Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/31A7C2F6BE0911EF968E820FC4F9AE02.roa
File: 31A7C2F6BE0911EF968E820FC4F9AE02.roa (raw, json)
Hash identifier: 6++XtaJ8fNmMvOZeWHghdxBq+qQ0o2Xl9vKHno86MG8=
Subject key identifier: 49:6E:BA:43:33:2F:C5:40:91:6E:9B:EA:00:A1:A0:0A:BF:4A:C5:43
Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Certificate serial: 022C
Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/31A7C2F6BE0911EF968E820FC4F9AE02.roa
Signing time: Thu 19 Dec 2024 13:00:17 +0000
ROA not before: Thu 19 Dec 2024 13:00:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2401:93e0:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 02 Feb 2025 14:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3AB3
Validity
Not Before: Dec 19 13:00:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=676418e1-1fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7d:36:63:85:9e:13:c6:84:2c:70:9e:df:36:
4e:4e:60:8a:ca:aa:78:f8:68:3d:13:29:e5:1b:1e:
21:ae:67:d4:69:8b:18:f0:84:df:8f:b8:99:23:62:
71:8d:cd:7b:14:bc:86:a6:1a:ca:0d:9d:81:5f:55:
e3:61:0e:49:ad:98:ff:15:09:cf:bb:10:3f:18:1b:
6b:e3:14:0e:e2:73:8a:f2:c8:bc:dc:10:ee:4f:a2:
78:cc:33:6d:d5:e6:6a:57:0a:24:bc:9f:a6:c4:5b:
b2:76:2e:e6:81:68:f2:b7:51:f4:24:f6:af:93:46:
c9:5b:f6:40:10:2d:e9:9e:06:84:f0:5f:b4:a4:73:
ba:b8:3d:d0:87:84:3e:18:b3:4e:b1:f6:89:83:80:
57:19:64:a1:ff:2d:d4:f6:cc:12:4f:50:e2:80:01:
92:40:cb:f3:4b:82:80:5f:33:b5:a1:ec:cf:15:69:
b9:52:fa:1e:0c:9c:47:92:86:77:72:36:8a:27:4c:
67:8b:dd:38:c0:fa:b6:21:e0:66:b6:98:d3:0a:27:
4b:50:a9:8f:0e:9b:83:4f:89:c9:65:04:32:b7:cb:
22:eb:d9:d7:78:ae:8c:07:f8:a7:03:5b:b0:db:40:
d0:f2:29:ff:de:dc:7d:6d:95:c2:02:66:1d:76:88:
ac:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6E:BA:43:33:2F:C5:40:91:6E:9B:EA:00:A1:A0:0A:BF:4A:C5:43
X509v3 Authority Key Identifier:
keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/31A7C2F6BE0911EF968E820FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:93e0:5::/48
Signature Algorithm: sha256WithRSAEncryption
78:85:f4:3e:04:9b:3e:b9:15:ca:c1:28:7b:ab:6a:10:3d:74:
84:30:14:4c:bf:43:ce:2a:70:59:b6:8c:11:2a:94:95:a2:bb:
40:26:43:49:fe:dd:f9:d5:36:27:ab:dd:14:71:de:cc:85:f8:
3d:de:49:75:19:3f:c1:f4:52:98:82:49:98:0d:24:82:e7:1f:
6c:17:d1:04:22:0c:86:39:67:08:da:cf:cd:41:80:6d:42:2f:
d6:f2:22:45:93:92:45:f1:6c:f9:1a:28:07:40:05:37:16:6a:
f7:f7:1f:ef:cb:9f:fc:46:34:79:01:c8:62:9c:3a:37:dd:af:
c5:69:b9:82:38:71:28:67:c4:33:ef:cf:eb:1e:c9:96:0d:e5:
4d:8f:04:b8:7b:c4:41:53:dd:43:4b:c0:a2:4e:73:2a:a4:58:
b1:f4:2c:7a:60:1a:59:10:ca:9e:51:dd:f1:80:9d:bc:70:b5:
78:55:28:44:40:e1:78:6d:51:46:e1:66:90:6a:a1:35:3c:92:
82:b6:9e:4c:a6:c7:e7:49:ab:d5:30:be:f5:73:31:d1:97:4e:
e4:d9:84:da:48:c7:50:ab:c6:f0:37:20:91:53:37:7d:74:ed:
3e:20:96:7b:c5:b2:26:15:b1:b3:87:78:0e:87:26:40:6f:3f:
e5:f9:3a:3c
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNBQjMxMTAvBgNVBAUTKEU0QTk0Q0ZBOEQyRjlGNUIzOUVGNDYzNTA1OTFDRTMx
MkU1MTRGQjMwHhcNMjQxMjE5MTMwMDE3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzY0MThlMS0xZmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxX02Y4WeE8aELHCe3zZOTmCKyqp4+Gg9EynlGx4hrmfUaYsY8ITfj7iZI2Jx
jc17FLyGphrKDZ2BX1XjYQ5JrZj/FQnPuxA/GBtr4xQO4nOK8si83BDuT6J4zDNt
1eZqVwokvJ+mxFuydi7mgWjyt1H0JPavk0bJW/ZAEC3pngaE8F+0pHO6uD3Qh4Q+
GLNOsfaJg4BXGWSh/y3U9swST1DigAGSQMvzS4KAXzO1oezPFWm5UvoeDJxHkoZ3
cjaKJ0xni904wPq2IeBmtpjTCidLUKmPDpuDT4nJZQQyt8si69nXeK6MB/inA1uw
20DQ8in/3tx9bZXCAmYddoisOQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEluukMz
L8VAkW6b6gChoAq/SsVDMB8GA1UdIwQYMBaAFOSpTPqNL59bOe9GNQWRzjEuUU+z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0FCMy8wNUVEOTRDRTE5
NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4xczU3MFkxQlpIT01TNVJU
N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVLbE0tbzB2bjFzNTcwWTFCWkhPTVM1UlQ3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTNBQjMvMDVFRDk0Q0UxOTRDMTFFREFEMzhGMjJCQzRGOUFFMDIvMzFBN0MyRjZC
RTA5MTFFRjk2OEU4MjBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAkAZPgAAUwDQYJKoZIhvcNAQELBQADggEBAHiF9D4Emz65
FcrBKHurahA9dIQwFEy/Q84qcFm2jBEqlJWiu0AmQ0n+3fnVNier3RRx3syF+D3e
SXUZP8H0UpiCSZgNJILnH2wX0QQiDIY5Zwjaz81BgG1CL9byIkWTkkXxbPkaKAdA
BTcWavf3H+/Ln/xGNHkByGKcOjfdr8VpuYI4cShnxDPvz+seyZYN5U2PBLh7xEFT
3UNLwKJOcyqkWLH0LHpgGlkQyp5R3fGAnbxwtXhVKERA4XhtUUbhZpBqoTU8koK2
nkymx+dJq9UwvvVzMdGXTuTZhNpIx1CrxvA3IJFTN3107T4glnvFsiYVsbOHeA6H
JkBvP+X5Ojw=
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:16 2025 by rpki-client