Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4A0E70BC0ED011EFABFC2A57C4F9AE02.roa
File: 4A0E70BC0ED011EFABFC2A57C4F9AE02.roa (raw, json)
Hash identifier: 6gIbsi/G0Eoh2sFgO5RbTE9fqafY9dr28xYCfZpXCJ4=
Subject key identifier: F7:85:1C:B2:A2:91:85:6F:7C:79:93:C0:B9:17:9D:29:A4:B5:02:09
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0C1F
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4A0E70BC0ED011EFABFC2A57C4F9AE02.roa
Signing time: Fri 10 May 2024 13:22:03 +0000
ROA not before: Fri 10 May 2024 13:22:03 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 140936
IP address blocks: 2406:840:eed0::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 10 May 2024 14:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3103 (0xc1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 10 13:22:03 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=663e1f7b-890c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:06:b9:71:53:9a:e6:4e:a8:37:b7:36:34:
04:98:e4:f0:48:01:e8:b3:cb:17:bc:d0:84:71:d5:
46:5e:11:08:b8:8f:6e:79:38:0a:87:63:24:17:49:
38:cf:9f:e7:1e:80:9d:b3:dc:a3:2b:5e:13:0d:0c:
dd:3d:71:de:07:df:27:be:4c:9d:fa:13:28:8a:6d:
52:95:fc:1d:41:78:f4:8d:77:d1:27:18:42:df:ab:
f6:e7:8e:25:da:63:3c:d1:ae:df:89:54:01:4e:33:
41:1a:e6:18:ee:ff:04:a5:b2:47:1a:ac:78:1f:93:
e2:52:dd:65:22:a3:f1:f7:df:7f:42:87:8e:eb:0f:
a5:6f:1d:2a:b3:b4:71:82:8d:57:48:5c:d6:f4:6a:
6e:e3:26:5f:a6:c0:b6:39:2b:2f:08:4d:0b:5f:9b:
ef:00:05:48:e7:f6:b0:64:60:8b:7c:a7:65:4c:3b:
4d:fa:7e:08:7d:a4:f7:1b:dd:b3:75:ac:3f:8d:94:
29:be:0c:1f:0e:d2:5c:f8:64:3c:04:d0:41:a1:ef:
41:a1:37:14:c4:0a:40:b5:f1:1f:72:f1:53:e3:1b:
0e:a3:48:8a:b9:b4:dd:8f:68:fb:5e:d8:a1:87:d3:
27:87:8d:72:80:a9:bb:c7:60:ef:81:e1:ec:fe:a2:
38:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:85:1C:B2:A2:91:85:6F:7C:79:93:C0:B9:17:9D:29:A4:B5:02:09
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4A0E70BC0ED011EFABFC2A57C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:eed0::/44
Signature Algorithm: sha256WithRSAEncryption
97:5d:16:04:79:bc:d8:58:57:9d:21:b6:be:eb:4d:14:99:8c:
88:bf:f0:ec:ad:a2:0c:6b:22:29:b1:a6:e0:ea:e7:40:08:df:
14:d5:aa:7d:9c:b2:f6:f6:a2:1b:e1:d8:11:33:2f:43:a8:1b:
43:66:54:be:a3:0e:d5:a1:37:ce:eb:dd:1d:fc:2a:5f:ae:64:
d3:36:bb:7f:20:8f:50:b6:fc:b8:c1:fe:ca:be:7d:32:36:c3:
63:24:1b:f1:58:a9:58:24:99:04:94:34:90:83:97:8f:a6:8f:
20:a7:90:17:2b:27:57:69:e3:30:d9:8f:ee:f0:e4:24:d4:39:
68:0f:32:f9:9f:b2:c9:eb:74:8e:d7:b0:fd:bc:49:72:98:2c:
ff:f9:6c:51:34:a4:76:cf:55:97:92:f9:72:b4:4f:c0:c2:97:
c7:49:41:6e:04:e0:da:0c:d6:6d:34:b4:9a:a8:e5:b3:64:84:
bf:5a:af:70:47:95:4e:8b:5a:7c:4c:c7:36:c2:2e:0f:57:cc:
f8:8d:02:95:44:16:29:13:80:36:d6:70:92:1e:38:f4:48:dd:
0d:fa:de:86:53:59:c5:85:82:11:bd:d6:b0:e6:4e:65:b7:54:
04:c1:f3:5c:fa:34:03:4e:33:88:13:1b:39:09:94:ad:96:a7:
f1:b7:a5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:13 2024 by rpki-client on console-fra.rpki-client.org