Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2D130CE8CBEF11EA9FBE4515C4F9AE02.roa
File: 2D130CE8CBEF11EA9FBE4515C4F9AE02.roa (raw, json)
Hash identifier: jclRi2mTqJvfyqWJ1ZpFgHHjwZTNWnOYTKJxmvOF6Bk=
Subject key identifier: 04:F1:5B:56:8D:45:77:CA:E6:84:B5:A2:44:AB:E5:D2:DA:AF:ED:F8
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0A45
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2D130CE8CBEF11EA9FBE4515C4F9AE02.roa
Signing time: Sun 14 May 2023 22:14:23 +0000
ROA not before: Sun 14 May 2023 22:14:23 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 140936
IP address blocks: 2406:840:edd0::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 10 May 2024 13:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2629 (0xa45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 14 22:14:23 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64615d3f-0039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:09:d7:2a:34:88:01:b9:03:4f:ca:67:37:
6a:1f:49:75:d1:4c:94:ce:f1:ed:6e:f5:3a:5c:cb:
17:1e:a8:4e:69:b4:4c:29:c4:65:67:aa:95:7d:c6:
83:bc:e4:34:72:31:e6:63:42:6d:e3:47:1b:ad:5c:
1c:a0:0d:82:a8:bb:17:22:14:d6:ad:ea:dd:fd:5b:
2d:ab:6b:21:d5:e4:58:f6:f6:93:be:99:f3:61:1c:
e0:bf:0b:2e:fd:a8:67:8a:67:45:06:be:ca:9e:22:
a7:0d:24:d5:5a:21:e0:cc:25:e0:20:0a:52:af:72:
bb:76:f5:ad:f0:cf:91:4b:e8:30:37:d1:dd:bc:e4:
67:22:dd:43:65:f1:3b:a6:75:87:d6:04:95:55:5f:
9d:ad:96:e2:f6:b1:bd:69:87:8c:d3:5e:cc:e7:d5:
53:8f:32:ff:c8:02:25:b7:fc:34:da:2f:fd:50:b5:
a2:67:43:8e:2c:14:17:6c:ed:06:5d:91:ce:98:c9:
83:dd:b7:c5:ab:c6:21:69:96:a4:b8:33:36:cc:b9:
4f:fa:cc:70:82:b5:fc:53:ba:89:82:5f:29:1c:65:
8e:98:15:ae:d1:3a:49:18:42:f4:77:31:59:01:45:
cd:12:9a:a8:90:1a:58:e4:6f:75:9d:d6:de:bf:d2:
c6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F1:5B:56:8D:45:77:CA:E6:84:B5:A2:44:AB:E5:D2:DA:AF:ED:F8
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2D130CE8CBEF11EA9FBE4515C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:edd0::/44
Signature Algorithm: sha256WithRSAEncryption
7a:68:eb:48:9d:92:ff:b1:cb:4a:ed:b0:2b:14:77:ec:bb:21:
fe:be:f9:b9:21:45:a9:42:96:00:3e:60:06:bf:3e:47:a5:1f:
f1:c9:91:46:f4:e0:72:87:a0:af:0f:07:d4:96:e2:b6:71:ae:
00:da:6e:31:f2:ce:82:2d:ac:92:69:6e:b3:27:bc:f4:7f:34:
65:33:6f:49:62:b7:15:4e:8c:a7:e9:a1:fb:a8:0d:4a:28:0c:
1c:66:0f:d1:9b:d1:a5:9c:a0:7f:7c:77:08:a3:72:6d:24:43:
99:61:63:26:f3:94:31:82:f8:34:93:ac:17:3e:60:02:a2:0f:
fe:36:23:96:c3:33:44:c0:4f:43:fe:df:23:e7:2b:a4:6f:c1:
90:45:fd:8e:8b:e6:49:e5:91:73:dc:b0:87:6c:c2:f2:68:f3:
48:5c:58:83:25:aa:c1:7a:cc:99:4a:8d:b2:35:6c:fa:57:47:
43:a4:7f:09:ea:12:f1:71:ca:3a:56:ec:8c:52:c5:38:37:e7:
3d:87:ab:5f:ee:0e:ae:94:be:1e:1d:2c:91:80:4a:b5:c0:59:
4e:34:1e:74:fd:af:ad:4a:fd:2e:f6:1d:05:81:2e:3c:d3:82:
b4:bc:53:ad:58:54:92:85:b1:27:6e:28:72:59:d1:f6:0f:13:
df:f7:57:ef
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICCkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjMwNTE0MjIxNDIzWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDYxNWQzZi0wMDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1VEJ1yo0iAG5A0/KZzdqH0l10UyUzvHtbvU6XMsXHqhOabRMKcRlZ6qVfcaD
vOQ0cjHmY0Jt40cbrVwcoA2CqLsXIhTWrerd/Vstq2sh1eRY9vaTvpnzYRzgvwsu
/ahnimdFBr7KniKnDSTVWiHgzCXgIApSr3K7dvWt8M+RS+gwN9HdvORnIt1DZfE7
pnWH1gSVVV+drZbi9rG9aYeM017M59VTjzL/yAIlt/w02i/9ULWiZ0OOLBQXbO0G
XZHOmMmD3bfFq8YhaZakuDM2zLlP+sxwgrX8U7qJgl8pHGWOmBWu0TpJGEL0dzFZ
AUXNEpqokBpY5G91ndbev9LGZQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFATxW1aN
RXfK5oS1okSr5dLar+34MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMkQxMzBDRThD
QkVGMTFFQTlGQkU0NTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQkBghA7dAwDQYJKoZIhvcNAQELBQADggEBAHpo60idkv+x
y0rtsCsUd+y7If6++bkhRalClgA+YAa/PkelH/HJkUb04HKHoK8PB9SW4rZxrgDa
bjHyzoItrJJpbrMnvPR/NGUzb0litxVOjKfpofuoDUooDBxmD9Gb0aWcoH98dwij
cm0kQ5lhYybzlDGC+DSTrBc+YAKiD/42I5bDM0TAT0P+3yPnK6RvwZBF/Y6L5knl
kXPcsIdswvJo80hcWIMlqsF6zJlKjbI1bPpXR0OkfwnqEvFxyjpW7IxSxTg35z2H
q1/uDq6Uvh4dLJGASrXAWU40HnT9r61K/S72HQWBLjzTgrS8U61YVJKFsSduKHJZ
0fYPE9/3V+8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-ams.rpki-client.org