Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/6A89AD5C373B11EDA1E9B881C4F9AE02.roa
File: 6A89AD5C373B11EDA1E9B881C4F9AE02.roa (raw, json)
Hash identifier: E0L4jSJEenpaci9K5L5Z4wwYMXqxhtH8fvT/bxmhl40=
Subject key identifier: 9E:87:14:A2:D8:35:AE:C2:CF:E7:83:E8:8F:F2:54:60:53:C9:C3:39
Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74
Certificate serial: 05E4
Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/6A89AD5C373B11EDA1E9B881C4F9AE02.roa
Signing time: Sun 18 Sep 2022 10:19:45 +0000
ROA not before: Sun 18 Sep 2022 10:19:45 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 21859
IP address blocks: 144.48.4.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1508 (0x5e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74
Validity
Not Before: Sep 18 10:19:45 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6326f0c1-8ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a7:e8:15:e2:f0:d1:e6:21:88:9f:bf:a7:13:
c7:5f:49:50:ba:fb:f9:d2:bf:1b:01:a1:a0:e0:9e:
f0:46:ad:10:ad:aa:57:ba:94:a0:95:f7:b4:51:50:
5b:12:ef:de:57:14:94:5f:c9:10:a9:a8:d9:dd:a9:
fd:0b:19:7c:e0:82:90:2a:b0:fd:57:d7:fc:eb:59:
01:eb:ed:9c:c7:c6:a3:e7:8d:7f:0f:5a:e1:aa:33:
6b:d5:44:95:78:a8:5e:5e:ae:cd:5a:ef:2a:33:92:
03:c9:13:f9:ed:2d:10:01:d4:d9:ef:11:51:bc:7e:
e4:74:42:d8:20:9a:24:75:ab:1c:80:76:32:19:fc:
28:87:40:c2:5d:be:0e:e3:bd:60:19:c5:46:fe:fe:
f3:9f:95:ca:ab:79:73:32:35:8f:8a:33:98:c9:13:
58:af:4f:3b:6d:8d:86:57:36:45:0e:42:4f:4a:76:
9d:95:2a:9f:b7:87:ed:63:16:3e:b1:ff:46:d7:b5:
85:b2:b0:c7:da:1d:7f:c7:3a:d1:6d:99:45:ea:90:
3b:9e:43:c3:ec:ed:99:f1:cf:3b:8c:e3:54:56:54:
68:29:09:99:78:35:bd:44:b0:49:f9:eb:55:f3:36:
ff:c9:df:0a:a1:cb:85:16:3b:f4:3e:df:cf:72:88:
03:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:87:14:A2:D8:35:AE:C2:CF:E7:83:E8:8F:F2:54:60:53:C9:C3:39
X509v3 Authority Key Identifier:
keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/6A89AD5C373B11EDA1E9B881C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.48.4.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:8d:ba:cc:df:0e:80:7e:36:a4:b7:9c:ef:29:48:dc:56:99:
92:b1:6a:95:a8:93:cb:f8:71:89:41:71:1c:b8:74:7d:62:17:
fa:95:b8:68:51:8b:e2:dd:4a:2c:07:8d:80:63:75:39:d4:ae:
34:7a:b8:f9:db:2b:e3:0d:a5:a3:56:48:96:06:67:63:5f:f3:
a9:0e:95:de:b8:42:eb:71:ce:95:30:60:5f:7e:73:0b:e9:81:
71:87:dd:8f:f8:a0:39:a2:da:be:21:54:b5:f2:5a:32:af:e0:
52:66:2a:62:cc:6b:3b:30:57:cb:b5:04:82:7b:c0:2e:9d:b2:
4c:59:83:4f:cc:c2:51:3d:eb:6a:b6:1d:c7:cb:7b:29:c4:8a:
0f:b2:af:75:de:8d:5b:64:3a:00:dd:47:41:24:c9:23:9a:ac:
dd:98:2c:ac:b4:b0:8d:8a:75:6a:f9:41:ca:00:3f:03:39:85:
a9:10:5c:6d:fd:9d:24:ca:9e:4f:5d:dc:9d:57:eb:5d:bc:f4:
e5:3d:1e:dc:c9:ea:ec:44:b1:0e:41:9b:04:26:ea:07:39:09:
bd:0f:23:e8:5c:86:fc:8a:27:4b:85:f9:fb:fa:22:f0:4d:df:
87:29:2a:b9:2b:76:09:aa:81:96:27:4b:76:e6:af:99:fa:ad:
2b:6d:18:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-fra.rpki-client.org