Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/2C989F908E8211EE98652228C4F9AE02.roa
File: 2C989F908E8211EE98652228C4F9AE02.roa (raw, json)
Hash identifier: Q7tn4hbj0JcHafdu7RumiWMFpzLv90oCS95WTcNCWXo=
Subject key identifier: 45:4F:79:0C:CB:12:C0:63:60:4E:80:11:FA:4E:FF:B1:F7:87:14:FA
Certificate issuer: /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
Certificate serial: 14
Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/2C989F908E8211EE98652228C4F9AE02.roa
Signing time: Thu 28 Dec 2023 05:59:31 +0000
ROA not before: Thu 28 Dec 2023 05:59:31 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 137707
IP address blocks: 36.50.18.0/23 maxlen: 23
36.50.18.0/24 maxlen: 24
36.50.19.0/24 maxlen: 24
2001:df3:51c0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
Validity
Not Before: Dec 28 05:59:31 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=658d0ec3-cb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e3:e3:60:9c:50:f7:85:0f:29:ae:ad:10:3f:
e4:99:33:05:bd:c4:be:9d:61:3f:e3:48:46:90:ce:
dc:82:bd:0e:8c:0b:99:be:22:1a:5d:86:c1:cf:fa:
4a:17:4f:da:cd:85:35:7b:b9:39:54:4d:01:18:80:
85:57:98:bc:fb:b1:c1:a0:66:85:48:63:0e:a8:f4:
e3:61:ce:2b:ec:be:ef:73:8e:60:8e:ac:c6:78:4e:
6e:59:ce:2d:1b:ac:90:19:c2:8d:62:23:8b:63:55:
da:b5:17:b1:6e:af:7c:0f:19:77:75:3f:52:01:f5:
a4:6b:d6:e3:5f:0f:4c:84:6c:c0:48:c0:74:fd:d8:
eb:a0:53:06:5c:40:5c:7b:43:11:1c:8f:aa:75:f0:
17:33:70:95:20:a1:f4:cb:e1:98:3c:0e:32:1f:59:
82:8b:13:dc:10:c0:2d:31:95:9d:6e:cf:1c:6e:c2:
f3:1c:48:14:e8:08:87:fa:1b:a4:72:fe:1e:38:30:
c4:db:2f:2b:4c:e0:e5:2e:6d:65:42:28:1a:a8:ec:
7a:7f:0e:04:18:6f:71:0d:75:34:77:0c:b4:87:f3:
0e:1d:37:f1:a5:e2:a3:d4:67:de:8e:8f:8a:e7:01:
d7:45:3c:3c:9c:31:f6:9e:70:59:61:11:89:7a:66:
2d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4F:79:0C:CB:12:C0:63:60:4E:80:11:FA:4E:FF:B1:F7:87:14:FA
X509v3 Authority Key Identifier:
keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/2C989F908E8211EE98652228C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.18.0/23
IPv6:
2001:df3:51c0::/48
Signature Algorithm: sha256WithRSAEncryption
39:2a:09:0c:5b:8c:9a:ea:f7:8c:18:be:93:e7:0b:52:a8:d9:
f8:95:6c:31:b2:8b:55:a1:8f:99:d8:e1:bc:53:9a:8f:76:f7:
ee:c8:24:f9:2a:14:c8:d9:63:90:0b:74:20:88:97:fb:bf:82:
da:7a:46:01:9a:51:a2:56:a0:25:de:cd:78:3b:f9:22:10:a0:
91:a7:8c:3e:48:ac:6b:06:bd:86:35:43:33:3d:81:70:58:d9:
1d:ce:82:69:7e:0d:74:1b:b1:ac:a4:eb:d9:b4:f9:95:fd:21:
02:22:25:a8:47:9a:d0:44:e6:2f:83:e4:ec:e3:82:30:4e:f9:
d0:91:24:eb:d2:ad:26:d2:4d:90:99:4e:d9:9b:07:4e:22:93:
3b:39:c6:1e:46:a8:0f:39:fb:c7:d5:24:0d:ea:59:88:49:21:
33:b6:aa:68:3b:67:cf:8b:14:57:3a:62:9a:40:66:e9:ac:6e:
1e:c8:ac:34:21:5b:96:75:2e:a8:f4:86:7e:be:29:37:00:de:
65:67:6e:a1:e7:eb:50:bf:9a:53:aa:d7:77:8e:eb:52:96:93:
ab:90:70:1f:2c:ef:92:62:89:d8:c4:90:eb:d2:1b:3c:90:6e:
f6:b0:05:f4:64:54:05:4b:8e:68:76:1c:f8:88:9c:00:db:94:
55:cb:94:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 6 14:48:18 2024 by rpki-client on console-fra.rpki-client.org