Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/467B9370E1B311EE9D77BF36C4F9AE02.roa
File: 467B9370E1B311EE9D77BF36C4F9AE02.roa (raw, json)
Hash identifier: QqVMlI0c0eMujNYZA/CTuASVldBwi4qXuRz+B+meHWk=
Subject key identifier: 30:D1:E1:13:C1:48:1D:2E:8C:4D:8F:D1:3B:FB:23:9C:B7:F3:69:93
Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial: 0109
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/467B9370E1B311EE9D77BF36C4F9AE02.roa
Signing time: Mon 17 Mar 2025 08:47:32 +0000
ROA not before: Mon 17 Mar 2025 08:47:32 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 137897
IP address blocks: 2403:27c0:c02::/48 maxlen: 48
2403:27c0:c03::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 24 Apr 2025 14:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Validity
Not Before: Mar 17 08:47:32 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67d7e1a3-8b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:19:f3:b9:97:59:df:90:c8:d8:f7:34:54:09:
b6:f0:56:79:05:29:eb:cc:35:d1:d9:9b:37:0c:ae:
a1:13:a2:ab:80:b9:d4:5d:eb:8e:bb:d6:13:70:41:
49:17:ff:05:3b:57:50:0b:cb:10:2e:04:52:50:19:
df:99:d0:12:2e:32:91:2e:84:1b:d5:f9:b9:76:bd:
e2:b6:c9:60:48:54:4e:65:0d:da:ad:96:af:05:e1:
27:ca:6a:de:55:77:14:ac:4d:85:2b:07:49:0e:c4:
4d:c6:f3:5c:3d:1b:81:94:5d:ad:e4:6d:ba:b2:c3:
de:74:7c:97:0c:25:e3:58:7e:ec:c2:aa:d7:ca:a4:
cc:15:04:7a:7d:f2:b3:af:ab:40:4c:bd:5f:7b:8a:
54:6a:67:63:60:35:62:ec:ee:64:c4:18:1b:01:09:
9e:bd:61:bf:60:1d:b9:4f:7d:16:a5:78:a9:59:82:
8c:c8:ce:6f:ea:a7:5e:01:8a:2a:3e:ba:f0:a8:a2:
55:d4:9c:07:08:a4:1f:6f:43:37:3d:6a:1b:9a:11:
23:1b:bf:ec:55:ea:3d:06:1e:ab:dd:48:ac:99:30:
a2:91:3d:41:01:9a:9c:1b:4b:2f:10:56:be:c4:94:
d5:59:54:14:99:51:a9:c3:77:da:d9:9b:6d:7f:25:
7f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D1:E1:13:C1:48:1D:2E:8C:4D:8F:D1:3B:FB:23:9C:B7:F3:69:93
X509v3 Authority Key Identifier:
keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/467B9370E1B311EE9D77BF36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:27c0:c02::/47
Signature Algorithm: sha256WithRSAEncryption
ac:a9:9a:a4:c0:ec:18:28:10:a2:54:a9:d7:0f:30:d3:72:54:
0a:b0:c7:b6:5f:63:5e:4b:05:a4:c7:12:cb:1a:8c:47:d8:0f:
6e:28:3a:b4:b0:1a:4c:cd:bc:66:5f:dd:3e:e6:2b:cf:07:a2:
e6:df:67:ba:d3:9d:c2:7e:ec:ba:9f:e3:af:bb:88:b0:3d:54:
91:c1:ee:a5:cb:b0:8d:74:62:1a:cd:00:7a:fa:f1:31:eb:22:
f6:3d:5d:a7:30:33:b1:ba:51:88:35:22:c6:5b:98:81:80:ce:
22:31:9f:97:a0:71:64:72:82:2a:51:95:39:62:6e:cc:8b:1e:
12:73:da:8f:51:82:f6:68:28:8e:27:3b:58:27:a7:11:da:c0:
a3:f5:9d:8f:e4:cc:05:97:be:b9:e0:eb:fe:61:ea:4c:e0:83:
ac:a4:09:d7:6c:39:50:3b:87:3f:e8:49:ca:26:5f:95:32:98:
cb:b6:e6:4a:55:97:ac:f8:87:8e:69:10:f1:4b:33:f2:d3:e5:
c1:0a:9a:ff:00:3a:96:e1:c5:c8:11:35:29:70:05:27:5a:43:
52:53:67:80:20:72:00:4f:aa:07:c4:c6:6d:b8:c0:4b:d5:5d:
98:b8:3c:71:2c:87:d3:ea:c8:81:f7:98:d7:53:5f:45:7b:c2:
18:c9:66:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:54:53 2025 by rpki-client on console.sobornost.net