Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EB22C65A510511ECB3B1A47AC4F9AE02.roa
File: EB22C65A510511ECB3B1A47AC4F9AE02.roa (raw, json)
Hash identifier: jNL0LA9MxNiAmwnyyu3si7R+Ldbw+3JfQDoh/2+ATks=
Subject key identifier: 7E:71:C2:A5:26:31:B5:DA:36:1C:DD:0E:D8:A2:27:71:A7:C1:B9:E0
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0A57
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EB22C65A510511ECB3B1A47AC4F9AE02.roa
Signing time: Sun 14 May 2023 22:14:44 +0000
ROA not before: Sun 14 May 2023 22:14:44 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 142634
IP address blocks: 2406:840:e240::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 28 Nov 2023 08:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2647 (0xa57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 14 22:14:44 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64615d54-a34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:87:8c:80:63:21:74:10:50:9f:be:c8:83:
22:6e:a4:37:47:71:d2:ab:3f:28:5d:ef:c5:36:b2:
6b:f7:4b:b3:e2:54:b1:01:04:f0:8d:a0:87:23:2e:
fc:6b:67:de:d4:06:19:2a:49:9f:54:b3:3e:f0:49:
37:9a:fd:3c:4a:83:df:52:42:1c:9a:1f:11:51:e0:
f7:e6:d7:c9:fa:00:e5:7b:d5:f9:9c:28:4c:20:de:
75:f0:72:a6:10:79:b2:8a:31:d5:65:73:de:27:f3:
be:6b:5a:15:05:4d:7c:ab:28:32:d6:48:11:75:ce:
b0:b4:3a:f5:e2:d1:71:14:ed:80:e1:37:1f:1a:c7:
42:46:4f:29:1b:9f:ad:32:6a:ca:95:f8:f6:51:44:
07:71:e5:b2:ec:c5:4d:bc:4c:29:b9:91:57:64:46:
8e:12:0d:bb:45:15:44:fa:94:d1:18:f1:eb:c8:c5:
ac:f7:47:87:ec:22:30:8c:d0:3f:8e:75:24:64:c3:
8b:76:de:6b:3e:94:a2:fe:49:18:8c:d9:e3:4a:b1:
cd:04:f7:d9:bc:d4:2f:61:7f:52:d5:82:4b:fd:13:
6e:63:54:23:c8:69:b5:82:ac:2f:67:3f:80:43:c3:
6e:0f:c9:81:b5:89:68:1a:1a:e0:54:64:6a:4b:02:
14:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:71:C2:A5:26:31:B5:DA:36:1C:DD:0E:D8:A2:27:71:A7:C1:B9:E0
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EB22C65A510511ECB3B1A47AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:e240::/44
Signature Algorithm: sha256WithRSAEncryption
8e:23:d6:c4:5c:4c:29:76:50:91:43:dc:07:54:d0:7a:ae:26:
22:49:70:89:73:bb:b0:31:67:49:ad:5d:d3:42:0a:90:3b:a8:
1d:63:98:f7:f8:2d:db:ec:f9:f8:ef:2b:a9:b5:4d:bd:d6:f2:
57:7a:a5:3b:b5:c0:0b:d4:29:54:b7:f9:42:d6:7b:04:71:c3:
48:f5:d5:2c:6b:17:c3:96:6e:16:fe:9d:09:b8:65:9f:66:98:
87:2b:94:2a:25:57:9c:a9:2a:93:b4:57:10:21:70:ed:44:ae:
b9:7c:98:9e:c0:6d:87:e2:27:83:04:cd:17:93:ba:38:bc:6c:
94:0e:3c:7a:97:21:36:1c:e2:ec:1a:53:c6:56:e5:1c:56:44:
b5:fd:bd:96:57:f3:b5:fc:f1:32:c0:22:59:33:bd:cd:4f:94:
91:aa:44:f6:8a:65:27:58:1f:b9:b6:45:69:3a:23:e3:c6:79:
1d:1a:08:5a:1d:4e:3c:d4:07:c9:0c:ff:54:02:bb:5d:18:14:
49:75:5e:49:09:3c:d6:8f:dc:88:4a:e4:63:a8:1a:0a:71:cc:
74:bb:b4:21:70:e4:a3:d5:ad:00:88:29:05:d7:e1:15:97:b3:
75:7d:99:19:fd:f4:f1:fa:6f:0e:cd:7f:ba:65:30:c6:0c:44:
4a:9b:d3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:13 2024 by rpki-client on console-fra.rpki-client.org