Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3EA1137E78C611EE9C9D626FC4F9AE02.roa
File: 3EA1137E78C611EE9C9D626FC4F9AE02.roa (raw, json)
Hash identifier: nwsM4n2luB2v1lg/2p34nCtvmGSIPEPEpe1lVwO9t5M=
Subject key identifier: 45:63:0C:0A:AD:30:13:10:5A:56:70:E2:B9:20:39:8D:BA:A1:76:35
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0B61
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3EA1137E78C611EE9C9D626FC4F9AE02.roa
Signing time: Wed 01 Nov 2023 14:52:14 +0000
ROA not before: Wed 01 Nov 2023 14:52:14 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 216056
IP address blocks: 2406:840:e070::/44 maxlen: 48
2406:840:eef0::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 24 Jan 2024 00:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2913 (0xb61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Nov 1 14:52:14 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6542661e-c8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:02:7f:49:f4:a9:74:ea:4d:1f:80:e2:84:
0e:28:48:32:fc:e9:ec:99:e3:ef:24:d1:a6:80:09:
f4:01:78:db:b9:07:c1:0b:83:e7:fe:8e:f7:45:d0:
dc:b3:f0:a2:2d:e0:11:f9:c8:97:f3:32:2d:f0:56:
59:0a:77:b8:e7:ce:c3:48:d3:f8:cd:d8:e1:f2:13:
76:60:3b:bc:2a:12:d4:59:2f:f5:4d:ad:82:92:a7:
59:42:07:cc:82:c9:9d:ab:b0:63:b5:e6:b3:14:78:
c6:3b:8e:39:a7:7e:03:0b:bd:9b:d8:b9:de:76:48:
36:7b:8f:6a:7c:28:2f:06:fb:52:fe:d8:cd:92:42:
3b:c6:3e:ca:8c:ca:39:99:c5:04:2f:6a:20:7c:e1:
0f:0c:c5:39:da:60:64:16:42:bb:77:3f:8a:62:06:
fc:55:37:20:a1:75:34:e6:d0:b5:e2:5c:98:59:b5:
9b:b9:d1:49:99:dd:db:03:38:c3:fa:92:2f:65:4c:
99:03:25:78:e6:5c:7d:9f:60:1f:ab:1e:cc:29:05:
44:c7:41:81:b3:18:88:a0:e8:2e:f4:57:b6:b7:28:
90:85:34:e2:69:c8:35:e7:a1:9f:07:21:c2:ac:68:
97:da:41:18:ee:85:13:4e:26:91:99:d2:3c:44:af:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:63:0C:0A:AD:30:13:10:5A:56:70:E2:B9:20:39:8D:BA:A1:76:35
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3EA1137E78C611EE9C9D626FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:e070::/44
2406:840:eef0::/44
Signature Algorithm: sha256WithRSAEncryption
74:4d:0f:b2:c6:b5:30:22:e1:51:65:ef:ff:13:fe:e0:fa:cc:
26:be:fc:9c:0e:24:8e:09:39:8e:6f:8f:cf:aa:6e:0c:c6:ce:
d3:d6:48:99:47:da:3f:7d:0b:3b:77:08:b6:ad:81:11:40:34:
8c:35:5b:49:28:bc:5f:1b:9e:60:f5:a1:af:60:8c:a2:ff:c5:
bd:98:ea:31:39:b4:7a:b0:00:67:57:85:96:d2:b6:1e:c3:a6:
1f:76:9a:ca:92:54:62:03:50:6f:93:b7:cc:f4:93:94:55:ae:
ad:c2:5f:94:d5:16:8f:bb:2f:28:c7:c6:ac:c1:de:fc:85:aa:
97:96:19:6e:d3:f0:c5:bc:0d:31:ca:17:54:a4:5b:19:4b:35:
c6:0b:d9:27:a0:43:e5:bc:29:e1:ac:dc:f3:ff:80:27:e6:12:
98:d0:ff:c3:df:11:fa:de:c7:ae:7b:48:ff:a8:d4:bd:6d:92:
05:b9:df:13:49:e3:f2:c1:fb:aa:76:32:24:81:d5:86:51:37:
fc:da:66:93:3d:c8:d8:99:5b:e4:c3:e7:f2:af:45:94:70:94:
b1:8a:f3:fc:10:1d:7c:17:d4:77:9b:37:4a:6a:29:36:04:77:
63:bd:5f:07:2f:cb:88:fe:44:2f:9e:55:31:35:93:dd:1e:71:
bf:57:75:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-ams.rpki-client.org