Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/903F55588E8B11EE844A475BC4F9AE02.roa
File: 903F55588E8B11EE844A475BC4F9AE02.roa (raw, json)
Hash identifier: CZxZiHDovoTGVW37+L1tBmTdo6Z8nHlajAsMQDhRgag=
Subject key identifier: FD:F4:81:96:28:0B:94:3F:55:B7:C2:7B:53:62:C3:86:23:69:CB:96
Certificate issuer: /CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2
Certificate serial: 04
Authority key identifier: FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/903F55588E8B11EE844A475BC4F9AE02.roa
Signing time: Wed 29 Nov 2023 07:47:37 +0000
ROA not before: Wed 29 Nov 2023 07:47:37 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 139901
IP address blocks: 36.50.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Nov 2023 08:23:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2
Validity
Not Before: Nov 29 07:47:37 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6566ec98-856d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:47:97:f5:e7:3a:fa:0f:3d:c4:37:c0:a0:
c7:4a:18:ea:4e:91:85:8b:12:a1:2f:9f:2a:0d:be:
aa:ec:ee:6b:72:ec:43:7f:ce:d9:ca:6e:a4:ee:2d:
40:dd:74:cc:16:04:9c:5f:f9:2f:d5:4d:a0:b0:fe:
8a:39:68:02:d3:df:0c:41:2b:0e:a3:f6:4d:20:4c:
1a:07:fe:b1:1a:0f:48:1d:de:b5:20:28:3b:fe:f3:
83:23:13:ca:1c:b9:44:07:ac:3f:3f:3b:0f:de:81:
1f:03:40:ba:07:bb:7a:e6:80:a8:e0:b3:97:b7:e8:
96:6f:0f:d7:44:b0:2e:f1:47:0a:3a:69:4e:79:a1:
82:67:78:c2:f8:68:2a:b1:01:ae:f3:dd:95:c1:6e:
09:4a:5b:0b:fd:d6:c9:81:f2:08:b3:4e:b6:89:11:
d5:a6:cd:82:57:4b:33:71:f8:8c:98:34:70:3a:e0:
94:9e:e7:55:b5:f9:16:ad:43:30:79:f9:1e:2d:a1:
c1:fa:f1:3b:f6:b9:57:16:c2:b7:87:c1:50:38:64:
12:94:f2:93:a4:00:61:c5:a0:44:4f:d9:a6:cb:3f:
f1:07:28:81:5e:e3:f0:ca:1a:d9:3d:a6:f6:74:43:
83:73:29:50:12:1a:4e:91:7d:fe:ca:bb:5d:7a:1f:
a9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F4:81:96:28:0B:94:3F:55:B7:C2:7B:53:62:C3:86:23:69:CB:96
X509v3 Authority Key Identifier:
keyid:FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/903F55588E8B11EE844A475BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.10.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ee:08:58:e0:5c:70:23:f6:49:ac:be:93:55:bd:81:e0:78:
b4:8e:33:fd:75:ad:f9:b7:ab:6a:84:fa:ff:44:85:c4:11:fa:
23:c7:94:6f:83:85:ec:2a:8d:60:bf:db:c8:12:11:bf:f5:14:
a6:4e:0f:d3:40:e5:b0:08:22:6f:ea:e2:10:15:81:67:6c:fa:
05:da:48:8c:05:fa:49:02:bd:32:58:3e:db:ab:7a:bb:0a:f3:
45:48:c2:74:0e:d9:fd:68:96:70:cc:43:0d:81:fa:7a:8b:2d:
26:ba:1e:3e:da:fb:a9:01:ff:52:52:2b:cd:04:12:ca:cc:ee:
99:6a:f2:58:8a:dd:f8:b4:6f:7f:96:33:4b:12:07:f0:a1:ac:
76:95:ed:b9:12:00:eb:b1:f8:76:ad:47:a6:94:db:0e:3b:47:
40:e6:bd:31:82:cf:a8:25:bc:1c:88:1a:37:2d:46:1c:f3:5f:
8b:7c:b4:6f:32:b6:2f:53:0e:a1:d3:0a:3f:9c:11:f0:6f:01:
1a:d3:ed:e2:51:77:3c:e4:86:31:f9:9e:37:b6:27:49:59:c2:
05:1b:47:4d:e8:8d:88:23:d4:c1:64:4e:eb:6a:d2:89:bb:81:
e2:ec:2b:5a:4d:85:2a:d6:5f:ec:bc:fa:42:69:88:02:c8:6c:
eb:33:2c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-ams.rpki-client.org