Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/59FB966AD4F311EEA698EC5AC4F9AE02.roa
File: 59FB966AD4F311EEA698EC5AC4F9AE02.roa (raw, json)
Hash identifier: dCc/Q/OJbYASqNJg7522foCc+ORvfwMsI8b/Tokcsz4=
Subject key identifier: 85:C9:F0:EC:19:B7:C4:DB:D1:1D:A4:04:6B:8E:BC:4D:45:21:10:57
Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial: 0249
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/59FB966AD4F311EEA698EC5AC4F9AE02.roa
Signing time: Mon 26 Feb 2024 22:06:55 +0000
ROA not before: Mon 26 Feb 2024 22:06:55 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 8987
IP address blocks: 2407:30c0:112::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 Feb 2024 23:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 585 (0x249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Validity
Not Before: Feb 26 22:06:55 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65dd0b7e-bfc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:e8:ea:51:29:61:f0:dc:05:8d:52:34:b0:
55:f8:12:d7:0c:de:a9:aa:05:84:e0:f8:03:fd:5a:
98:85:8e:15:e7:fe:e4:98:8d:b7:6a:22:09:a7:88:
c5:7d:00:04:53:5a:3a:d4:98:96:17:f6:8b:e6:b5:
4e:b6:fe:a9:bf:f7:9f:d5:69:bc:2b:33:f1:62:76:
a3:a6:26:97:a4:f9:45:2a:14:87:ba:39:63:e3:4e:
60:81:33:36:6b:bd:61:bc:2c:58:2c:a7:e8:33:44:
0d:36:c4:d1:33:2b:ce:91:4c:4b:87:8d:34:17:bb:
8f:be:26:a8:00:4d:be:df:41:14:80:f5:96:74:46:
11:58:f5:c2:46:b0:e1:c3:ff:5b:e2:2d:62:03:07:
c2:8b:95:45:24:ad:5e:84:47:d7:fb:92:43:a5:a5:
b1:75:57:d2:2a:43:e0:e7:79:98:18:84:f3:60:17:
eb:c6:8e:1d:f4:5f:bc:8b:9f:10:cb:87:3d:81:42:
bb:9e:ea:8f:e8:ce:85:bc:61:95:3b:87:58:21:f9:
f3:87:44:5b:9d:1c:3b:23:17:0b:42:5d:63:85:7a:
73:75:ba:52:0d:67:21:8c:81:8a:de:fa:21:50:7a:
78:4a:47:af:e2:0a:c5:60:74:c8:ca:81:c7:7f:db:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C9:F0:EC:19:B7:C4:DB:D1:1D:A4:04:6B:8E:BC:4D:45:21:10:57
X509v3 Authority Key Identifier:
keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/59FB966AD4F311EEA698EC5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:30c0:112::/48
Signature Algorithm: sha256WithRSAEncryption
cf:35:e1:64:ef:fd:fc:cb:83:54:ae:ea:a5:13:8f:2e:27:38:
e8:cd:b9:23:c2:26:45:d3:86:41:b9:c0:73:34:d7:fc:9b:43:
87:d4:52:e1:cc:a4:d7:a2:8d:3d:e9:eb:6f:8e:f5:92:b9:27:
80:ae:84:13:b2:02:e7:04:a5:d0:6c:2a:25:22:ff:59:95:c9:
2e:7f:1b:07:b5:2d:08:ac:9d:f4:c8:ba:ec:3a:d7:bd:72:eb:
d9:e3:f7:28:bc:2a:01:30:b1:cf:15:b1:a6:75:eb:73:81:5a:
79:c0:6a:a1:b7:f6:b1:47:ec:ca:3d:58:ae:af:38:39:66:bf:
36:09:c1:cc:d9:29:30:a3:88:7e:79:d1:f5:f8:f4:68:20:09:
91:1e:5e:1d:b3:41:2d:fd:af:55:6d:9e:af:fc:27:f8:8d:a5:
ae:12:08:5a:f3:1e:41:49:50:72:33:6d:13:23:b0:8b:54:d3:
ff:d8:e1:2d:de:24:94:21:af:bc:32:12:f8:1a:dd:58:0f:7f:
30:74:81:db:58:b2:30:f3:5a:08:4d:c7:17:ec:77:56:6c:3b:
58:3c:87:f4:b8:88:3f:40:84:c0:db:6a:a2:ff:4a:a8:7b:28:
d3:22:fa:fa:80:c9:42:31:41:79:e6:23:2a:f9:11:76:6e:84:
86:9f:ad:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 02:18:31 2024 by rpki-client on console-ams.rpki-client.org