Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/8AC53B46EC1111ED8F8C8840C4F9AE02.roa
File: 8AC53B46EC1111ED8F8C8840C4F9AE02.roa (raw, json)
Hash identifier: e9ZACnCfIFI+1sulVcHHIDfnUJjOvijXDBnAeWxFypw=
Subject key identifier: BA:A6:29:08:3B:99:6E:DD:DC:B8:B5:5E:59:86:2A:A4:EE:50:56:EC
Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Certificate serial: E7
Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/8AC53B46EC1111ED8F8C8840C4F9AE02.roa
Signing time: Mon 01 Jan 2024 05:06:12 +0000
ROA not before: Mon 01 Jan 2024 05:06:12 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 134382
IP address blocks: 2001:df2:3dc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 16 Mar 2024 11:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Validity
Not Before: Jan 1 05:06:12 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65924843-3ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:69:85:89:09:0b:82:ac:d4:4d:2f:50:a6:
54:64:e1:57:19:69:0b:8a:c3:1e:60:0b:0a:66:93:
33:cf:5f:77:23:15:bb:2d:cd:5e:ec:44:d7:45:f1:
0e:5b:e0:5c:8b:b1:3f:b2:26:f6:70:df:a2:8d:06:
33:e5:f5:41:a8:1e:3c:01:de:b8:1d:d2:cd:69:9c:
a4:0a:b7:b5:c5:d0:36:c8:58:fe:bf:22:b9:6f:55:
29:2e:4a:5c:1a:83:f8:b1:90:0c:1d:db:dc:d2:3e:
a8:c7:4f:ae:6a:0e:bb:4f:86:1b:f9:e4:a8:e0:1a:
51:d5:10:bf:c9:3b:b8:52:3c:4a:b1:1b:bd:ef:24:
32:53:a0:bf:72:72:aa:3a:a8:07:7e:c1:00:e5:01:
cd:bc:26:59:6b:56:ff:32:8a:0a:4e:65:2f:09:ef:
b2:43:2f:8b:bb:ac:53:05:45:80:a3:65:7d:f5:42:
b2:c3:f5:51:1a:69:ae:e1:c1:e3:0b:49:cd:1b:33:
93:47:cb:17:15:86:36:e8:d2:0a:a6:ea:74:ed:1c:
69:d1:7c:ba:4b:80:5c:c3:27:71:2f:21:ad:6e:04:
3e:3c:8e:42:3f:f1:66:dd:e0:a0:dd:a1:28:16:af:
09:1f:ad:2f:e4:30:e3:6d:90:49:32:e4:fd:be:30:
15:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A6:29:08:3B:99:6E:DD:DC:B8:B5:5E:59:86:2A:A4:EE:50:56:EC
X509v3 Authority Key Identifier:
keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/8AC53B46EC1111ED8F8C8840C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:3dc0::/48
Signature Algorithm: sha256WithRSAEncryption
5c:8a:3e:64:45:ce:85:33:36:7b:c0:12:12:86:cf:1c:9d:21:
a2:00:90:a3:b7:94:67:05:e8:2d:af:cc:57:e7:9f:55:86:01:
dd:6c:3c:06:19:7a:f6:33:d1:2f:2f:bd:90:e7:09:a6:a4:c7:
8f:96:1c:e7:44:0c:63:b7:c6:ac:45:ad:90:40:73:b1:1f:8f:
94:82:1c:14:ef:78:b8:62:64:39:25:f1:90:31:a0:97:08:17:
3c:1a:b0:83:3b:22:18:2e:06:1e:4a:e6:0b:4f:34:fc:93:a2:
90:0e:25:38:79:ab:ce:e5:63:4a:d5:9b:b6:c9:14:20:d2:46:
7b:ce:3b:1d:dc:67:ac:d8:6d:db:1d:e2:d4:e3:95:a0:c3:24:
6e:5b:63:2c:11:b2:d9:0b:78:0b:97:f0:ab:46:7c:0c:14:57:
2a:18:50:9c:35:f9:c2:4d:44:ce:c8:81:09:1e:55:2e:6d:c9:
e7:90:07:97:53:5e:96:4c:73:76:fa:99:2d:b9:93:29:29:59:
ff:d2:1b:2f:76:df:6c:31:77:b3:c6:3b:0d:0a:d5:82:8b:dd:
fb:57:9f:de:96:6f:44:4a:e6:36:2c:1b:29:9a:b0:60:38:f5:
ce:38:1b:9f:96:db:0f:9c:07:15:85:cc:4f:48:16:00:7b:01:
4d:28:a5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 16 14:16:24 2024 by rpki-client on console-ams.rpki-client.org