Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4C6ED63A905311EF8CC0F14BC4F9AE02.roa
File: 4C6ED63A905311EF8CC0F14BC4F9AE02.roa (raw, json)
Hash identifier: LBzVZfeUgC7stK59nm3clf0NRBEaK/GkyVhP3Wy8s3o=
Subject key identifier: 13:33:90:96:A8:67:72:6B:DA:C1:EA:20:79:7C:C1:7F:26:95:4E:E1
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4786
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4C6ED63A905311EF8CC0F14BC4F9AE02.roa
Signing time: Tue 22 Oct 2024 08:54:51 +0000
ROA not before: Tue 22 Oct 2024 08:54:51 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 153011
IP address blocks: 2001:df4:6840::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 16 Nov 2024 14:12:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18310 (0x4786)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 22 08:54:51 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6717685b-2d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fa:7d:6e:82:a9:49:63:e8:bb:1b:3f:69:75:
5b:48:f3:37:c6:0b:45:ce:86:0c:d1:62:88:2b:d6:
4a:6a:c8:f9:12:7d:76:26:d1:6e:c4:b8:db:d4:6e:
4e:f1:83:e2:65:b2:4e:c3:f9:bf:02:27:e9:fc:72:
d5:3b:df:95:24:bd:94:a4:78:2a:88:d3:75:b2:0c:
f6:48:f9:bb:ff:ef:9d:c8:d2:4d:d7:08:57:c9:4f:
ee:b8:a8:91:ae:28:ae:ad:83:6b:08:86:38:38:fd:
42:4f:ed:61:30:c7:a1:a5:24:84:65:03:06:19:e8:
ca:de:a1:8f:93:72:85:42:df:4f:67:d0:e9:74:13:
65:34:c8:8c:e4:fe:0d:1d:1d:dd:e7:3f:8f:ce:dd:
05:93:1c:6f:2f:07:9f:3a:84:d1:b5:be:b9:00:ed:
8d:fc:73:54:c2:fb:73:cf:47:55:2b:b9:65:8c:31:
18:ed:9b:98:f3:90:96:a6:55:a2:d3:94:2c:2c:51:
a2:cc:9c:9e:93:66:82:0e:2e:04:9a:9a:6e:6b:6c:
a6:6b:7a:b2:51:cb:b8:05:fb:16:3b:3d:01:f1:d3:
ba:57:20:72:15:0b:c2:9f:04:a4:27:7c:1c:26:c8:
0b:68:fc:bb:90:35:d4:53:1e:ac:88:d4:e1:fd:ac:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:33:90:96:A8:67:72:6B:DA:C1:EA:20:79:7C:C1:7F:26:95:4E:E1
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4C6ED63A905311EF8CC0F14BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:6840::/48
Signature Algorithm: sha256WithRSAEncryption
17:4c:df:49:81:d9:c6:5d:12:09:a9:16:00:cc:2d:16:19:33:
7d:4f:a3:89:ee:36:73:08:33:da:a2:f6:86:5c:7b:a6:a4:d2:
8f:b8:cd:77:34:f1:32:a9:c5:0f:d0:fe:d5:65:ef:29:1c:40:
cc:22:98:75:6b:58:77:65:65:57:32:a7:4d:47:48:6e:e5:23:
ec:5a:ef:8e:8d:d3:83:5f:a2:bf:89:85:06:86:6e:9d:2a:49:
04:8e:78:a5:0a:c7:8e:8f:6f:9f:94:16:f1:65:67:03:eb:e1:
f9:8d:d7:02:a9:a5:5f:0e:11:f0:e9:c0:5c:a7:8b:79:1a:d7:
bb:c7:51:28:c6:15:58:31:93:1f:59:6c:47:c4:d4:58:27:08:
72:45:ff:5f:74:0f:b2:fb:b7:92:b9:69:9c:42:a3:3d:b7:4f:
fc:94:16:d3:b4:c8:75:51:7f:8f:fc:18:4a:19:f2:4d:a2:3e:
d7:b1:30:c8:2a:d1:42:f4:e6:cc:32:bf:b9:41:39:b5:27:c5:
cb:fe:38:27:b9:07:6d:12:a4:75:a2:28:78:89:e3:8e:49:14:
31:78:e0:c3:d4:4d:36:50:bf:e7:b6:ca:48:9a:59:96:99:b3:
6b:d4:62:31:d4:6c:8e:dd:3c:3b:28:7f:3d:55:ce:1c:00:43:
63:e9:ff:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 15:49:13 2024 by rpki-client on console-fra.rpki-client.org