Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/F9C14948967311EDB9F09712C4F9AE02.roa
File: F9C14948967311EDB9F09712C4F9AE02.roa (raw, json)
Hash identifier: KuY/s8up7W9TreQ+PfNyff8bILMw3VUcymjb9NyVZlU=
Subject key identifier: 72:C2:3D:89:31:24:8A:48:0C:22:55:A4:20:1A:E0:DF:BC:D0:77:75
Certificate issuer: /CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3
Certificate serial: 0152
Authority key identifier: 86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/F9C14948967311EDB9F09712C4F9AE02.roa
Signing time: Wed 03 May 2023 06:26:46 +0000
ROA not before: Wed 03 May 2023 06:26:46 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 2404:f980:8::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Apr 2024 22:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3
Validity
Not Before: May 3 06:26:46 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6451fea6-ce42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:74:6c:1c:23:f3:c7:fe:a5:7b:b1:69:21:
b0:22:7f:4a:44:01:da:2f:14:de:97:7e:45:63:1d:
29:64:05:67:13:bd:ee:e6:01:07:b0:dc:17:8b:5f:
16:d5:04:5a:ca:4c:6f:12:ee:f0:4d:ad:6c:aa:2a:
61:c9:2f:4a:13:2d:48:69:ea:02:58:91:0c:11:d9:
9f:d3:97:a4:2d:db:24:38:14:41:3d:af:6e:46:03:
b3:2a:02:3a:80:7d:e0:a9:be:c4:f9:75:1a:57:ae:
ff:d0:5c:58:f7:22:86:57:28:10:53:c9:3c:38:62:
0a:f9:11:48:5e:ba:87:9e:b9:b1:5d:52:96:c8:b8:
f4:4f:01:34:c0:72:2e:ca:95:c3:b3:86:50:1b:1b:
b0:df:44:9b:60:85:c7:cc:ad:d5:a8:06:35:86:3d:
04:d1:3f:06:eb:e6:55:ed:50:8c:3f:eb:8f:fb:e5:
a8:3f:bc:71:3c:f0:43:16:0d:9d:6d:e9:40:df:8c:
d3:17:1a:53:57:6e:c9:e1:82:82:b5:8e:89:a4:81:
34:58:23:55:e0:ba:d5:88:6d:1f:c0:58:29:7e:f4:
1a:85:72:32:26:31:0d:c8:5d:41:b6:38:82:52:b9:
08:18:fb:48:29:cd:91:ca:58:fa:85:c7:61:54:16:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C2:3D:89:31:24:8A:48:0C:22:55:A4:20:1A:E0:DF:BC:D0:77:75
X509v3 Authority Key Identifier:
keyid:86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/F9C14948967311EDB9F09712C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:f980:8::/48
Signature Algorithm: sha256WithRSAEncryption
ac:09:14:de:b8:c8:d6:ee:cd:86:69:a1:c9:61:94:54:c4:45:
1c:1c:bd:89:ce:ec:10:89:0c:08:45:19:08:fa:b2:dc:4e:67:
bc:7e:a3:66:ea:36:19:c6:7a:36:4c:f0:18:08:8b:2d:80:9c:
ca:f6:44:0b:66:fe:cb:cc:e6:30:f9:01:8f:7f:41:97:a4:56:
6e:97:33:bc:60:db:53:30:34:16:e0:ae:bd:f0:82:58:80:77:
28:51:6c:1d:6b:ca:a5:5e:cd:6d:06:2e:9e:26:69:6a:77:26:
31:80:7e:52:02:eb:cb:ac:db:54:65:7e:d4:81:58:4e:09:6a:
c8:30:e2:cc:a2:56:7a:06:4d:8f:68:dc:c5:5b:2f:20:db:57:
a0:04:28:73:a9:b6:5e:85:1b:68:74:9f:1d:7f:d1:5e:75:3e:
4a:c0:fd:2c:75:7c:b3:27:7e:33:9f:12:30:79:90:79:96:f4:
f1:b3:03:b3:17:36:aa:73:a8:28:b2:d3:d9:19:9f:2e:aa:6c:
cb:d1:f5:28:47:1e:13:fc:9f:48:6e:f8:35:ac:1d:2a:d5:e8:
26:f0:67:13:9b:06:bf:4a:e9:29:db:d9:98:ae:e5:71:ce:5c:
3a:dd:d2:9c:75:6d:fb:c0:06:34:be:06:86:8c:81:02:25:26:
8d:61:ca:24
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk5NDUxMTAvBgNVBAUTKDg2OEVDQjY0MjVEQTgzMzI4ODkyRTU3QkIwREY2NDRF
MUFFQjczQjMwHhcNMjMwNTAzMDYyNjQ2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDUxZmVhNi1jZTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqX50bBwj88f+pXuxaSGwIn9KRAHaLxTel35FYx0pZAVnE73u5gEHsNwXi18W
1QRaykxvEu7wTa1sqiphyS9KEy1IaeoCWJEMEdmf05ekLdskOBRBPa9uRgOzKgI6
gH3gqb7E+XUaV67/0FxY9yKGVygQU8k8OGIK+RFIXrqHnrmxXVKWyLj0TwE0wHIu
ypXDs4ZQGxuw30SbYIXHzK3VqAY1hj0E0T8G6+ZV7VCMP+uP++WoP7xxPPBDFg2d
belA34zTFxpTV27J4YKCtY6JpIE0WCNV4LrViG0fwFgpfvQahXIyJjENyF1BtjiC
UrkIGPtIKc2Rylj6hcdhVBYWNQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFHLCPYkx
JIpIDCJVpCAa4N+80Hd1MB8GA1UdIwQYMBaAFIaOy2Ql2oMyiJLle7DfZE4a63Oz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTk0NS9CQzAwQzhGMkYw
OUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6S0lrdVY3c045a1RocnJj
N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hvN0xaQ1hhZ3pLSWt1VjdzTjlrVGhycmM3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qzk5NDUvQkMwMEM4RjJGMDlFMTFFQ0FFRTczRTE5QzRGOUFFMDIvRjlDMTQ5NDg5
NjczMTFFREI5RjA5NzEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAkBPmAAAgwDQYJKoZIhvcNAQELBQADggEBAKwJFN64yNbu
zYZpoclhlFTERRwcvYnO7BCJDAhFGQj6stxOZ7x+o2bqNhnGejZM8BgIiy2AnMr2
RAtm/svM5jD5AY9/QZekVm6XM7xg21MwNBbgrr3wgliAdyhRbB1ryqVezW0GLp4m
aWp3JjGAflIC68us21RlftSBWE4Jasgw4syiVnoGTY9o3MVbLyDbV6AEKHOptl6F
G2h0nx1/0V51PkrA/Sx1fLMnfjOfEjB5kHmW9PGzA7MXNqpzqCiy09kZny6qbMvR
9ShHHhP8n0hu+DWsHSrV6CbwZxObBr9K6Snb2Ziu5XHOXDrd0px1bfvABjS+BoaM
gQIlJo1hyiQ=
-----END CERTIFICATE-----
Generated at Wed Apr 10 01:20:27 2024 by rpki-client on console-fra.rpki-client.org