Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/2E26AF10DCC111ECA601C24FC4F9AE02.roa
File: 2E26AF10DCC111ECA601C24FC4F9AE02.roa (raw, json)
Hash identifier: kWW4/QMsHLdAK64JIwXKlUVhbz5guJw5kk3p8h6DP3c=
Subject key identifier: 17:22:FE:95:EE:47:1B:0D:78:7F:24:A6:B4:13:20:85:2E:C0:39:D0
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 0581
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/2E26AF10DCC111ECA601C24FC4F9AE02.roa
Signing time: Wed 15 Jun 2022 11:07:31 +0000
ROA not before: Wed 15 Jun 2022 11:07:31 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 36131
IP address blocks: 169.136.68.0/24 maxlen: 24
169.136.69.0/24 maxlen: 24
169.136.70.0/24 maxlen: 24
169.136.71.0/24 maxlen: 24
169.136.72.0/24 maxlen: 24
169.136.73.0/24 maxlen: 24
169.136.75.0/24 maxlen: 24
169.136.128.0/24 maxlen: 24
169.136.129.0/24 maxlen: 24
169.136.130.0/24 maxlen: 24
169.136.132.0/24 maxlen: 24
169.136.140.0/24 maxlen: 24
169.136.141.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1409 (0x581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Jun 15 11:07:31 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62a9bd72-e95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e4:4a:99:a8:ee:9e:8f:5f:5a:2d:66:e0:ab:
c3:1f:e4:ee:b0:53:a0:67:06:2d:8a:c3:48:76:69:
a4:47:9b:7d:21:cd:a3:42:29:32:9c:09:32:37:e9:
d2:5f:13:f8:90:a3:61:74:6c:95:e4:82:b6:56:fd:
94:31:8b:35:c0:ee:e6:bc:06:29:1d:f2:6a:e2:7a:
d6:af:bb:b0:f2:79:2d:b2:56:1c:f3:54:19:75:a9:
ad:aa:0a:75:bd:51:1f:53:e8:a4:a3:9b:69:a9:e6:
9d:29:1c:ab:de:de:74:2c:49:52:9f:04:71:01:9b:
ad:e5:1a:a1:53:71:17:c2:5a:75:48:cd:b4:c3:29:
03:b8:ba:be:fc:44:ab:7d:47:ff:93:b4:00:be:8f:
9b:53:5e:a6:b8:1d:ef:61:9e:9f:95:fb:b4:66:aa:
68:97:b5:00:fb:5d:2a:bc:f0:4e:f1:63:86:15:0d:
42:09:c3:19:19:0e:07:87:b4:64:cf:d3:a5:d1:5e:
47:8d:6f:36:6e:8d:22:59:88:a6:32:e2:d9:30:4a:
e2:d5:ec:01:b6:23:db:1d:f0:52:73:df:54:e2:7c:
b9:70:47:90:37:50:13:4a:b5:a1:61:c2:29:78:41:
8c:18:00:c0:a4:c3:06:df:78:a3:89:45:f7:2f:42:
53:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:22:FE:95:EE:47:1B:0D:78:7F:24:A6:B4:13:20:85:2E:C0:39:D0
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/2E26AF10DCC111ECA601C24FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.136.68.0-169.136.73.255
169.136.75.0/24
169.136.128.0-169.136.130.255
169.136.132.0/24
169.136.140.0/23
Signature Algorithm: sha256WithRSAEncryption
57:1e:48:94:02:c6:42:fb:07:2f:64:0e:60:b1:f9:73:4a:7e:
f4:48:1d:d4:23:a8:71:a7:1d:5f:12:e8:f5:3d:59:41:eb:a8:
9e:fa:bf:1e:08:dd:9d:b7:45:c8:c5:20:50:fa:54:bb:7f:19:
a5:28:0b:b5:ed:e8:91:ac:22:92:74:a9:39:6e:ba:7a:e7:45:
29:ca:ca:e9:a1:c0:d6:81:ce:6d:86:06:39:b1:7a:a4:59:6b:
84:cd:ea:a9:c5:b9:71:3d:da:bd:49:5e:87:5e:0f:be:f1:0b:
fe:d1:2f:ca:dd:ab:23:c9:81:3d:9c:42:96:db:13:ab:81:fb:
06:67:25:1a:fb:ce:cb:92:22:66:0c:16:42:5e:0e:a9:a7:28:
d8:26:7c:b9:c1:f2:ae:b6:29:67:9f:05:f7:d3:86:4b:3f:22:
3a:e6:a2:0d:5b:1a:ee:d9:a5:a2:b8:79:18:d4:32:b1:db:cd:
7b:01:9f:9f:d2:db:1f:96:d4:4c:b3:ff:64:da:51:2c:58:b4:
2b:d6:75:1f:6a:b0:d7:51:04:ea:87:2a:39:b5:e2:5b:ec:6a:
3f:e3:a9:55:cb:33:b0:eb:a6:fe:5e:4a:93:31:61:d6:dc:f8:
9f:4b:97:2b:cb:c5:23:11:f6:ee:b9:e4:6f:29:b1:bf:41:af:
30:c3:04:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:07 2023 by rpki-client on console-ams.rpki-client.org