Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8ECCD63C912811EFB9F98C7FC4F9AE02.roa
File: 8ECCD63C912811EFB9F98C7FC4F9AE02.roa (raw, json)
Hash identifier: xoVJLVdt3MW6RJjehdzbzvSSn4RNvGtlZ8pkxj8fego=
Subject key identifier: 90:E9:BE:19:DD:BF:98:C0:0B:CA:59:53:CB:85:EA:D1:F3:76:AA:00
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 47A6
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8ECCD63C912811EFB9F98C7FC4F9AE02.roa
Signing time: Wed 23 Oct 2024 10:21:25 +0000
ROA not before: Wed 23 Oct 2024 10:21:25 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 153021
IP address blocks: 2001:df4:73c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 26 Oct 2024 06:24:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18342 (0x47a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 23 10:21:25 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6718ce25-5b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:15:a3:df:fe:62:23:06:9e:56:48:51:9a:
cc:9d:af:00:8a:4b:b4:0e:a2:38:11:76:27:77:7c:
1c:e9:e1:ca:a1:90:2d:8c:51:8c:67:0e:81:7b:7c:
13:f3:a7:9f:9a:4a:10:06:bd:eb:35:91:66:2e:06:
41:87:f2:f2:4b:f5:26:81:0c:ec:54:2a:24:40:88:
17:61:9d:2a:d2:a6:8e:9c:c6:3b:16:ef:db:8b:eb:
7f:2f:f2:cc:0e:99:df:ef:76:af:fc:03:4f:26:4c:
8d:06:c7:ae:e9:80:63:d1:03:f1:bf:82:49:5c:1b:
36:35:d7:12:2a:6f:2e:f1:98:63:14:24:8d:5d:4d:
c4:f3:6d:0d:10:19:66:c7:ce:2e:0e:39:fc:05:55:
20:f4:4c:80:e9:2f:b9:97:a6:84:7c:50:e7:d4:e8:
b9:bd:c5:2f:b3:c2:05:cc:2e:01:ee:a9:a5:58:f5:
0a:1a:c9:ae:6a:aa:53:f7:9b:a0:62:0a:db:25:c1:
70:70:ea:92:c7:dc:e0:c4:e0:1e:a7:bd:e2:ac:4a:
03:a8:5a:55:aa:68:fb:23:45:88:61:5b:10:66:ff:
5e:2a:86:23:86:2d:7b:a8:a0:cf:a6:5a:00:5a:37:
a4:a6:e8:a9:f6:db:09:df:fb:a7:62:1a:db:c8:c2:
7b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E9:BE:19:DD:BF:98:C0:0B:CA:59:53:CB:85:EA:D1:F3:76:AA:00
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8ECCD63C912811EFB9F98C7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:73c0::/48
Signature Algorithm: sha256WithRSAEncryption
6e:45:8f:43:2a:9c:4c:55:50:83:62:23:91:05:46:d7:99:c6:
c8:c2:a6:bf:eb:b1:ce:98:d7:57:f5:ae:38:e7:47:8b:f5:ae:
f3:23:4e:a3:0b:52:48:31:3c:78:55:31:44:b8:ae:db:d8:68:
60:aa:10:5f:60:f6:85:8c:fb:a9:28:27:b0:b8:2c:68:82:b1:
90:5b:a7:6b:47:5f:60:d6:eb:be:56:c3:02:48:6b:64:ae:ff:
a4:be:10:a4:94:6b:17:eb:63:c7:23:2a:3a:81:6c:08:2f:e6:
b6:16:2e:db:f2:68:5b:dd:7a:bb:70:1f:05:53:67:57:3e:b6:
83:79:89:e5:58:fe:f0:d7:3e:fc:18:6f:55:7c:fb:a8:1b:e9:
27:4e:06:42:b2:e6:54:65:00:ef:af:8c:63:37:21:b6:4c:02:
58:af:fc:50:31:09:72:98:3c:e4:73:65:6c:b9:61:5e:16:9b:
8b:70:e3:16:d7:0f:0c:72:3c:22:dc:6e:d8:a5:ab:06:e0:5a:
ac:15:6d:ea:7b:86:ae:1b:f1:ab:a6:ed:90:cb:83:78:b9:1f:
57:b0:f9:be:af:40:1c:fa:a0:a5:dc:30:f1:68:87:05:cf:ef:
65:f8:0c:a6:c1:87:e7:3e:2d:38:38:c4:5e:68:a0:69:d8:94:
26:ff:5f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 08:00:34 2024 by rpki-client on console-fra.rpki-client.org