Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/368C42ACBA5111EBA647D43EC4F9AE02.roa
File: 368C42ACBA5111EBA647D43EC4F9AE02.roa (raw, json)
Hash identifier: x/TH7xVc8Ii0tDQCttpXfJRBRpkWxjwOvWSvHtnkkaM=
Subject key identifier: BB:9B:B0:48:E2:7B:FC:37:06:41:14:46:8B:2B:4B:C0:4D:5B:A6:C9
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0A51
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/368C42ACBA5111EBA647D43EC4F9AE02.roa
Signing time: Sun 14 May 2023 22:14:37 +0000
ROA not before: Sun 14 May 2023 22:14:37 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 142266
IP address blocks: 2406:840:fec0::/46 maxlen: 48
Validation: Failed, certificate revoked on Tue 29 Aug 2023 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2641 (0xa51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 14 22:14:37 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64615d4d-2792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:ea:8a:aa:58:59:c7:3b:91:13:3a:58:e7:
25:88:01:f8:76:bf:7f:1f:a1:3d:a8:e4:d1:28:31:
54:32:16:fb:99:55:eb:de:e8:dd:f0:bd:17:90:04:
63:8d:e2:d0:97:3c:6e:ec:45:6c:2e:0e:fc:4f:31:
45:60:ef:57:a2:5c:cc:fc:25:1d:21:ab:87:48:55:
28:eb:08:05:1d:b3:ba:c9:23:6f:e1:8d:9e:15:13:
f4:c1:2a:ef:f9:53:68:0b:42:3f:59:30:62:19:e2:
61:db:4f:05:be:e7:3f:00:64:50:41:c5:fd:9d:e8:
da:1e:bf:ec:f1:3c:01:4c:b5:12:97:16:6f:7b:7b:
2d:96:48:d7:1f:11:c5:65:83:c5:78:19:77:5e:73:
3f:bb:86:0f:71:e5:6f:b0:d0:be:8d:aa:a7:de:6b:
96:2e:57:63:2d:14:0d:80:f8:78:03:7d:8c:9b:58:
41:58:3d:42:80:08:d6:fa:0f:1a:e0:14:47:eb:7c:
f1:68:c9:30:bc:88:6a:74:9c:5d:d0:c8:c4:a7:47:
92:28:47:01:07:fb:ed:5a:a3:f9:a8:d9:e2:94:df:
8a:6f:91:5e:0d:df:6d:b0:ea:93:69:51:f0:78:7c:
0f:59:e0:d3:4b:d0:71:99:ef:9d:01:d8:86:1a:85:
fe:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9B:B0:48:E2:7B:FC:37:06:41:14:46:8B:2B:4B:C0:4D:5B:A6:C9
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/368C42ACBA5111EBA647D43EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fec0::/46
Signature Algorithm: sha256WithRSAEncryption
0f:f2:77:79:c3:45:1e:1d:24:c1:42:b8:4e:6c:46:9e:07:60:
96:a4:a3:07:be:ec:43:52:12:53:80:c7:8b:3d:a5:cf:f2:02:
2f:3f:3c:fa:83:76:f5:df:81:7e:41:bd:8c:73:0c:b7:72:82:
85:d6:75:b5:94:a2:ac:0e:ef:5a:95:13:11:7d:2b:b0:58:ca:
93:f1:45:5d:b7:98:49:1c:f1:eb:fd:c2:4b:b5:a6:d4:fa:f7:
50:3c:dd:00:d1:0c:9f:98:f2:fe:f2:2a:96:7e:41:c8:7c:38:
6c:5d:5b:5c:b9:f5:2d:a0:5c:db:98:5f:3d:96:bd:ca:40:a2:
6a:b0:ec:77:8b:9c:e8:a9:19:ad:32:72:dc:b0:f0:21:a5:81:
ab:e2:8c:73:8c:81:a6:52:7d:ea:73:6c:9e:7e:eb:29:a0:fa:
1a:a4:7a:aa:6e:d6:8c:18:4a:da:a5:06:d8:5a:9e:24:e8:e0:
12:20:d5:62:f2:60:28:6f:29:51:c3:74:2c:93:8f:6a:21:61:
21:44:d5:59:6f:76:91:be:f1:c7:33:18:40:10:d3:24:2e:d6:
f2:1a:4c:a2:3c:c0:fe:be:aa:3a:f4:15:3d:b8:56:eb:1a:3c:
be:bb:a0:4e:72:65:9c:79:e0:ae:f1:00:8b:b8:53:43:ac:b8:
42:07:4e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:13 2024 by rpki-client on console-fra.rpki-client.org