Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/672DEDEC142D11EE9595561AC4F9AE02.roa
File: 672DEDEC142D11EE9595561AC4F9AE02.roa (raw, json)
Hash identifier: uzqilrvIQgJISF4VbG9JC4F8k7SHelwxvoXwUR1WaBA=
Subject key identifier: 79:E3:A4:64:EB:46:CA:2B:EB:CB:77:F1:57:D9:F0:22:C1:A0:05:FC
Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Certificate serial: 0564
Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/672DEDEC142D11EE9595561AC4F9AE02.roa
Signing time: Mon 26 Jun 2023 14:26:13 +0000
ROA not before: Mon 26 Jun 2023 14:26:13 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 36.255.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jul 2023 06:09:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1380 (0x564)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Validity
Not Before: Jun 26 14:26:13 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6499a005-a437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4d:cd:af:17:06:98:93:2c:60:aa:27:f7:cf:
49:45:68:67:7d:79:d5:7c:16:65:b8:97:3b:4c:20:
f1:28:e3:e4:52:46:5b:d0:c2:e6:a7:82:71:68:44:
b3:aa:88:9d:39:65:77:73:73:a1:ea:dd:58:f8:14:
ea:29:80:21:86:aa:7f:68:5f:8e:e5:d5:0f:6a:3e:
08:23:57:35:5d:19:07:3c:2f:ee:fd:ca:97:69:ae:
49:ed:b9:74:a3:aa:9c:15:c9:a4:ea:4e:59:c5:87:
a6:46:14:08:5e:f6:27:c6:45:21:ba:6f:1c:af:14:
89:0a:67:c5:d3:25:b3:6d:b3:e3:1e:3d:1e:ac:66:
ea:67:3d:e8:02:ff:c7:5f:e4:3b:e2:78:73:aa:c8:
15:79:f1:59:08:98:98:f3:1c:22:3f:55:ca:24:75:
5c:c2:6e:35:4e:fd:ce:60:e4:06:12:4e:15:80:0e:
06:93:db:18:48:ca:62:97:b7:61:d7:1e:93:4e:78:
a1:03:21:d5:05:e8:27:58:46:61:b9:8c:3c:12:b7:
76:dd:f6:53:8b:04:59:73:75:c0:77:91:c4:ae:a5:
5d:b6:14:3d:75:9c:72:4c:cd:30:e9:d3:73:36:2a:
45:a5:e0:fc:46:d2:aa:da:06:04:ce:9e:13:64:9f:
99:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E3:A4:64:EB:46:CA:2B:EB:CB:77:F1:57:D9:F0:22:C1:A0:05:FC
X509v3 Authority Key Identifier:
keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/672DEDEC142D11EE9595561AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.197.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:09:c1:5e:fa:18:f8:33:27:38:60:38:63:5b:60:36:13:4a:
3a:ee:e6:56:49:72:c2:47:aa:af:3a:8c:4b:a9:b7:3b:45:66:
8c:2c:0c:cd:e9:86:9a:9d:6e:84:86:94:72:1e:d5:99:2f:43:
ec:12:77:aa:18:72:44:26:48:40:a3:1e:fb:c0:a2:f2:90:e9:
dc:6b:85:95:72:07:04:d3:9f:6b:e5:41:cf:fb:c8:da:da:08:
59:5a:ae:71:55:38:0e:a5:8d:f8:65:81:14:6a:46:0f:40:f9:
a9:a5:5e:32:0f:76:58:7c:12:90:02:c2:b8:29:06:4f:ef:49:
73:15:87:d3:92:29:0d:1d:d7:90:f8:d8:44:62:74:30:91:b9:
13:08:bf:a3:6e:e4:78:c4:3b:2c:5d:32:6c:35:27:ce:a7:8e:
80:c9:c9:93:34:0e:44:36:8b:e2:3b:bc:07:c5:62:cf:75:28:
65:ab:d0:56:61:da:e6:69:d2:52:f4:c7:5d:11:81:bb:c5:bb:
47:1b:39:7a:f0:0a:52:b8:03:d7:83:8d:8d:8e:da:fb:1e:b0:
38:ce:aa:97:be:13:b8:76:70:36:5b:e2:2b:1e:8a:19:42:25:
42:48:5c:2c:c7:93:cf:88:6e:60:19:f0:75:da:3e:27:1e:df:
3a:3d:cc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-ams.rpki-client.org