Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/FAD902E2860B11EAA83B7B38C4F9AE02.roa
File: FAD902E2860B11EAA83B7B38C4F9AE02.roa (raw, json)
Hash identifier: hcrsRMBNE6GsuwohfpzKD6o7Hdx9Z8dBkR2VBh05Ax4=
Subject key identifier: B7:D8:4A:B8:07:C2:BC:80:6B:0E:7C:9C:53:43:DB:62:38:3B:31:0C
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0A71
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/FAD902E2860B11EAA83B7B38C4F9AE02.roa
Signing time: Sun 14 May 2023 22:15:16 +0000
ROA not before: Sun 14 May 2023 22:15:16 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 208698
IP address blocks: 2406:840:eee0::/43 maxlen: 48
Validation: Failed, certificate revoked on Tue 19 Sep 2023 03:58:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2673 (0xa71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 14 22:15:16 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64615d74-9664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:24:da:d7:2a:eb:24:1f:fb:fe:bc:e4:9e:
67:fc:35:6a:ad:39:2d:6e:62:f9:6b:f8:51:79:e1:
07:c5:ac:fb:74:69:40:a5:8b:cf:86:59:8b:be:26:
e7:d4:da:17:19:ca:a9:0a:63:5f:eb:4e:7a:31:a5:
2a:c5:da:0d:dd:c6:ac:95:f8:5f:ca:3b:46:1b:f1:
5b:85:a7:a3:c8:f1:96:1c:72:f7:2f:bc:43:6f:6f:
12:ca:2d:db:c2:24:02:b7:b0:f2:7c:f1:e2:2b:d9:
98:2e:3c:a2:a6:23:a4:43:2b:11:54:f3:0a:3f:bb:
a2:9a:4e:d2:fe:31:62:d5:2f:ff:d9:c5:ed:65:19:
52:8c:e9:e4:8d:85:5a:c1:de:0c:db:1d:7f:37:46:
78:ca:31:21:0e:20:43:70:26:44:e0:a6:5a:d9:2f:
fe:c5:f6:ea:f4:b4:16:94:c1:95:35:ba:83:77:9a:
1f:0b:b0:e8:f3:bc:f4:67:8d:b3:c1:b6:bd:c6:f8:
5a:57:89:d7:e5:7a:d8:11:71:a7:68:6f:80:22:c4:
dd:0b:3d:68:2c:45:67:32:36:63:9e:fc:d8:07:b1:
1b:b5:49:0d:5f:80:9d:4d:ec:c4:ad:31:96:c4:d4:
5e:fd:0c:c6:a6:b3:68:6d:86:09:84:7d:53:4c:71:
33:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D8:4A:B8:07:C2:BC:80:6B:0E:7C:9C:53:43:DB:62:38:3B:31:0C
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/FAD902E2860B11EAA83B7B38C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:eee0::/43
Signature Algorithm: sha256WithRSAEncryption
30:68:71:9d:05:00:0e:77:d9:85:49:11:6d:bd:df:a4:82:b4:
3c:fd:95:38:b6:48:8c:71:71:22:57:b2:8b:d6:3e:d7:29:6b:
26:c7:1a:40:2d:d0:03:2f:86:41:c8:1e:18:ab:ed:d6:cc:58:
6f:16:28:35:8b:db:bf:3b:ae:39:23:d6:62:c9:55:9c:0b:50:
57:72:93:90:40:29:65:c4:c6:b9:9a:bc:d6:21:85:ae:0f:7f:
6a:e7:29:c9:b7:be:bb:f6:ee:3c:b5:af:df:f5:56:10:79:4d:
20:2a:96:b8:00:a9:ba:69:2c:b6:3e:af:1f:78:b1:9d:72:fa:
92:93:63:19:01:83:7e:84:e6:7b:d3:73:08:6f:6d:7f:13:dd:
85:4e:85:0d:ad:15:05:b4:0d:f9:dd:a6:cc:99:66:87:7e:07:
5b:fd:4e:1b:28:da:2a:8f:fe:60:7d:e9:f6:d0:ae:ec:46:72:
39:6b:b5:4e:63:02:f3:ad:c1:67:64:71:19:a2:c4:b8:47:d3:
c7:bd:d5:4e:99:43:de:23:a8:f9:ef:16:07:f8:0a:90:a6:33:
3a:49:7f:9c:87:51:bf:53:5b:0f:d1:49:79:64:81:2e:59:55:
dd:c7:37:1f:9d:ef:e3:3a:ed:45:86:84:f4:b3:20:6a:94:1a:
03:b5:5f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:13 2024 by rpki-client on console-fra.rpki-client.org