Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/D4EFF104979411EFA7737268C4F9AE02.roa
File: D4EFF104979411EFA7737268C4F9AE02.roa (raw, json)
Hash identifier: RblJfhNfXXurl3u8GnZNmwpoK7vvvuGnCATifl4q32k=
Subject key identifier: 2C:CC:F5:50:42:FB:E3:E3:66:12:53:28:DA:B6:00:05:5A:05:94:10
Certificate issuer: /CN=A9190818/serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A
Certificate serial: 09
Authority key identifier: 54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/D4EFF104979411EFA7737268C4F9AE02.roa
Signing time: Thu 31 Oct 2024 14:31:36 +0000
ROA not before: Thu 31 Oct 2024 14:31:36 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 153371
IP address blocks: 2401:ce20::/32 maxlen: 40
Validation: Failed, certificate revoked on Sun 03 Nov 2024 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190818/serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A
Validity
Not Before: Oct 31 14:31:36 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=672394c7-1921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:41:08:33:11:da:fe:32:a9:51:74:71:a0:
f1:60:80:ab:2a:1b:4a:4e:44:8e:af:d9:26:d1:a0:
d4:70:38:b8:11:04:5a:f5:7f:d0:b3:26:ec:b3:ca:
b7:ff:30:21:50:d3:d3:02:3f:d9:14:9f:cb:1d:63:
e3:77:23:4f:d0:ed:7f:16:d6:01:bf:7f:3a:dc:46:
f9:aa:c9:eb:78:b8:b9:7d:f1:98:a6:9a:5d:e7:e2:
36:7a:af:36:fb:bf:f2:e4:17:0b:1b:08:24:1a:4d:
4a:20:47:4c:8d:b4:a1:42:40:31:87:9a:0d:c4:58:
4c:c9:9a:0a:b8:24:57:ab:91:8b:3e:d2:3d:b9:ab:
9d:12:05:96:94:f7:51:62:c6:4d:14:aa:95:cd:a2:
0c:e8:19:40:97:06:b9:66:1c:fd:59:34:56:bb:45:
d6:1a:63:02:37:52:72:fd:16:a0:33:b9:a7:da:f5:
34:ef:96:10:27:b9:b5:e9:0c:5a:fd:3f:10:2e:70:
b9:94:a0:d6:23:19:e4:7e:df:ce:de:cf:92:69:a1:
09:f2:0a:da:ee:10:21:81:72:e1:ae:39:69:b0:a2:
38:1f:2f:af:15:7a:d4:4a:9a:8d:41:10:df:e7:59:
88:f7:d8:28:85:47:d9:ab:da:96:3a:f0:81:da:8f:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CC:F5:50:42:FB:E3:E3:66:12:53:28:DA:B6:00:05:5A:05:94:10
X509v3 Authority Key Identifier:
keyid:54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/D4EFF104979411EFA7737268C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:ce20::/32
Signature Algorithm: sha256WithRSAEncryption
09:e3:18:78:88:f1:69:e9:c1:6b:07:22:3b:b3:e7:3d:79:e6:
83:06:79:18:8b:8b:7a:e3:0f:5c:00:47:0b:89:ef:2d:0b:ce:
ec:ca:79:38:a5:15:87:06:27:f7:94:46:52:42:19:0b:ce:da:
4b:7e:1d:d6:92:c9:7e:6a:fa:90:ba:6d:3a:2b:b5:9d:3f:0d:
e7:38:a7:62:8a:ad:29:b8:fc:59:87:5e:40:a2:f6:63:ab:62:
ed:cd:2d:e8:9b:18:9b:0f:bc:b2:63:8e:ac:6e:92:bc:71:cc:
74:a9:0e:c8:bb:59:7d:54:db:50:d4:3f:ed:71:70:ce:81:df:
5a:3b:cd:4e:77:9f:7d:d1:75:ca:09:08:80:96:66:31:3b:a6:
c4:6a:a9:4f:2c:04:e0:95:14:27:4f:c4:d7:84:7d:87:d1:a5:
57:ea:6a:4f:e7:ad:ae:a4:35:05:92:af:df:53:eb:4c:1d:a4:
b0:7e:1b:f0:e1:a2:cb:ed:46:a6:40:42:ae:41:71:84:ab:b8:
67:4b:58:e4:5d:08:6a:60:3e:ea:b9:25:5c:70:af:51:c5:1e:
75:a1:b4:fe:49:3a:6f:ce:1f:96:b4:83:7b:71:09:b8:e3:dd:
b4:42:59:06:28:e9:d6:ec:93:0e:3e:1f:92:39:96:06:97:92:
4c:6e:e9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 20:02:30 2024 by rpki-client on console-ams.rpki-client.org