Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/C65D9F6CA3EB11EEBE9ED135C4F9AE02.roa
File: C65D9F6CA3EB11EEBE9ED135C4F9AE02.roa (raw, json)
Hash identifier: ntkatUJ6wdHvPTqINsm1aRwuFsql8qoxv3RegQhaQ8U=
Subject key identifier: 9B:B7:BB:DC:18:DC:BF:0B:9B:AA:FA:BB:3E:CC:1A:9B:9B:3C:6D:76
Certificate issuer: /CN=A91AE972/serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
Certificate serial: 07
Authority key identifier: 5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/C65D9F6CA3EB11EEBE9ED135C4F9AE02.roa
Signing time: Tue 26 Dec 2023 12:39:14 +0000
ROA not before: Tue 26 Dec 2023 12:39:14 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 136765
IP address blocks: 36.50.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jan 2024 13:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE972/serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
Validity
Not Before: Dec 26 12:39:14 2023 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=658ac971-26d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:d6:6e:3f:92:bd:51:f2:cb:29:a1:19:e1:
21:6f:c8:c7:c4:0e:5f:af:5d:52:3b:66:7b:c7:29:
a7:b3:d7:6b:64:51:4c:c2:9c:4a:34:c9:16:26:a5:
65:1a:78:71:b6:0c:79:54:84:db:dc:3b:76:5b:d0:
36:fe:1b:a0:69:2f:67:93:cb:87:46:cb:96:3e:db:
f7:17:05:22:22:88:c0:d2:cf:ff:4a:61:9c:3a:20:
45:0e:fe:aa:1d:e7:df:a7:bd:24:e7:8c:13:a5:54:
6b:76:e0:ff:be:61:b0:08:33:d0:02:66:40:90:ed:
1e:e0:64:17:50:a0:d8:f7:49:83:94:76:7e:ea:08:
69:ba:d6:59:9b:c9:4d:c9:b0:c2:1f:c6:f9:c7:62:
e0:a7:21:5c:4a:be:04:ad:f4:cd:96:a7:e5:ae:f3:
99:2f:84:83:b3:fc:86:61:83:19:66:c6:03:79:53:
7c:25:6d:d9:5c:dc:90:63:eb:c6:94:8a:2f:f2:b5:
92:c8:d8:18:27:52:6e:26:ba:b5:9c:e0:15:d0:5f:
71:0b:c8:d8:a1:1f:b8:2b:81:1c:ef:dc:64:33:3c:
cf:e2:80:aa:d1:ea:75:4d:f2:54:3f:1e:d0:4e:1d:
9e:f3:54:7e:c6:8f:80:68:43:9d:6b:80:fb:50:52:
d3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B7:BB:DC:18:DC:BF:0B:9B:AA:FA:BB:3E:CC:1A:9B:9B:3C:6D:76
X509v3 Authority Key Identifier:
keyid:5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/C65D9F6CA3EB11EEBE9ED135C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.199.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e0:6f:15:56:af:1b:a7:d7:93:06:d5:10:97:8b:39:d7:f5:
23:e1:c0:87:be:e9:bd:03:e8:8a:0f:dc:48:25:78:40:29:39:
1f:c6:b2:ad:36:cc:2e:ef:6a:2e:e1:57:83:ec:df:11:f1:b8:
19:7f:49:8b:0a:42:75:44:a8:06:c1:74:c4:f1:b3:6b:ff:12:
8c:f3:4c:b8:37:05:e4:65:47:c8:ec:43:7d:8d:30:2e:06:be:
28:a6:48:e7:c9:86:e2:c4:6a:10:24:46:e5:1c:9a:dc:35:9e:
a9:c9:8d:96:77:58:8d:ae:2e:e4:d6:12:55:38:20:30:19:6e:
a9:f4:b9:30:42:fd:fb:58:aa:6d:51:56:52:11:c2:1d:90:3d:
ea:40:01:39:d7:ec:cd:80:94:c8:53:fc:b2:a5:62:14:00:2b:
68:e0:41:7d:5c:7c:d7:0b:da:b1:70:80:e7:92:4d:43:c0:9a:
1c:50:31:43:a4:99:e4:14:15:5d:c3:69:1a:56:6e:f7:54:aa:
81:05:6f:ae:53:90:9a:81:f6:7f:27:08:c4:f2:20:ab:f6:e5:
32:11:74:7e:25:c8:cc:e6:cf:02:0f:c1:a5:11:cc:70:cc:73:
c3:d8:9e:b1:2e:8f:95:41:18:4c:e6:f1:4c:69:3e:e9:e6:c8:
d0:51:ed:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:37 2024 by rpki-client on console-fra.rpki-client.org