Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6715551E699C11EFB18C5C0DC4F9AE02.roa
File: 6715551E699C11EFB18C5C0DC4F9AE02.roa (raw, json)
Hash identifier: F6MZhLdu0Arckzeb+KWoUBFZ5kOB9ZGE5CtXDPDUHM0=
Subject key identifier: FD:28:6E:AC:A3:62:C2:CA:1E:CB:D7:5D:2F:14:E9:77:CD:58:73:02
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4517
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6715551E699C11EFB18C5C0DC4F9AE02.roa
Signing time: Tue 03 Sep 2024 02:29:54 +0000
ROA not before: Tue 03 Sep 2024 02:29:54 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 152985
IP address blocks: 2001:df4:3640::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 07 Sep 2024 02:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17687 (0x4517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 3 02:29:54 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=66d674a1-114d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:81:30:1e:55:4a:ce:1c:2c:0a:8a:93:d1:51:
1d:2f:30:f4:62:00:8e:21:63:70:b1:3d:38:49:b5:
a2:1d:a6:13:4e:d4:b5:55:4c:51:99:ff:ad:ce:4b:
f1:55:f0:50:1a:ec:be:18:8a:79:53:f1:22:80:00:
58:42:58:6f:f0:85:36:bd:96:51:e0:66:94:a5:2a:
78:41:ab:bb:68:f0:0d:84:63:15:24:62:0d:a9:87:
63:83:14:6d:91:30:15:24:28:0e:ac:96:ef:3f:59:
e5:cf:bd:41:9d:83:41:2f:2b:6d:04:6a:89:c4:7c:
9d:41:04:5c:87:6a:d1:03:0f:6b:2f:30:00:63:7e:
d6:00:c0:ad:cf:c4:98:f1:8d:80:85:68:14:82:b4:
85:1e:9f:52:64:ee:f0:64:b7:bc:23:f4:98:9c:c4:
54:fc:7a:a1:ac:7b:20:11:37:db:30:52:7b:ec:0e:
51:86:be:14:f4:48:70:ca:d5:1c:f0:8d:82:8f:a8:
bc:62:1e:7d:2f:14:1b:d2:da:23:fc:4b:23:fb:c6:
6a:52:c8:b1:9f:87:6e:18:96:ec:c1:91:37:0c:bf:
50:3e:cd:56:e7:80:e1:ef:4d:39:9f:c4:b6:7b:fd:
67:75:3f:ad:d7:f2:10:c2:02:10:3e:a8:a1:f5:b4:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:28:6E:AC:A3:62:C2:CA:1E:CB:D7:5D:2F:14:E9:77:CD:58:73:02
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6715551E699C11EFB18C5C0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:3640::/48
Signature Algorithm: sha256WithRSAEncryption
16:a1:1e:60:19:d3:9a:62:d4:c0:c9:ed:d1:da:c1:ce:70:cb:
30:df:6d:5c:84:0b:8d:0f:27:57:db:c7:bb:4f:0a:7a:80:9e:
6a:35:bd:7b:8c:6c:12:34:4a:b5:68:19:83:50:0e:8d:f1:9e:
49:88:f1:40:be:e3:54:7d:23:94:01:24:1d:dd:b0:73:f4:be:
8d:05:49:70:2b:4a:39:a2:91:54:30:cb:f5:fd:82:03:39:6a:
a5:23:f0:c9:36:61:6c:22:2b:6a:65:e6:b9:e0:d5:fb:21:40:
12:63:82:63:c0:f7:7b:60:e0:c3:26:1c:3c:7f:42:a0:18:5a:
38:8d:6e:74:a5:be:c5:90:f7:71:4d:53:c4:1b:d8:88:45:cf:
df:45:73:30:6a:02:30:80:52:0e:df:32:33:53:2b:40:65:08:
fc:f7:71:2f:ec:68:85:b0:04:9f:5e:3d:24:ee:60:25:1e:cf:
dc:01:96:e5:ba:65:c0:c3:19:f7:ea:63:1f:5d:96:be:96:51:
0b:bd:42:55:34:77:af:a3:ab:aa:91:a8:b5:52:bb:ef:1f:ab:
98:56:ce:18:c5:69:7c:27:76:75:02:e9:1c:7a:d8:7e:70:c4:
a0:86:b2:73:a1:09:cf:47:4f:4e:98:b0:08:0a:d1:39:a2:7d:
86:fb:b2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 08:32:28 2024 by rpki-client on console.sobornost.net