:18:ff:51:b7:a9:0b:7b:de:96:df:78:
4d:f5:38:6f:b6:6e:8d:78:ad:a8:8c:4b:1f:f5:37:03:b9:14:
0a:71:49:2a:4b:a3:5c:6f:58:9d:4b:c8:d4:f0:cc:46:99:fa:
ff:61:d5:a5:ad:6d:81:7e:27:1f:e1:71:79:dc:43:72:86:92:
2a:b7:40:53:62:d3:f3:e9:ba:ca:86:9b:b2:35:1a:33:f8:46:
cb:b6:b3:e3:a0:c0:5f:63:55:d3:b9:9a:44:98:5c:e3:81:e7:
5e:69:cd:5a:eb:42:d5:1c:d7:64:8e:31:52:b9:77:f8:ed:68:
4f:3a:2b:e2:31:0b:56:df:d1:80:09:40:d6:a0:27:b7:f4:90:
86:0a:fe:50:d7:3e:66:3e:00:36:8b:fe:c9:04:88:bc:1f:3c:
e2:3d:67:2f:3e:33:2a:7b:61:e1:7b:38:ba:df:f3:73:9c:64:
cf:67:59:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 06:11:47 2024 by rpki-client on console-fra.rpki-client.org