Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4839A1B0BC8311EA8D315C3BC4F9AE02.roa
File: 4839A1B0BC8311EA8D315C3BC4F9AE02.roa (raw, json)
Hash identifier: OsuDNWdXmKRbAqZLE4l/b2/QtcVpA2npU4yPR8Itr2I=
Subject key identifier: 4C:02:5C:55:1E:87:80:C0:8B:26:F1:A1:43:1A:54:6B:3F:78:0B:4D
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0A3A
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4839A1B0BC8311EA8D315C3BC4F9AE02.roa
Signing time: Sun 14 May 2023 22:14:11 +0000
ROA not before: Sun 14 May 2023 22:14:11 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138211
IP address blocks: 2406:840:e180::/44 maxlen: 48
2406:840:e240::/44 maxlen: 48
2406:840:e400::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 19 Dec 2023 13:51:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2618 (0xa3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 14 22:14:11 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64615d33-3cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:50:08:4a:37:d3:4f:a9:67:82:e2:d1:6b:ad:
1e:7d:16:42:9b:a6:27:02:f1:cf:e7:60:5e:60:32:
b3:a6:52:49:04:0b:02:ff:e6:37:45:52:61:6c:c7:
98:14:f3:a9:6f:42:6b:a6:9a:2c:46:49:0f:6e:1a:
ef:87:46:fb:8c:c8:f9:a4:1a:35:63:87:77:de:d0:
38:ed:fc:5a:a1:8c:59:b9:cc:b6:59:0b:bc:3a:dc:
2a:59:58:c8:57:eb:67:e1:f4:a1:d0:4b:99:a0:f6:
44:e1:db:b8:e9:a5:80:1a:0e:99:0f:e4:58:ff:f8:
23:9d:4f:da:71:6b:b4:96:7a:76:16:24:c4:92:ea:
75:c0:53:a2:20:53:39:a3:63:5b:02:1a:5a:6f:59:
6a:0f:06:bb:b6:64:07:c3:ff:be:cb:74:a4:fa:0c:
07:e6:31:2c:7f:7d:78:4d:e9:13:85:10:fc:c8:01:
49:d2:f8:02:db:8b:e1:cc:4c:54:32:50:08:2e:41:
93:58:b4:c0:57:3e:02:1e:04:49:37:8e:56:73:b7:
87:c4:27:47:5f:6a:2a:83:7a:07:99:f6:61:35:2f:
62:59:d5:a0:9a:50:f0:f8:2f:8d:1e:f7:0d:bd:9b:
9a:17:e3:73:cd:15:e1:05:99:2c:54:23:1c:6e:4e:
29:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:02:5C:55:1E:87:80:C0:8B:26:F1:A1:43:1A:54:6B:3F:78:0B:4D
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4839A1B0BC8311EA8D315C3BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:e180::/44
2406:840:e240::/44
2406:840:e400::/44
Signature Algorithm: sha256WithRSAEncryption
46:46:f0:8e:f2:e4:9e:14:bd:9d:6c:3f:28:ac:5d:90:76:f7:
d8:b0:32:e1:8e:2f:fe:01:b3:91:73:62:f6:87:38:56:d6:c0:
75:cd:45:e8:e4:31:13:83:5f:b4:2f:a9:b6:24:9c:86:07:79:
2c:d8:9b:cb:31:bf:a3:b9:77:42:6b:7b:0f:2d:c6:b1:4a:19:
87:13:ad:33:eb:6f:5d:1a:de:57:ad:80:0d:38:8c:6d:3a:67:
4a:c5:48:6d:77:66:49:b5:12:3e:c1:af:87:d0:13:82:3b:71:
d9:2a:34:5e:5f:4b:69:6c:46:16:11:87:6b:c7:17:d5:49:36:
1d:1f:62:d6:24:9d:2e:b3:ec:1e:45:84:56:a1:4e:90:3f:4e:
20:4c:2e:59:67:ce:d5:24:c9:cc:fd:4a:17:09:9d:ed:87:27:
74:b1:a6:1d:72:c9:92:d0:a3:e1:22:ce:a3:4e:47:34:26:83:
72:db:66:9e:e4:a2:ca:c3:b1:a5:10:7e:17:b7:fb:01:85:09:
5a:c2:0d:66:d6:74:e7:91:89:7c:81:71:05:af:56:d5:84:85:
6b:55:a4:0f:37:0f:d8:da:11:db:1b:5a:58:a4:5f:ef:e6:77:
e7:71:a4:11:1f:81:75:49:0b:e3:13:0c:71:45:96:79:1b:a4:
22:de:6f:7c
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICCjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjMwNTE0MjIxNDExWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDYxNWQzMy0zY2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8VAISjfTT6lnguLRa60efRZCm6YnAvHP52BeYDKzplJJBAsC/+Y3RVJhbMeY
FPOpb0JrpposRkkPbhrvh0b7jMj5pBo1Y4d33tA47fxaoYxZucy2WQu8OtwqWVjI
V+tn4fSh0EuZoPZE4du46aWAGg6ZD+RY//gjnU/acWu0lnp2FiTEkup1wFOiIFM5
o2NbAhpab1lqDwa7tmQHw/++y3Sk+gwH5jEsf314TekThRD8yAFJ0vgC24vhzExU
MlAILkGTWLTAVz4CHgRJN45Wc7eHxCdHX2oqg3oHmfZhNS9iWdWgmlDw+C+NHvcN
vZuaF+NzzRXhBZksVCMcbk4p4QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFEwCXFUe
h4DAiybxoUMaVGs/eAtNMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNDgzOUExQjBC
QzgzMTFFQThEMzE1QzNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMCEEAgACMBsDBwQkBghA4YADBwQkBghA4kADBwQkBghA5AAwDQYJKoZIhvcN
AQELBQADggEBAEZG8I7y5J4UvZ1sPyisXZB299iwMuGOL/4Bs5FzYvaHOFbWwHXN
RejkMRODX7QvqbYknIYHeSzYm8sxv6O5d0Jrew8txrFKGYcTrTPrb10a3letgA04
jG06Z0rFSG13Zkm1Ej7Br4fQE4I7cdkqNF5fS2lsRhYRh2vHF9VJNh0fYtYknS6z
7B5FhFahTpA/TiBMLllnztUkycz9ShcJne2HJ3Sxph1yyZLQo+EizqNORzQmg3Lb
Zp7kosrDsaUQfhe3+wGFCVrCDWbWdOeRiXyBcQWvVtWEhWtVpA83D9jaEdsbWlik
X+/md+dxpBEfgXVJC+MTDHFFlnkbpCLeb3w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-ams.rpki-client.org