Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/DDF2B3F8379111EF86AA856EC4F9AE02.roa
File: DDF2B3F8379111EF86AA856EC4F9AE02.roa (raw, json)
Hash identifier: rSh9jeXA9M8O7xOAR3Z5fYxPL+9heLoFlFEUII86918=
Subject key identifier: C1:BC:EB:DF:87:30:22:BA:CE:FA:03:19:73:29:1C:82:A2:60:3E:DB
Certificate issuer: /CN=A917AD0E/serialNumber=C9BB92FAC6A5532E423556751D0EA72891E6DE7A
Certificate serial: 06FF
Authority key identifier: C9:BB:92:FA:C6:A5:53:2E:42:35:56:75:1D:0E:A7:28:91:E6:DE:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybuS-salUy5CNVZ1HQ6nKJHm3no.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/DDF2B3F8379111EF86AA856EC4F9AE02.roa
Signing time: Mon 01 Jul 2024 10:08:31 +0000
ROA not before: Mon 01 Jul 2024 10:08:31 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 137950
IP address blocks: 2001:df5:c100::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 Aug 2024 00:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1791 (0x6ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AD0E/serialNumber=C9BB92FAC6A5532E423556751D0EA72891E6DE7A
Validity
Not Before: Jul 1 10:08:31 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=6682801e-fced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:08:e7:9f:b9:8b:40:c0:8d:a5:ba:56:4a:e4:
bb:a6:ba:15:41:33:c6:f7:06:3d:ea:9c:48:00:77:
55:89:65:e2:8b:88:97:8f:cb:20:21:45:e0:3e:50:
4b:28:69:3d:45:0a:99:ae:e6:27:d8:af:8e:08:0d:
fe:f6:51:82:fb:be:2e:bf:cf:c7:1a:91:39:f2:7d:
ab:a3:3f:c7:3b:bf:64:11:60:a6:83:ce:9d:a7:48:
a2:3d:61:3a:e1:0b:c3:a6:e0:f2:3a:db:c2:aa:f6:
64:2f:7e:82:00:a4:d0:75:78:56:a9:1c:fe:a0:c8:
32:f5:7e:89:5f:1b:27:00:95:3b:92:e8:4a:9c:6b:
28:54:50:bd:59:0b:d0:c1:ec:3c:5f:4d:ee:7b:85:
7a:ee:a4:f8:b9:67:d7:43:92:d8:0e:c2:b7:68:9d:
01:4e:db:15:34:9a:9b:b1:3b:2a:32:31:b5:6c:19:
33:e8:13:6d:94:50:db:47:c3:ee:1b:73:d4:06:15:
e5:10:2b:81:95:c7:ad:31:fd:c3:4c:79:17:88:8b:
d8:db:5b:93:9c:f0:bb:a2:4f:39:d6:69:d3:e2:44:
32:25:22:9d:8b:80:d9:c0:ad:ef:04:ed:ce:58:03:
70:8c:62:5a:a3:5c:29:3b:7b:a7:9d:85:73:10:cc:
93:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BC:EB:DF:87:30:22:BA:CE:FA:03:19:73:29:1C:82:A2:60:3E:DB
X509v3 Authority Key Identifier:
keyid:C9:BB:92:FA:C6:A5:53:2E:42:35:56:75:1D:0E:A7:28:91:E6:DE:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/ybuS-salUy5CNVZ1HQ6nKJHm3no.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybuS-salUy5CNVZ1HQ6nKJHm3no.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/DDF2B3F8379111EF86AA856EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:c100::/48
Signature Algorithm: sha256WithRSAEncryption
89:30:26:95:8a:ce:b3:2c:08:13:a2:65:ca:2f:4a:06:71:1a:
02:95:e7:63:84:ea:af:eb:4a:bb:ca:15:71:c5:6b:b9:0b:71:
87:24:90:74:ae:61:82:af:e6:6f:a4:ca:e4:fe:d0:27:3a:8f:
f6:dc:3a:67:f5:aa:eb:d0:7f:36:98:42:e2:ae:62:21:34:3a:
46:74:50:2a:66:ff:0c:0f:27:73:1f:91:40:a0:81:58:80:ac:
f9:f4:7d:14:01:63:e0:7f:b1:c0:79:34:59:11:87:39:3c:6a:
17:9d:35:4e:c5:67:07:27:a4:6f:48:96:fc:91:45:6a:a2:d0:
9d:45:f9:c0:ff:53:c7:ef:d6:a6:01:f5:61:28:21:96:08:b4:
a3:a2:ba:37:be:05:51:f2:10:57:10:a7:20:98:af:28:aa:b3:
9b:d8:6d:4d:ea:5d:1e:f1:0b:d6:1e:99:88:8f:9b:00:23:48:
4d:c8:43:17:11:29:f0:95:66:61:af:30:fc:14:00:f1:0e:7a:
7c:7b:64:e3:bd:45:15:3c:27:4b:b7:fa:92:bf:1f:10:58:39:
60:2e:47:c9:e3:a5:0b:92:01:52:81:26:80:db:e0:bc:55:b6:
1b:ef:d4:14:60:dd:c5:f7:50:ec:e5:56:0c:74:c0:fa:61:fc:
b2:e4:19:bb
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICBv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0FEMEUxMTAvBgNVBAUTKEM5QkI5MkZBQzZBNTUzMkU0MjM1NTY3NTFEMEVBNzI4
OTFFNkRFN0EwHhcNMjQwNzAxMTAwODMxWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjgyODAxZS1mY2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwQjnn7mLQMCNpbpWSuS7proVQTPG9wY96pxIAHdViWXii4iXj8sgIUXgPlBL
KGk9RQqZruYn2K+OCA3+9lGC+74uv8/HGpE58n2roz/HO79kEWCmg86dp0iiPWE6
4QvDpuDyOtvCqvZkL36CAKTQdXhWqRz+oMgy9X6JXxsnAJU7kuhKnGsoVFC9WQvQ
wew8X03ue4V67qT4uWfXQ5LYDsK3aJ0BTtsVNJqbsTsqMjG1bBkz6BNtlFDbR8Pu
G3PUBhXlECuBlcetMf3DTHkXiIvY21uTnPC7ok851mnT4kQyJSKdi4DZwK3vBO3O
WANwjGJao1wpO3unnYVzEMyTIQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMG869+H
MCK6zvoDGXMpHIKiYD7bMB8GA1UdIwQYMBaAFMm7kvrGpVMuQjVWdR0OpyiR5t56
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUQwRS8xNDI4MjBCMjBE
NUIxMUVCQUQ1MUNFMzZDNEY5QUUwMi95YnVTLXNhbFV5NUNOVloxSFE2bktKSG0z
bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lidVMtc2FsVXk1Q05WWjFIUTZuS0pIbTNuby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0FEMEUvMTQyODIwQjIwRDVCMTFFQkFENTFDRTM2QzRGOUFFMDIvRERGMkIzRjgz
NzkxMTFFRjg2QUE4NTZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ31wQAwDQYJKoZIhvcNAQELBQADggEBAIkwJpWKzrMs
CBOiZcovSgZxGgKV52OE6q/rSrvKFXHFa7kLcYckkHSuYYKv5m+kyuT+0Cc6j/bc
Omf1quvQfzaYQuKuYiE0OkZ0UCpm/wwPJ3MfkUCggViArPn0fRQBY+B/scB5NFkR
hzk8ahedNU7FZwcnpG9IlvyRRWqi0J1F+cD/U8fv1qYB9WEoIZYItKOiuje+BVHy
EFcQpyCYryiqs5vYbU3qXR7xC9YemYiPmwAjSE3IQxcRKfCVZmGvMPwUAPEOenx7
ZOO9RRU8J0u3+pK/HxBYOWAuR8njpQuSAVKBJoDb4LxVthvv1BRg3cX3UOzlVgx0
wPph/LLkGbs=
-----END CERTIFICATE-----
Generated at Thu Aug 15 06:11:47 2024 by rpki-client on console-fra.rpki-client.org