Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/C9B1A404842F11EFB21D1020C4F9AE02.roa
File: C9B1A404842F11EFB21D1020C4F9AE02.roa (raw, json)
Hash identifier: RecOgiLxoJJdyoh77KU6SnCQLQZzsPmCFEP9RvQeSF0=
Subject key identifier: D9:5A:20:A1:09:63:C6:29:34:1B:E5:05:0A:6A:6F:29:43:63:93:66
Certificate issuer: /CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17
Certificate serial: 02
Authority key identifier: 30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/C9B1A404842F11EFB21D1020C4F9AE02.roa
Signing time: Sun 06 Oct 2024 22:10:25 +0000
ROA not before: Sun 06 Oct 2024 22:10:25 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 8075
IP address blocks: 2401:ef40:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 08 Nov 2024 02:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17
Validity
Not Before: Oct 6 22:10:25 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=67030ad1-081a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:42:22:75:59:fa:01:d7:ad:3a:5e:10:b3:da:
07:cf:43:56:90:86:83:0a:67:f3:93:bd:1e:6c:ee:
64:05:e7:f7:c1:7f:6d:f6:ec:68:46:64:e1:b2:2e:
62:d5:b2:82:17:a9:fb:f8:87:e7:88:a1:12:e3:e4:
b5:e4:2f:03:00:e6:19:94:41:46:79:31:89:e1:9d:
66:04:6c:7b:5e:27:54:4d:a4:b6:3a:45:6d:80:42:
6e:39:c9:75:f6:65:36:ff:be:8f:a5:10:dc:d2:05:
ff:75:43:15:e5:bd:36:fd:d9:b9:16:34:fd:a3:8e:
20:52:a5:ea:c9:26:6b:b2:3a:2a:10:86:95:87:d4:
e3:8a:9d:d3:8b:52:18:3c:85:79:12:b8:6c:e9:61:
e1:a0:dd:a4:3c:50:00:3c:e0:8f:5f:47:dd:b2:03:
1b:cf:1e:90:7e:4b:2a:54:0d:9f:f9:1c:36:69:d2:
a7:d5:5f:8e:b3:56:1d:97:c5:8f:35:75:7e:c1:72:
78:5c:8e:94:9f:62:6a:d6:31:e2:96:d6:8f:e4:36:
d7:1f:0e:88:1b:c6:6d:75:1f:87:a2:b1:9e:fb:3f:
16:13:dc:b1:21:13:f6:9b:65:3e:cf:f7:d4:36:69:
6f:06:1a:31:aa:dd:e7:9f:ed:f7:ca:df:19:c6:ef:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5A:20:A1:09:63:C6:29:34:1B:E5:05:0A:6A:6F:29:43:63:93:66
X509v3 Authority Key Identifier:
keyid:30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/C9B1A404842F11EFB21D1020C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:ef40:2::/48
Signature Algorithm: sha256WithRSAEncryption
6e:e2:2d:c4:6f:8b:d9:fb:e7:21:be:88:ba:fc:6e:ba:eb:cf:
34:c6:19:f6:93:ed:8b:29:62:0d:8c:ac:75:e7:d8:aa:c3:b2:
2f:ff:d8:6a:8f:ad:60:b0:c6:73:09:03:19:74:d5:32:7f:05:
ac:09:36:cc:bf:ed:d6:ec:fd:4d:97:2c:fc:27:e2:f7:cc:56:
68:a7:af:c7:f3:74:0e:98:28:f6:0b:d7:e0:e4:e8:ec:64:ba:
44:8b:c8:49:f4:63:e7:8f:2c:62:0c:ac:60:38:e9:4f:c1:b8:
1f:34:8f:31:1a:b8:72:d9:5c:cf:41:a0:d4:99:84:45:da:b6:
cd:19:12:e8:ab:b2:e5:c5:09:0a:b6:0b:cb:88:1d:4d:7e:c7:
9e:d7:2d:99:a0:54:8b:0d:96:a8:5a:d4:a6:9e:f8:3e:42:8c:
19:0e:35:9d:4c:7b:10:d2:a3:66:2a:c6:7e:5f:9f:b6:a3:9d:
d2:0e:73:ea:70:6b:bb:fe:6c:6e:dc:ce:3d:13:21:b6:b6:36:
43:f8:84:98:18:fc:42:3b:d2:cc:75:20:2b:ad:fc:99:35:39:
bb:de:18:0d:01:00:7b:47:59:c0:79:da:c1:48:3b:25:1c:3b:
ae:b8:9d:8e:71:22:9c:81:36:b7:09:4a:1e:72:44:06:a7:8f:
4f:8d:d3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 06:33:12 2024 by rpki-client on console-ams.rpki-client.org