Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/E5F2CA009F4011EE8C16C76AC4F9AE02.roa
File: E5F2CA009F4011EE8C16C76AC4F9AE02.roa (raw, json)
Hash identifier: PO2EgLzb6fYHn43pBS1ioKZqOeEShliQHNF+VtEGFw8=
Subject key identifier: 86:D2:F8:9C:A9:64:86:03:B4:66:01:EC:2F:E9:8E:5A:7A:0B:0F:20
Certificate issuer: /CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65
Certificate serial: 0E
Authority key identifier: A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/E5F2CA009F4011EE8C16C76AC4F9AE02.roa
Signing time: Wed 20 Dec 2023 14:07:08 +0000
ROA not before: Wed 20 Dec 2023 14:07:08 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 152185
IP address blocks: 36.50.182.0/24 maxlen: 24
36.50.183.0/24 maxlen: 24
2001:df3:4d40::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 20 Dec 2023 14:58:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF9B0
Validity
Not Before: Dec 20 14:07:08 2023 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6582f50c-13e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:9b:0c:4a:b5:81:d9:45:ca:56:a1:b8:d7:
76:40:d0:46:66:ff:0a:1f:2f:c3:ea:86:86:89:50:
f6:ed:47:4e:9f:3d:de:47:9b:a6:55:14:c7:f4:28:
a0:e9:16:05:ec:83:da:4c:4e:7b:ca:58:15:c6:15:
92:68:92:af:c2:69:54:c1:21:7b:cc:0b:24:81:94:
39:d7:5d:e6:a7:90:a4:af:2d:0c:ec:54:0d:66:9e:
b4:0f:e8:4e:3a:13:c0:45:09:b4:eb:b0:d5:d9:c6:
2d:61:7a:18:42:c3:61:41:c5:33:4c:49:05:67:58:
63:e5:e9:71:d9:68:f7:96:b0:7b:cd:cd:39:51:a7:
6a:e4:4d:50:f0:7f:e6:17:5b:cb:9f:ed:c9:5d:b6:
4e:01:4c:c6:92:90:c8:e6:8b:87:1c:69:5d:5c:ff:
f7:5d:a9:88:1f:96:3d:b1:58:79:95:f8:80:d6:e6:
17:56:ff:1c:bb:a4:01:af:07:09:69:4e:42:fa:1c:
d1:3a:76:53:7a:96:1e:67:6c:02:bf:fc:00:e5:37:
db:bb:3c:8e:ad:6b:d6:81:35:32:05:08:ae:87:90:
ec:35:3b:d3:ac:93:9f:e3:b6:da:a5:43:5d:cc:b5:
89:c8:a6:f5:2d:d8:11:7d:f6:68:ff:c4:20:af:01:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D2:F8:9C:A9:64:86:03:B4:66:01:EC:2F:E9:8E:5A:7A:0B:0F:20
X509v3 Authority Key Identifier:
keyid:A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/E5F2CA009F4011EE8C16C76AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.182.0/23
IPv6:
2001:df3:4d40::/48
Signature Algorithm: sha256WithRSAEncryption
19:d4:84:a7:f1:94:d8:6c:f3:96:f1:a3:94:c5:f5:bd:a0:c8:
10:40:0b:ef:b7:74:ea:5e:1e:af:e2:ce:37:85:20:07:a5:27:
36:2e:6a:f5:3b:c6:38:e9:a5:ac:f3:63:70:7f:2c:bc:5f:53:
f0:e5:9d:58:15:77:46:24:c1:e2:f7:81:71:a1:f5:b9:ee:93:
b0:4f:c5:d3:8f:a0:24:c9:6c:50:c1:0c:0e:68:15:e7:76:59:
0d:1b:69:00:d7:d5:21:94:9f:f4:f1:e5:61:27:02:6a:14:81:
e8:d2:04:3e:16:c7:53:97:71:85:d7:2f:45:14:8a:78:b5:74:
e4:2b:6a:6f:c0:39:be:4d:97:9a:88:a9:a6:0f:b9:a8:46:d0:
b7:15:90:1f:5c:75:23:db:b1:d7:fc:2e:e0:bb:fb:46:16:eb:
95:23:79:a2:71:a3:ea:e7:a4:8b:4c:16:09:da:db:01:ea:1a:
3a:f4:2d:b9:14:38:3f:bd:dc:37:e0:bd:10:c4:ef:84:c1:d2:
56:f8:a0:7f:38:8f:7b:bf:07:1f:95:07:86:31:d4:eb:99:d2:
f3:74:06:be:59:ae:f1:dc:8a:ee:a6:0c:4d:dd:42:27:5f:1c:
fb:bc:56:df:56:d1:92:29:60:71:f3:54:81:31:67:c8:29:c2:
cc:a8:cf:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:01:35 2025 by rpki-client