Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/F7BDC1C47C8911EE85524F25C4F9AE02.roa
File: F7BDC1C47C8911EE85524F25C4F9AE02.roa (raw, json)
Hash identifier: YjxCm7gTl+OuiqgZ3ccHSARjywyEePmUCNBpZqaZwVc=
Subject key identifier: 7F:59:A4:9E:23:0A:27:77:4E:FC:07:99:6E:E5:E0:9A:B4:BF:0B:7B
Certificate issuer: /CN=A91EB7B8/serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D
Certificate serial: 01E0
Authority key identifier: D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/F7BDC1C47C8911EE85524F25C4F9AE02.roa
Signing time: Mon 06 Nov 2023 09:50:50 +0000
ROA not before: Mon 06 Nov 2023 09:50:50 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 149883
IP address blocks: 2400:7da0::/36 maxlen: 36
2400:7da0:1000::/36 maxlen: 36
2400:7da0:2000::/36 maxlen: 36
2400:7da0:3000::/36 maxlen: 36
2400:7da0:4000::/36 maxlen: 36
2400:7da0:5000::/36 maxlen: 36
2400:7da0:6000::/36 maxlen: 36
2400:7da0:7000::/36 maxlen: 36
2400:7da0:8000::/36 maxlen: 36
2400:7da0:9000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 29 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480 (0x1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB7B8/serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D
Validity
Not Before: Nov 6 09:50:50 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=6548b6fa-22f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:28:fa:e6:14:05:4c:4d:90:c1:88:af:5c:32:
b7:cd:f2:ef:40:ad:cb:87:a0:99:5b:cd:5f:12:a8:
63:28:c5:b9:6d:0e:f2:8c:68:25:2d:ac:ff:49:81:
a5:c7:3a:5b:50:59:3b:d4:f2:e8:88:9c:b1:55:4a:
9a:7b:d6:db:ed:9e:06:7f:83:a0:9a:7c:68:63:eb:
6d:07:a2:2f:b8:e8:46:d4:fe:da:54:f9:d3:3c:6f:
5e:47:57:15:52:9a:39:ea:f0:02:c8:00:d0:36:42:
29:1c:a2:81:53:99:0f:8a:96:5a:75:7c:1e:91:6e:
40:5d:83:7b:da:30:e9:cc:69:a9:2e:40:8b:68:02:
77:99:2d:bb:a6:ce:83:88:fd:f1:d7:be:8c:9c:ac:
27:75:99:d6:d1:d0:8b:42:9e:4f:d4:d7:c2:a7:7f:
76:3f:47:5f:db:42:25:3f:80:4f:de:09:f1:e7:d2:
fe:31:e7:5b:7d:d4:b8:2c:c8:d5:c3:49:b1:da:4d:
00:41:cc:14:84:e4:6a:dc:f1:b7:bc:20:db:a3:30:
c4:8f:9e:2c:e7:bf:d8:f9:56:45:29:4c:43:ce:d5:
05:54:d1:01:de:67:a4:db:67:07:f8:91:3e:ac:ea:
db:61:31:14:ca:b7:49:6d:d1:32:c8:fe:8c:bd:03:
5d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:59:A4:9E:23:0A:27:77:4E:FC:07:99:6E:E5:E0:9A:B4:BF:0B:7B
X509v3 Authority Key Identifier:
keyid:D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/F7BDC1C47C8911EE85524F25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:7da0::-2400:7da0:9fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
99:0d:ff:03:85:eb:cc:61:87:b7:f8:f9:16:ff:2a:07:e0:01:
88:b8:ce:2c:f9:43:9f:4e:79:86:ea:b8:92:81:24:e5:98:0f:
68:bf:c0:b8:af:8c:37:47:5d:5d:5f:c9:7a:12:c7:48:50:1f:
7a:82:c0:ca:80:83:b3:b2:e8:65:db:11:13:0d:56:55:a7:0f:
eb:d6:03:7d:7f:46:41:ca:ee:6f:8f:66:3f:8c:d0:c7:c3:04:
b7:b8:9e:d9:1f:2e:2c:69:3f:9a:f2:cf:f0:98:a0:b7:bd:b4:
f4:79:3a:b5:5e:e3:89:53:56:2a:ee:22:38:5d:61:93:f3:c4:
dc:ae:71:6d:60:9d:e8:ee:46:bb:3b:03:bc:f7:9e:5f:3a:de:
51:f3:62:13:00:d2:3f:69:e7:92:91:f4:8c:0b:55:a6:3a:af:
d8:36:54:59:7f:c7:bb:9e:bb:b8:52:1a:eb:a0:50:18:4e:c0:
bf:fd:61:3d:93:4e:98:ad:c6:43:23:6d:59:3c:59:30:3e:e0:
83:3f:1a:fb:fb:4c:84:88:46:e2:e7:8e:39:0e:f1:29:7c:5b:
7f:fb:88:19:69:a9:8e:7e:c3:4f:57:f8:60:4b:30:de:c4:e9:
68:c4:1c:7f:ff:84:d1:35:47:6e:e0:8e:d8:52:db:0f:a7:44:
91:73:f2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 09:05:31 2024 by rpki-client on console-ams.rpki-client.org