Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/3A31565E5E4011EFB4B16A76C4F9AE02.roa
File: 3A31565E5E4011EFB4B16A76C4F9AE02.roa (raw, json)
Hash identifier: ddbarGXfayzKnUHS3CYUWJW8Fyv3KujRXfhDfpGk8gM=
Subject key identifier: FE:D9:08:C7:EB:BD:95:C1:6C:0F:5E:12:93:0B:2A:8B:F3:52:EC:5A
Certificate issuer: /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Certificate serial: 02
Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/3A31565E5E4011EFB4B16A76C4F9AE02.roa
Signing time: Mon 19 Aug 2024 15:32:22 +0000
ROA not before: Mon 19 Aug 2024 15:32:22 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 16509
IP address blocks: 64.251.192.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Aug 2024 21:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Validity
Not Before: Aug 19 15:32:22 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=66c36586-968e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:46:f9:2b:b3:bf:dc:e9:1f:85:79:20:be:
cd:13:9c:8e:30:78:b0:ff:e9:f7:1e:dc:a5:17:d0:
cd:7d:43:88:dc:de:76:cd:24:c5:54:18:11:c9:b8:
18:c4:ba:9e:99:0c:18:8d:4a:8f:df:1f:4c:82:3a:
45:9e:3f:3c:ee:f6:85:ea:bb:e3:42:4f:5c:c4:1c:
4a:69:d0:43:b3:f9:31:96:36:52:4b:2a:ca:60:f9:
60:9b:ab:a7:82:04:95:55:e1:7c:8c:3d:ac:2e:e1:
29:7b:84:6b:61:67:ff:4e:e4:9e:50:09:23:b0:ff:
fa:69:70:15:67:24:7f:07:41:de:02:19:3c:69:8c:
1f:bd:74:8e:53:48:30:6f:8c:6f:a9:b0:58:68:bd:
56:b0:7c:f5:28:96:3c:64:3e:01:16:d4:e6:14:e3:
1a:a3:6e:0e:dc:99:ab:65:ab:d7:d2:07:b7:0a:4a:
6e:a7:6f:70:9f:ad:9c:5b:8f:52:60:ec:38:f4:d6:
14:ae:d5:30:08:da:08:4a:61:94:22:f5:54:1c:2d:
9d:10:e7:98:aa:25:49:b9:f8:98:e3:f3:88:ba:66:
be:3a:5a:c9:b8:f5:28:3d:29:c0:cb:e1:fd:66:4a:
40:07:e8:ed:ca:9b:2d:58:68:09:14:f5:ba:6a:6d:
14:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D9:08:C7:EB:BD:95:C1:6C:0F:5E:12:93:0B:2A:8B:F3:52:EC:5A
X509v3 Authority Key Identifier:
keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/3A31565E5E4011EFB4B16A76C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
64.251.192.0/21
Signature Algorithm: sha256WithRSAEncryption
14:95:29:9c:a1:b7:61:1f:96:57:3f:f5:02:d1:dd:5a:93:fb:
27:4e:54:80:68:e4:b6:3a:cf:94:41:5c:75:9a:00:e1:84:8a:
3b:21:2c:bf:31:91:8e:6d:80:56:71:54:f2:75:71:17:6b:b5:
04:d3:e9:c9:10:2d:ae:45:84:fd:56:d2:94:6d:8a:8f:25:04:
41:15:16:a2:e5:97:c1:88:34:e1:bb:f4:14:ff:22:5f:2a:64:
a3:9e:1a:5c:03:26:bb:25:29:96:5c:24:95:2e:9c:15:8b:24:
05:1f:fd:61:de:d3:b0:60:99:b0:0e:a6:de:51:7b:b7:22:40:
0e:c9:1d:a2:85:b3:eb:82:85:f7:27:26:55:5f:17:2b:10:3d:
bf:69:98:96:89:92:87:27:1c:75:2e:bc:f5:3d:1b:22:78:dc:
34:d2:7b:16:ba:7a:0c:f6:63:34:0a:5d:f6:1c:59:bd:1c:60:
ee:21:e8:c0:79:a2:ac:48:88:bf:af:b7:3a:55:3b:34:1d:db:
b9:fb:68:b5:34:2a:76:d3:96:48:0c:26:09:33:f1:4a:c6:3e:
55:6f:9b:6a:8e:fa:6e:8a:c8:92:40:bc:90:f1:83:ac:d4:3d:
ec:ba:be:e6:75:84:ca:01:2a:1b:9b:50:72:be:f6:ba:3c:e7:
41:a3:60:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 23:49:46 2024 by rpki-client on console-fra.rpki-client.org