Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91857810000/0/323430353a393234303a3a2f33322d3332203d3e203631333137.roa
File: 323430353a393234303a3a2f33322d3332203d3e203631333137.roa (raw, json)
Hash identifier: T3lI5I0ibMwot2kfzDeDXjdHqZ3J+lsRr0fSaqNQxq8=
Subject key identifier: 5F:DC:B2:F5:45:F5:8B:B7:6D:60:5C:D7:76:12:F6:DC:73:80:2B:29
Certificate issuer: /CN=A91857810000/serialNumber=BECEB6F76A19B81208F3D3402617F51AE69E8C24
Certificate serial: 1713DAB5C7B0AB7A13173474E0A3EED62AB30C4D
Authority key identifier: BE:CE:B6:F7:6A:19:B8:12:08:F3:D3:40:26:17:F5:1A:E6:9E:8C:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vs6292oZuBII89NAJhf1GuaejCQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91857810000/0/323430353a393234303a3a2f33322d3332203d3e203631333137.roa
Signing time: Tue 27 Feb 2024 10:58:54 +0000
ROA not before: Tue 27 Feb 2024 10:53:54 +0000
ROA not after: Tue 25 Feb 2025 10:58:54 +0000
asID: 61317
IP address blocks: 2405:9240::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 24 Jul 2024 11:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:13:da:b5:c7:b0:ab:7a:13:17:34:74:e0:a3:ee:d6:2a:b3:0c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91857810000/serialNumber=BECEB6F76A19B81208F3D3402617F51AE69E8C24
Validity
Not Before: Feb 27 10:53:54 2024 GMT
Not After : Feb 25 10:58:54 2025 GMT
Subject: CN=5FDCB2F545F58BB76D605CD77612F6DC73802B29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:af:00:f6:36:4f:7d:10:19:27:c6:c6:ac:
4e:1f:a7:12:17:62:a9:f0:c1:e6:fc:54:13:92:b9:
24:ca:5b:a5:ce:1c:88:38:80:0d:9e:40:23:99:21:
09:64:49:dd:d3:c6:e8:1d:69:73:29:09:5b:03:69:
50:e4:ea:50:46:2e:97:64:ee:6e:b3:57:41:24:66:
a4:73:88:e9:5e:46:0b:28:2c:81:5a:41:7d:55:b7:
cf:05:75:9f:78:e6:be:2a:cc:ca:88:67:c3:66:be:
cf:ae:82:b4:1b:ee:b8:45:7a:05:e3:37:71:2e:ac:
7f:59:d7:1b:e3:a5:7f:27:8e:2d:6e:49:b3:2d:59:
09:01:57:77:7d:50:cb:4b:f0:31:bb:97:e4:03:b9:
54:9e:fa:ac:3d:72:c3:03:8f:93:88:57:36:fe:d5:
6e:a4:c0:88:b5:ed:4c:da:d8:87:18:cf:fd:cc:cd:
7d:fc:99:8f:69:f0:af:83:2f:89:58:44:d4:a0:c7:
a0:b6:23:9e:11:bd:12:cd:43:5e:65:0c:e3:4a:eb:
5e:4b:d5:64:06:16:d6:d9:5c:58:d8:0c:51:72:e5:
8d:71:f5:8d:97:75:65:62:53:12:09:4f:c1:d3:5e:
07:ba:f5:79:cd:1a:30:53:b6:f2:7a:01:ff:a1:ef:
0c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DC:B2:F5:45:F5:8B:B7:6D:60:5C:D7:76:12:F6:DC:73:80:2B:29
X509v3 Authority Key Identifier:
keyid:BE:CE:B6:F7:6A:19:B8:12:08:F3:D3:40:26:17:F5:1A:E6:9E:8C:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vs6292oZuBII89NAJhf1GuaejCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/323430353a393234303a3a2f33322d3332203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:9240::/32
Signature Algorithm: sha256WithRSAEncryption
3b:dc:2a:91:2a:fb:e9:19:a6:c0:99:8f:e0:07:d9:d5:e1:ab:
3b:03:bf:b2:5c:f5:01:9f:de:2a:83:1a:09:00:91:93:d2:6c:
41:d4:3c:71:78:8e:71:74:2e:78:49:39:5d:21:ad:87:84:59:
25:96:5e:be:89:2d:cb:e1:85:2a:d2:ec:65:95:31:c8:fa:51:
77:a5:51:a6:2a:8a:08:0b:4e:10:d5:cb:69:97:71:02:db:3b:
a9:51:31:6c:d6:b7:7f:f1:dd:20:61:5d:76:e8:d0:5d:d3:87:
1e:66:81:74:08:45:c0:bb:cb:e4:8f:ba:1b:79:99:26:45:5a:
18:80:d8:e3:5f:31:b5:65:a8:2f:a8:5d:5d:e8:b7:8d:48:70:
07:89:d2:7e:6c:f9:89:b3:69:33:83:d6:c6:09:a6:96:92:97:
8c:93:d6:7b:24:e3:ba:d7:6c:54:e1:8d:d1:bf:d6:cf:d8:bf:
1c:3c:03:e5:fd:08:93:b3:e0:7f:5e:fc:42:99:94:22:b5:18:
74:f2:c1:8b:31:2b:ec:3a:35:b0:da:60:6f:f9:6b:4c:06:d4:
2a:be:ea:9c:39:95:48:e3:77:36:ea:61:7f:02:4a:4c:4e:01:
e4:1a:62:47:96:84:63:65:fe:98:45:73:82:64:00:b6:bb:af:
45:08:39:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 15:53:33 2024 by rpki-client on console-ams.rpki-client.org