Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/44B0DD4AFDE611ED880C3C6AC4F9AE02.roa
File: 44B0DD4AFDE611ED880C3C6AC4F9AE02.roa (raw, json)
Hash identifier: EUrWENHkCtf/6pr7KnyPgjT2NJ7YAUQ15WI2ElDkxGo=
Subject key identifier: FE:E6:07:86:E4:90:BC:C9:E7:C3:0D:23:1B:58:C9:03:C6:B5:7D:C7
Certificate issuer: /CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
Certificate serial: 06A7
Authority key identifier: E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/44B0DD4AFDE611ED880C3C6AC4F9AE02.roa
Signing time: Mon 12 Aug 2024 22:41:32 +0000
ROA not before: Mon 12 Aug 2024 22:41:32 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 141047
IP address blocks: 2001:df1:ffc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 04 Dec 2024 06:11:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1703 (0x6a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187856, serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
Validity
Not Before: Aug 12 22:41:32 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66ba8f9b-0fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f3:8e:09:51:86:90:f8:63:e0:85:59:66:cb:
6c:d6:79:5a:7c:7a:7a:e1:65:55:dc:82:4c:d1:40:
c1:e8:b5:69:be:00:76:a2:8a:97:29:27:fa:77:4f:
21:40:67:f8:08:4a:82:be:a1:17:46:9f:13:eb:8d:
cc:f7:ff:d4:00:49:9b:b8:33:a5:03:f1:65:91:5e:
7a:92:d0:06:21:3f:71:af:46:98:f2:11:d0:b8:9c:
94:d1:a6:5d:2a:7e:72:d7:1c:7d:e8:9a:a0:ad:29:
a2:7f:4c:52:a1:a3:38:40:c3:13:24:91:7b:60:9a:
c3:cf:cf:58:63:20:83:b5:c1:f4:b8:98:a5:55:0a:
e0:95:16:5e:bb:39:4c:9b:86:e6:38:aa:6a:79:f1:
57:5e:7c:cb:d6:1e:36:3a:0b:ab:c4:36:82:f4:49:
6d:e0:04:fc:c8:0a:0d:dd:3f:68:cd:bc:bb:bb:b4:
d8:57:6d:11:40:c0:f6:96:57:b4:48:f6:7c:d2:02:
2d:9f:17:21:1e:8f:b9:39:2f:2a:24:24:39:d4:90:
07:f8:d9:65:11:ea:df:69:8f:60:7a:15:40:8f:ef:
25:08:d0:fb:fc:1c:ba:b2:24:83:2c:ca:f6:de:43:
46:67:81:f5:17:8b:51:ce:78:df:28:43:b2:65:db:
99:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E6:07:86:E4:90:BC:C9:E7:C3:0D:23:1B:58:C9:03:C6:B5:7D:C7
X509v3 Authority Key Identifier:
keyid:E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/44B0DD4AFDE611ED880C3C6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:ffc0::/48
Signature Algorithm: sha256WithRSAEncryption
73:8b:c1:b7:c4:02:15:58:b5:ba:d0:36:83:c0:10:da:db:b5:
0b:95:8e:f9:3e:16:bb:f7:b1:4e:01:64:34:ba:4b:89:3f:b0:
d8:89:66:b8:22:77:a7:a4:d7:b2:20:59:66:a7:01:87:2c:e4:
e3:29:64:3f:7e:14:a8:df:f2:9a:54:f6:66:a2:9d:32:b3:01:
e4:88:38:a4:9f:d0:00:82:03:40:f4:6b:40:15:b5:a8:55:ed:
6f:16:9b:4f:30:dc:71:72:2e:76:de:71:ea:8c:6f:55:f9:dc:
5c:f2:be:fc:33:f7:ac:9d:bf:0b:3f:4a:db:e2:ec:7f:f1:bb:
21:e2:0a:dc:80:3b:ea:46:65:45:4f:bd:9b:f2:b1:6c:46:83:
b6:73:03:3d:b5:f9:73:da:68:c2:a2:58:ed:95:72:c1:ac:14:
9e:46:c1:4d:a9:b0:12:e4:cf:bc:36:78:98:3b:4b:13:46:88:
54:3f:65:da:f2:d5:1d:ba:d1:b1:0e:00:f8:34:7c:76:07:18:
eb:ca:43:ca:8f:69:f1:7e:9e:74:ba:31:04:c0:29:d3:62:48:
ce:0e:a1:8c:39:49:5d:51:d9:59:80:fd:0f:92:89:f7:24:f7:
bf:ac:0c:04:d0:6f:92:58:74:6b:55:fc:86:77:09:e4:34:d3:
39:37:f2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:34:15 2025 by rpki-client