Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/568E8180E05611EF94B15084C4F9AE02.roa
File: 568E8180E05611EF94B15084C4F9AE02.roa (raw, json)
Hash identifier: OCv2ToYNDzaj/aAnU+i4UzKqYGOm87RV/sbvKXo7iE8=
Subject key identifier: F9:15:30:91:4E:BF:72:96:38:87:85:2B:0C:78:EE:0B:27:EE:3A:DB
Certificate issuer: /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Certificate serial: ED
Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/568E8180E05611EF94B15084C4F9AE02.roa
Signing time: Mon 03 Feb 2025 04:28:19 +0000
ROA not before: Mon 03 Feb 2025 04:28:19 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 152125
IP address blocks: 36.50.31.0/24 maxlen: 24
2001:df3:3340::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 04 Feb 2025 14:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91423C1, serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Validity
Not Before: Feb 3 04:28:19 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=67a045e3-3b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:18:ac:9a:e8:90:30:73:50:0c:9e:1a:f6:29:
2c:d9:14:32:cb:7e:6e:cc:83:ee:c9:82:ad:c2:1c:
51:50:2f:2c:32:4f:88:26:78:2a:37:36:26:1b:8d:
9f:13:70:89:59:fd:63:39:9c:de:c1:01:89:67:5e:
c4:19:79:f8:34:a1:54:7e:65:ed:98:f7:bd:b2:04:
92:49:ee:35:3e:b3:06:3e:3f:ac:1e:7d:36:64:3a:
e2:03:20:8d:c4:02:ee:b3:a6:74:bc:a9:4f:69:3e:
c3:ff:96:57:57:f3:95:3f:5d:a1:1a:fe:70:6b:63:
43:23:24:ff:f5:a0:cb:b1:4c:b6:70:37:38:2a:91:
1b:13:ba:0b:df:db:f8:d9:02:c7:04:97:69:e3:46:
7f:7c:8b:c0:12:32:0b:e4:47:eb:5b:ae:ff:64:a1:
f2:47:c1:c2:f4:91:65:da:cc:fb:03:fa:de:28:d9:
88:ea:5e:45:66:4d:6f:d8:91:97:e7:13:47:66:fb:
1c:01:4d:60:c9:0c:d8:41:77:67:42:98:b7:61:e4:
e4:fe:d8:b8:c3:f3:25:02:7a:0b:cd:f0:e1:c9:36:
8a:36:ba:5b:ef:e5:76:4d:60:f7:80:5c:4b:81:a1:
10:9a:37:42:6c:ba:90:95:ba:e4:75:7c:f0:78:5f:
a8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:15:30:91:4E:BF:72:96:38:87:85:2B:0C:78:EE:0B:27:EE:3A:DB
X509v3 Authority Key Identifier:
keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/568E8180E05611EF94B15084C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.31.0/24
IPv6:
2001:df3:3340::/48
Signature Algorithm: sha256WithRSAEncryption
01:01:b8:9d:43:a6:55:31:c3:fb:6a:3a:8c:96:6e:d9:db:24:
a2:fb:3f:4a:db:d7:27:5a:07:09:9f:50:e3:8f:a4:9d:41:69:
55:11:79:4e:e9:b6:19:9a:5d:3b:1f:56:0b:7c:ba:58:19:89:
30:53:92:9e:0d:81:a9:f1:92:54:77:64:96:26:3e:7c:8c:a4:
58:8c:97:e1:4c:f9:f7:f1:3b:9f:3a:9e:b7:79:91:14:76:34:
25:03:22:c9:a1:9c:a7:cb:ab:a0:98:2d:ac:fc:9e:f0:56:2c:
84:1b:34:08:2d:1a:88:8e:56:06:ba:18:3b:db:29:26:d3:72:
c6:69:a2:d6:87:2d:3f:3e:f2:12:8f:5b:58:c5:2e:cc:ec:bf:
ef:10:e7:c7:13:30:ae:cd:d9:1a:fe:fc:b0:be:8b:7d:90:57:
9b:c0:46:aa:d5:71:ee:41:58:4e:29:d2:6a:8c:4b:b3:4d:b7:
95:ed:c1:07:40:d6:fe:f1:43:5a:ef:60:cf:0b:8a:99:cd:cc:
6b:ed:c0:c3:ed:1c:eb:a6:9a:b9:c0:3d:8f:85:73:48:b6:40:
66:40:4d:2e:3b:aa:02:79:ca:a0:44:ac:25:1b:5f:2b:d7:0a:
8f:81:46:f8:f7:52:28:f7:d1:ba:9b:2e:23:45:00:25:e0:96:
45:c5:61:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 15:34:20 2025 by rpki-client