Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/609D8812EB0211EB941D6283C4F9AE02.roa
File: 609D8812EB0211EB941D6283C4F9AE02.roa (raw, json)
Hash identifier: IF22V44D+ElTAuoT0UFa2gk+XoCyzT4LoZzXrB1hzbI=
Subject key identifier: AF:1A:A2:86:EA:EE:12:D0:17:88:94:15:24:D0:BA:19:97:91:C5:C0
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 0F5B
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/609D8812EB0211EB941D6283C4F9AE02.roa
Signing time: Wed 16 Aug 2023 18:16:22 +0000
ROA not before: Wed 16 Aug 2023 18:16:22 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 17830
IP address blocks: 2404:f4c0:f980::/44 maxlen: 48
2404:f4c0:f990::/44 maxlen: 48
Validation: Failed, certificate revoked on Sun 14 Apr 2024 16:51:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3931 (0xf5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 16 18:16:22 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64dd1276-3b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:04:a2:d1:4a:cf:7f:59:7e:24:cf:93:7b:
5f:1f:31:54:02:44:64:7c:30:6a:f7:0f:c9:62:92:
19:60:ec:23:f5:38:8e:6f:b0:b7:46:56:d3:f7:09:
0e:c1:7e:25:de:49:6f:03:3b:75:8c:3b:58:22:6c:
a9:3e:a4:39:87:82:36:c7:f9:cf:dc:0b:1a:b1:f8:
df:01:8f:20:f1:b5:06:98:59:84:2a:2d:97:8c:4a:
da:a6:bc:c6:26:9e:17:00:99:3c:ac:af:17:57:97:
70:06:0a:ae:94:b1:03:43:b8:1c:4f:3f:cb:11:c0:
24:d9:de:10:11:a2:b7:ea:44:d3:29:75:cf:a1:3d:
84:71:f0:61:81:c3:94:55:57:2f:ff:e6:07:b2:99:
b3:50:6a:87:d4:2d:3d:13:f6:a8:5b:52:f9:68:5f:
d9:0d:56:bd:6d:ca:6f:16:18:9d:a1:9e:31:f3:e0:
76:be:89:78:36:4d:8a:e1:28:e7:cd:f1:91:10:96:
6d:88:ca:bb:0d:08:67:ee:2e:f9:1b:92:2f:04:69:
4c:eb:b4:66:92:07:b8:43:a9:a1:63:05:5e:0b:cc:
3d:b6:5b:7e:05:b9:2d:15:74:8d:fd:00:a8:dd:89:
7c:bd:2e:30:11:49:9f:0a:c7:0d:62:4f:30:4c:2d:
3d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1A:A2:86:EA:EE:12:D0:17:88:94:15:24:D0:BA:19:97:91:C5:C0
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/609D8812EB0211EB941D6283C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:f4c0:f980::/43
Signature Algorithm: sha256WithRSAEncryption
b3:f4:08:9c:09:63:a5:fb:11:76:8b:74:00:72:5c:a8:07:e3:
2d:b0:90:fb:2f:b4:b4:0b:ab:58:c7:2f:ae:74:a8:ae:18:b2:
98:45:63:86:53:99:81:f0:25:26:2c:ea:e0:be:68:58:e2:85:
3f:3b:51:e2:4c:4d:3a:f5:96:75:04:89:29:70:3e:dc:22:4f:
b8:40:86:20:76:3f:1f:37:71:e0:48:6b:00:75:ee:f1:c9:2e:
12:20:b4:85:cf:a7:0d:8f:c2:15:c1:03:34:ab:64:45:a8:93:
51:cb:80:02:30:27:64:dd:3b:45:a7:ec:29:11:a9:79:5e:0c:
81:fa:0f:34:e4:85:df:41:52:e5:3b:1b:76:eb:2b:73:b1:fc:
4c:a4:ae:8b:e2:54:97:9f:a5:b7:54:49:c6:3f:bd:ee:3c:46:
5f:20:f6:0f:ec:d3:58:4e:bb:34:43:38:e0:f2:d9:67:72:2c:
ab:31:52:7c:3b:0d:b3:fc:51:01:83:da:6c:51:14:9e:55:ce:
89:c0:cd:f2:95:42:a1:cf:d4:9b:b0:99:14:a5:46:d5:0f:56:
9e:fe:df:da:b2:8f:a7:34:cf:d3:7e:44:77:f1:7b:88:bd:55:
b7:e3:b0:0d:01:85:a0:60:29:61:db:05:fa:e3:69:8e:b7:67:
da:83:83:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 17:55:44 2024 by rpki-client on console-fra.rpki-client.org