Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2807/5FE7EE54807111EBA65EC281C4F9AE02/A62F3B4C807611EBAF13304EC4F9AE02.roa
File: A62F3B4C807611EBAF13304EC4F9AE02.roa (raw, json)
Hash identifier: K5o8/eOC9y6dFLMKOASzE+TFjV10JXCkX4t5BTyDQaE=
Subject key identifier: E1:38:D9:E4:16:74:3F:39:A0:93:D9:2F:77:73:50:6C:47:CC:31:FF
Certificate issuer: /CN=A91F2807/serialNumber=1EACBD9A121E4DF6523F6D1D22ABD48ADC60F6F5
Certificate serial: 0592
Authority key identifier: 1E:AC:BD:9A:12:1E:4D:F6:52:3F:6D:1D:22:AB:D4:8A:DC:60:F6:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hqy9mhIeTfZSP20dIqvUitxg9vU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2807/5FE7EE54807111EBA65EC281C4F9AE02/A62F3B4C807611EBAF13304EC4F9AE02.roa
Signing time: Wed 03 Apr 2024 00:33:28 +0000
ROA not before: Wed 03 Apr 2024 00:33:28 +0000
ROA not after: Thu 01 Aug 2024 00:00:00 +0000
asID: 140919
IP address blocks: 2001:df4:4080::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 09 May 2024 04:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1426 (0x592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2807/serialNumber=1EACBD9A121E4DF6523F6D1D22ABD48ADC60F6F5
Validity
Not Before: Apr 3 00:33:28 2024 GMT
Not After : Aug 1 00:00:00 2024 GMT
Subject: CN=660ca3d8-7a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:a8:88:46:35:13:a4:11:1a:78:34:00:5b:
e9:6f:d5:a0:7c:9c:8d:9e:f9:98:f8:c9:91:16:a6:
60:bf:c8:3d:fe:4c:70:c2:d7:62:e9:d5:4d:33:a3:
90:aa:9c:5f:f8:93:3d:d5:76:a8:6e:50:8b:da:41:
19:27:ef:9b:6d:32:d9:60:80:75:e1:80:6d:c6:5e:
f5:08:53:cf:bc:69:76:de:b9:35:69:0a:c9:5e:61:
02:1a:51:30:41:64:fb:fd:f0:88:9a:a2:4a:eb:0c:
bd:6c:c8:33:64:93:b2:f8:be:5c:3d:00:c8:fb:b2:
9f:7f:64:6c:4a:34:93:11:1b:17:2b:cd:1d:f6:30:
05:58:af:a9:9c:25:89:c2:66:83:19:7b:b1:ba:51:
04:e0:f0:a7:1d:ae:b9:a9:89:74:2a:95:1a:8a:49:
b3:d2:a2:75:12:0e:30:37:2b:56:b8:a5:30:5f:3e:
91:f4:c4:3b:00:60:c3:8b:7c:9b:88:8b:fc:95:0b:
c2:ae:4c:57:f8:47:89:ae:7e:87:81:3b:1c:fc:55:
92:6e:2a:6e:7b:7f:e5:3d:19:ab:60:7a:c0:19:f2:
3a:c0:f0:0e:fd:36:c8:2c:d2:57:bf:9b:6a:8d:af:
ec:8a:db:0e:75:b0:cd:c6:3d:a3:35:7d:de:90:4f:
e1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:38:D9:E4:16:74:3F:39:A0:93:D9:2F:77:73:50:6C:47:CC:31:FF
X509v3 Authority Key Identifier:
keyid:1E:AC:BD:9A:12:1E:4D:F6:52:3F:6D:1D:22:AB:D4:8A:DC:60:F6:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2807/5FE7EE54807111EBA65EC281C4F9AE02/Hqy9mhIeTfZSP20dIqvUitxg9vU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hqy9mhIeTfZSP20dIqvUitxg9vU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2807/5FE7EE54807111EBA65EC281C4F9AE02/A62F3B4C807611EBAF13304EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:4080::/48
Signature Algorithm: sha256WithRSAEncryption
1a:16:19:f0:4e:41:40:8a:21:e7:fe:40:7d:b8:4d:ae:6a:3c:
a0:3d:62:5e:49:85:7b:2e:e7:71:62:23:28:78:24:35:7d:0b:
77:a7:e8:df:09:ca:69:dc:39:a5:ac:26:8d:b7:af:01:dc:40:
e1:97:99:7d:99:45:a6:41:93:48:29:2e:bf:8a:fa:8d:09:4a:
f1:19:4c:9b:e5:f0:22:aa:78:b2:3f:00:e3:60:ee:59:81:46:
bf:3a:a6:33:d2:7a:b1:29:13:93:49:e5:c6:6d:05:50:0d:82:
ec:17:30:c2:93:e2:14:bd:60:c7:18:00:70:8c:f6:14:9f:57:
5e:6f:f4:e0:18:1d:52:a4:a6:36:d1:44:31:c3:f5:29:4b:2f:
df:65:cc:9e:9e:82:14:77:4f:30:60:6e:e0:be:9a:f1:0b:81:
50:ba:7f:34:4c:c0:37:7c:38:78:11:f9:43:a2:df:fd:25:c4:
32:34:85:1e:b4:da:33:5c:1c:d4:44:e6:ba:a7:70:4f:82:57:
69:aa:10:1a:6e:c9:bf:a9:76:fe:69:2e:60:c0:6d:8d:6e:e4:
37:9c:cf:4d:fd:b9:6c:cf:72:27:f4:a1:78:38:9f:cf:d2:4c:
7a:e6:06:74:2c:88:21:64:20:f6:9d:aa:21:35:75:f2:9d:8d:
ca:b3:3c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:01:15 2024 by rpki-client on console-fra.rpki-client.org