Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/A45E9022287211EFAFD8911AC4F9AE02.roa
File: A45E9022287211EFAFD8911AC4F9AE02.roa (raw, json)
Hash identifier: mF+1bmL9eEc1GutbZuoQ1q+vjQDEkljLSBrcQaZsjDg=
Subject key identifier: 55:7F:83:27:72:DE:EE:33:55:FB:33:7B:BE:48:B2:6F:68:90:6D:8B
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 061A
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/A45E9022287211EFAFD8911AC4F9AE02.roa
Signing time: Mon 24 Jun 2024 03:09:11 +0000
ROA not before: Mon 24 Jun 2024 03:09:11 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 21859
IP address blocks: 36.255.193.0/24 maxlen: 24
43.229.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 08:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1562 (0x61a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Jun 24 03:09:11 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=6678e357-3925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:e5:67:35:67:64:93:18:c6:9e:a8:e3:7e:
f2:37:1e:55:30:b1:1a:b0:c0:ec:bf:27:c5:58:21:
bd:a9:30:0b:57:e3:7b:c1:66:05:69:be:a4:3a:b5:
bc:6a:a8:27:b2:bd:10:32:a6:61:4e:13:e8:f4:44:
32:7b:80:4c:1f:71:61:c8:c8:b3:97:d8:22:07:80:
ad:f9:bf:8d:ac:b6:38:4f:ab:6e:e0:77:3c:10:8f:
50:a1:7a:7c:81:97:bd:18:00:ee:75:a0:8e:a3:30:
14:b2:ff:95:93:ce:ec:09:79:c9:a1:09:82:87:77:
97:0a:67:36:40:e8:30:22:d2:ec:cc:64:00:10:f1:
a4:76:56:04:63:5e:01:d0:44:ba:29:b1:84:a9:8a:
21:ad:b7:d6:1d:c3:40:1c:af:92:ca:f5:ab:df:15:
bd:5d:f5:29:71:96:ee:c5:68:1e:44:1b:22:2b:e3:
29:e9:5f:21:b5:ce:2a:f0:61:d5:4d:a8:88:e2:30:
bf:25:77:a6:8d:16:b1:e8:f6:33:26:d3:85:67:f8:
27:c1:9d:0a:5d:4a:30:49:0f:bf:9b:3e:c4:0d:9f:
0e:57:ed:61:91:12:b6:61:68:bb:7b:ef:81:d7:60:
14:36:fb:40:59:18:07:0f:03:b8:a0:37:e8:13:1c:
3a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7F:83:27:72:DE:EE:33:55:FB:33:7B:BE:48:B2:6F:68:90:6D:8B
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/A45E9022287211EFAFD8911AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.193.0/24
43.229.152.0/24
Signature Algorithm: sha256WithRSAEncryption
36:d1:db:f4:7f:f0:4a:10:0b:77:09:f8:4d:c1:52:d9:7d:b2:
b2:3d:41:6b:94:84:a6:13:6b:4e:44:59:ce:7d:0b:4b:4a:83:
91:1d:57:99:bf:69:79:47:f8:20:80:6f:67:93:7b:04:33:c2:
ed:82:7b:bf:90:1f:e7:4b:00:4c:45:7d:44:86:9c:80:62:2c:
77:27:94:9f:eb:fa:68:11:5f:b9:8f:f0:e1:86:95:31:23:d0:
bc:9f:53:fe:f0:6f:3a:37:87:1f:69:5c:cd:cf:7b:63:6a:2a:
6d:30:27:2f:90:00:ae:fc:b9:c4:76:77:6d:04:39:8a:83:fb:
c4:95:11:13:23:a6:70:53:70:a3:86:54:ae:72:9f:d3:83:d1:
77:2a:16:4f:57:f1:68:ba:54:7d:be:c3:01:ba:1e:64:dc:10:
3e:bd:a8:1a:fc:6f:5d:29:b8:21:ed:79:a6:d3:96:7f:b6:50:
cc:06:b0:58:b0:64:5e:25:24:29:0c:38:eb:82:03:1e:2c:8e:
63:dc:94:99:b2:08:77:a6:76:52:33:c4:f0:89:c1:38:bb:5b:
f8:da:5a:8f:c9:a3:0f:ac:0c:10:a6:ec:19:07:1b:6b:61:35:
35:d5:9c:87:88:30:f6:9a:48:a0:c6:82:62:38:cf:6c:41:20:
3e:f4:5b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 10:16:07 2024 by rpki-client on console-ams.rpki-client.org