Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/7B31CC3CC44F11EE93428464C4F9AE02.roa
File: 7B31CC3CC44F11EE93428464C4F9AE02.roa (raw, json)
Hash identifier: Rio1K1zQLaOSQBUKCrP9TI3G+eyxfnJFGw3KJC89ToI=
Subject key identifier: 3D:E1:03:F1:88:95:82:17:54:FA:95:C3:58:B3:75:46:B0:C2:EA:EF
Certificate issuer: /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645
Certificate serial: 06C9
Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/7B31CC3CC44F11EE93428464C4F9AE02.roa
Signing time: Mon 05 Feb 2024 17:53:34 +0000
ROA not before: Mon 05 Feb 2024 17:53:34 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 141484
IP address blocks: 2407:f640:600::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 Feb 2024 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1737 (0x6c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645
Validity
Not Before: Feb 5 17:53:34 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65c1209e-b1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a9:be:c1:7e:be:ca:f8:80:26:b5:4f:8d:b9:
90:19:89:29:dc:c9:45:a7:78:4c:a7:ab:77:be:ad:
d7:f3:3d:0f:e4:be:02:82:21:42:a1:c5:27:47:d9:
8f:cb:18:76:ee:e9:e9:18:aa:95:51:76:f9:38:0c:
63:dc:6c:ea:23:28:07:3e:13:37:90:63:f3:fe:5a:
e1:c0:2a:1f:e5:61:ae:ff:27:17:ef:2f:05:20:cc:
bd:9b:76:40:f6:2d:ae:33:31:6f:bc:d4:8d:3e:86:
b3:af:77:cd:db:fc:5f:64:87:85:99:74:22:dd:05:
b8:8f:14:10:40:95:94:8a:10:d8:53:de:40:a6:22:
ec:95:3c:53:5d:65:36:b7:49:40:64:f3:d4:65:d7:
d8:c7:14:c6:ce:e3:e4:f4:0c:34:86:92:72:d1:51:
66:47:6e:46:0c:31:4c:03:1b:d4:46:0a:1d:af:d9:
22:77:75:2b:f9:ec:6a:09:c4:94:75:37:b7:54:3f:
1d:c1:7e:b9:4a:87:50:89:08:b0:12:fe:bd:72:a0:
9e:0d:46:d5:9f:77:a4:6d:f6:3a:8a:22:cc:eb:af:
90:f2:e6:47:dd:14:7f:56:a7:f3:9e:bd:d3:89:79:
65:d6:61:62:f0:01:34:09:c8:4d:76:e3:9d:26:15:
2d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E1:03:F1:88:95:82:17:54:FA:95:C3:58:B3:75:46:B0:C2:EA:EF
X509v3 Authority Key Identifier:
keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/7B31CC3CC44F11EE93428464C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:f640:600::/48
Signature Algorithm: sha256WithRSAEncryption
5d:f7:7c:79:79:7f:25:5f:6e:5f:db:7c:38:3c:93:6d:78:0c:
ac:71:6d:ae:47:2f:8c:0d:c9:a7:4a:3e:b6:4c:4e:33:ee:04:
2b:7d:e8:3b:4b:30:12:10:61:28:3a:f1:57:b3:9d:ee:dd:93:
d1:8e:6d:05:42:01:1f:a8:41:1c:b9:ac:ac:80:67:f1:1b:5f:
fb:7d:0c:a5:72:ea:16:60:95:83:c5:3c:75:8c:56:b6:66:3e:
06:f0:f2:2a:7a:2e:6e:6f:d1:d4:85:85:75:12:64:ea:c1:5b:
54:89:6a:e0:f6:0f:17:ef:ee:01:3f:a1:79:30:a4:5b:89:6c:
fe:44:e4:50:ea:67:16:90:1e:c5:29:1c:ce:c2:52:48:fd:7c:
2d:5d:26:bd:57:be:26:20:5c:08:6e:fe:af:c9:17:c5:a2:c6:
70:dc:54:45:06:6d:ff:b9:65:09:1b:09:85:43:13:bd:26:09:
01:41:48:91:b8:47:4c:f6:1c:e0:e5:a4:09:1f:3f:9f:e2:0c:
41:e4:20:1c:0b:66:8b:fb:88:23:e2:d9:c0:42:3d:30:c4:47:
04:e0:ac:46:05:d6:3c:0f:ae:c3:0b:6c:79:11:18:58:f0:08:
08:58:d9:bb:68:9c:9a:cd:26:5b:b5:be:c6:2b:5b:c5:54:29:
da:c8:80:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 21:17:44 2024 by rpki-client on console-ams.rpki-client.org