Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4CAF6AB078C611EE83FF7E6FC4F9AE02.roa
File: 4CAF6AB078C611EE83FF7E6FC4F9AE02.roa (raw, json)
Hash identifier: x0UsHOHnSV7OMwd//GZX+kXhTGP5lMeAbHrqdK89Gy0=
Subject key identifier: 9B:13:C0:F3:9E:7B:BA:95:D3:36:A9:93:4F:AE:76:F8:24:FD:40:8D
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0D0A
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4CAF6AB078C611EE83FF7E6FC4F9AE02.roa
Signing time: Sun 14 Jul 2024 17:29:41 +0000
ROA not before: Sun 14 Jul 2024 17:29:41 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2406:840:9198::/48 maxlen: 48
2406:840:9888::/48 maxlen: 48
2406:840:e060::/44 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 Aug 2024 08:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3338 (0xd0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Jul 14 17:29:41 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66940b05-785b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:6b:8c:c7:a5:35:4e:8b:5c:c1:54:f8:90:
d5:b5:9b:d6:73:63:58:d5:88:fd:db:c0:68:db:b1:
26:92:35:a5:65:19:ff:e1:f6:20:d2:a1:1f:66:8d:
0d:2f:55:69:13:fb:6d:e6:41:e1:45:fc:76:2f:e3:
0e:05:e2:08:4e:4b:31:3f:b6:b2:f0:c7:37:51:8a:
54:94:38:d8:95:1b:a3:06:4e:e1:9e:8d:65:d2:9b:
bf:85:ca:ad:25:33:71:68:a3:aa:95:4e:2d:8e:f4:
b5:ee:ed:7c:91:6d:fc:5e:f8:40:ae:b1:40:9a:08:
8b:da:96:84:35:2a:90:4e:51:b5:97:48:47:dd:1c:
38:1e:8b:89:95:6c:24:73:3a:d3:c1:31:ba:b2:05:
a0:30:db:b4:b8:e0:f6:80:14:92:cb:91:7b:47:b9:
ea:66:85:59:64:73:22:d4:3c:5a:8a:c4:99:d4:c3:
54:88:05:8b:21:a6:c3:f1:fa:a3:57:d9:7a:f6:cf:
91:52:0c:39:af:21:b1:64:6a:49:db:4f:5b:d9:a5:
b1:2a:e2:e7:6b:89:b9:11:8c:75:cb:ab:78:5b:30:
76:65:73:e7:fa:5f:9b:95:2c:91:e3:6c:97:c8:b1:
42:24:fa:64:36:bc:ae:7d:d5:c7:05:56:4b:e0:9d:
ed:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:13:C0:F3:9E:7B:BA:95:D3:36:A9:93:4F:AE:76:F8:24:FD:40:8D
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4CAF6AB078C611EE83FF7E6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:9198::/48
2406:840:9888::/48
2406:840:e060::/44
Signature Algorithm: sha256WithRSAEncryption
46:da:03:ae:1e:12:55:ea:a0:20:b2:6d:dc:22:f5:96:d3:21:
2d:19:be:e6:e9:84:3e:82:c3:7e:07:ac:7f:8a:89:81:7d:59:
00:82:45:22:51:47:83:f5:51:dc:fd:5d:4c:90:06:7d:4c:ff:
e2:14:22:d1:30:71:57:95:4d:a8:bc:f4:44:53:38:40:67:b7:
d5:1c:9e:1e:7b:02:87:60:61:36:82:a8:77:98:87:f7:12:ad:
bb:7d:6c:5d:0d:d1:1d:66:0a:30:36:c8:e6:62:d2:07:60:5b:
6e:e5:6f:9a:60:e1:30:4f:e4:d6:8a:43:c4:7d:cc:c1:1c:2f:
d3:3e:2e:6e:1a:b9:39:d0:00:91:f8:19:3b:cd:ec:56:13:94:
1b:da:10:d5:be:8e:bd:57:f4:79:9c:e2:3b:8a:d4:b8:94:dd:
c3:d7:db:eb:d5:20:f5:1e:41:9a:54:e6:ed:0b:e6:0c:b0:c6:
73:54:ed:c6:c8:59:cd:0b:5e:d3:be:b1:b6:44:fd:9b:17:cf:
49:90:9f:f2:43:59:ef:18:69:f6:36:fc:39:df:92:da:ad:ff:
eb:8b:fe:ce:e3:af:b1:30:67:36:0d:af:27:1e:95:88:cc:62:
d0:00:12:54:85:71:67:ae:6e:9d:93:e9:eb:4f:25:7c:25:d4:
ac:7c:ee:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 09:09:22 2024 by rpki-client on console-fra.rpki-client.org