Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/A30A20AA22D511EDA3352647C4F9AE02.roa
File: A30A20AA22D511EDA3352647C4F9AE02.roa (raw, json)
Hash identifier: vqB/RHTq/kY1oQJegJiN79eAH0mKmGcG8aqtGymDTzs=
Subject key identifier: 14:0E:36:BE:77:B4:52:A3:C0:BB:7C:C7:74:BF:7F:02:CC:67:1A:AB
Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Certificate serial: 048E
Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/A30A20AA22D511EDA3352647C4F9AE02.roa
Signing time: Thu 08 Sep 2022 18:00:36 +0000
ROA not before: Thu 08 Sep 2022 18:00:36 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 209854
IP address blocks: 36.255.196.0/24 maxlen: 24
36.255.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1166 (0x48e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Validity
Not Before: Sep 8 18:00:36 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=631a2dc4-503e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:64:85:06:98:aa:e3:65:52:26:2e:bc:bb:e8:
34:bc:66:11:e5:65:ea:cb:29:2a:e6:38:93:f8:8f:
64:2b:56:cb:4b:a6:2a:70:d0:d4:11:96:87:3a:21:
9c:69:c2:e0:f1:bc:85:bc:a8:bc:3f:2a:a4:ff:cf:
04:93:54:da:d3:9e:db:14:26:ef:bb:69:03:8f:14:
89:92:11:0b:69:5a:13:97:df:36:a2:81:08:21:af:
30:5f:fe:1e:30:2b:f3:d1:ff:00:9d:d1:1f:d9:29:
1e:a5:4f:a4:34:3e:6b:a0:f1:79:4c:b7:d9:75:6f:
20:5e:95:9e:8a:0d:90:7b:8d:0e:38:25:09:3d:93:
39:99:05:99:5f:51:6d:ed:c0:40:68:38:0e:68:dc:
44:7b:78:2e:ef:4a:8a:99:46:12:56:19:97:a2:52:
be:ce:72:7c:51:a9:fb:1b:61:2a:16:db:3f:50:7b:
f3:c0:14:50:62:69:ec:51:b2:9d:91:df:90:8c:58:
6c:39:e5:de:70:d7:4c:3e:dd:68:b6:a3:69:38:75:
8b:38:e5:c8:ec:f6:ba:9f:be:4f:8a:23:92:b7:9f:
68:11:68:0c:4b:d3:6e:0a:49:9b:4e:30:8c:37:15:
1c:af:81:2f:34:00:c8:5f:5e:55:8a:29:f3:9e:c8:
50:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0E:36:BE:77:B4:52:A3:C0:BB:7C:C7:74:BF:7F:02:CC:67:1A:AB
X509v3 Authority Key Identifier:
keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/A30A20AA22D511EDA3352647C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.196.0/24
36.255.199.0/24
Signature Algorithm: sha256WithRSAEncryption
49:35:17:0a:cf:9f:03:53:de:1b:89:29:3d:07:fd:93:e4:30:
2b:fd:05:ef:01:9c:5b:15:0e:83:9d:86:f5:e9:eb:57:aa:e8:
69:cb:b9:81:80:7e:cb:97:73:59:f3:37:55:bf:a1:7f:41:a1:
8d:b9:c4:de:5e:8e:61:ad:02:c8:14:bd:d6:5e:a6:6e:90:78:
76:ff:4f:79:74:f3:20:1d:20:c4:84:e0:0d:23:f6:f4:ba:b6:
ee:20:2d:6c:2c:cb:2b:7c:16:ed:34:be:63:96:7a:07:bb:95:
a1:a7:c8:4a:6e:8e:1d:91:52:6f:51:5f:9e:d1:57:c0:ea:47:
58:7d:03:26:72:d6:2a:2c:16:dc:68:d4:24:42:95:e9:45:8c:
66:fe:91:01:be:ce:ef:b4:a8:fa:00:04:44:21:4f:d0:48:56:
7e:6f:02:e4:68:65:f1:c3:b1:df:1a:a5:78:38:c4:68:5a:57:
be:e4:bc:b9:a0:60:e4:d5:41:db:4a:97:3c:f0:b0:ce:1a:0d:
70:9f:aa:b3:e7:09:8d:33:f6:d6:73:27:5a:40:a7:15:a6:23:
15:a6:ef:de:3c:a5:e0:e4:8c:8f:13:36:fd:b2:ee:af:00:9e:
55:ff:bc:5c:9e:2b:09:98:02:69:4e:c5:92:4a:30:cb:83:83:
a2:54:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:48 2023 by rpki-client on console-fra.rpki-client.org