Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/9A5A8BB2E48411EE8337E287C4F9AE02.roa
File: 9A5A8BB2E48411EE8337E287C4F9AE02.roa (raw, json)
Hash identifier: S1k28LQuRXF6OLy/Shkx1L1wW1AmEj4RU9TKQao0Kfo=
Subject key identifier: 39:FB:3E:4D:B4:65:A3:A9:8F:5C:4A:9F:D4:1F:FE:35:B9:17:ED:2F
Certificate issuer: /CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3
Certificate serial: 01FC
Authority key identifier: 86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/9A5A8BB2E48411EE8337E287C4F9AE02.roa
Signing time: Sun 17 Mar 2024 17:34:28 +0000
ROA not before: Sun 17 Mar 2024 17:34:28 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 132335
IP address blocks: 2404:f980:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 03 Apr 2024 05:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3
Validity
Not Before: Mar 17 17:34:28 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65f729a3-6165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:26:62:c9:b4:b4:d0:ac:6f:99:d3:f0:1d:
64:f7:53:2a:b1:2e:f3:5d:85:f1:0e:3f:fc:d6:d4:
c3:b8:12:5a:6e:c2:4d:cc:c7:a0:f9:a4:7e:8d:e4:
22:7e:26:86:cc:67:23:5a:a9:ec:0b:8c:aa:c8:fa:
ad:2a:07:a1:ca:c0:cc:86:e8:b0:e2:6a:cc:da:cb:
00:32:a2:fe:4a:48:ce:e5:42:cf:e3:9b:49:05:f5:
8e:af:5b:9f:88:12:cc:ee:ab:d4:73:66:f0:a4:12:
ac:6c:2c:ab:cd:80:4e:d0:8b:f1:b2:9e:88:c4:90:
83:0c:c5:ec:be:90:75:f9:94:ba:f3:02:1d:19:a7:
98:cf:ed:b5:f5:ee:22:86:84:b0:bf:3c:05:bb:60:
7e:54:15:78:89:66:51:a3:24:32:1f:cf:8a:6f:93:
74:0d:16:bd:a2:7f:42:92:65:d2:59:78:8b:9d:61:
32:80:8b:3f:28:2f:8f:30:c9:93:aa:19:4c:d7:f8:
01:28:3c:fd:5a:20:ee:1d:04:49:18:6f:a5:60:0a:
8a:94:e2:f7:6c:68:48:a1:29:7f:16:1c:68:54:b1:
e4:0d:88:85:cc:12:cb:3e:70:56:6b:74:58:31:6a:
05:56:d7:76:0c:3a:60:d9:42:ea:54:4a:e6:be:fd:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FB:3E:4D:B4:65:A3:A9:8F:5C:4A:9F:D4:1F:FE:35:B9:17:ED:2F
X509v3 Authority Key Identifier:
keyid:86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/9A5A8BB2E48411EE8337E287C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:f980:5::/48
Signature Algorithm: sha256WithRSAEncryption
51:2c:53:60:92:ee:98:ba:7a:07:ea:22:cf:df:44:df:29:82:
3f:69:37:c9:1e:da:ad:4a:e8:4c:9e:73:64:3d:ad:c2:f1:2c:
31:01:ca:e1:0e:78:b8:83:23:3d:cf:61:39:ac:df:ce:9f:8b:
dd:f8:bb:f4:ed:90:4a:8c:93:2e:41:dd:5d:84:ae:04:fe:99:
06:e3:58:c0:e0:91:89:a0:98:9c:b1:19:c0:22:e6:2f:71:46:
ad:84:93:58:8f:51:94:cd:fe:a0:26:c9:48:79:34:61:32:b5:
a5:af:42:f6:7c:30:8a:6c:9b:a4:8c:d5:9a:6f:40:bf:f4:fa:
3d:ca:22:5d:4d:b5:35:95:11:b3:0d:f9:76:b4:3c:de:60:25:
80:80:d3:c8:8c:bd:74:4b:1d:d4:6f:81:68:3f:a9:e3:ce:87:
53:38:3e:67:e1:75:7e:29:a5:95:3b:dd:8f:42:df:0c:db:57:
73:c6:4e:86:eb:6b:ec:3c:da:7b:4a:0a:8e:a0:b0:c1:1d:d8:
1e:20:c5:60:4d:ca:63:3c:c8:89:9a:cb:9b:47:7e:1e:42:35:
fc:75:12:6f:9c:46:4b:8e:be:b0:a0:c2:e2:3a:0a:f1:77:41:
a5:08:89:57:1e:1e:15:58:a6:2c:56:25:2e:28:44:5d:32:a4:
5c:54:61:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 06:01:28 2024 by rpki-client on console-fra.rpki-client.org