Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/F6311004DD8E11EC8005001CC4F9AE02.roa
File: F6311004DD8E11EC8005001CC4F9AE02.roa (raw, json)
Hash identifier: ZnXK3Se5RiC6TyMZXuhhqSGcILLb/GOoRSbMfMWY4KQ=
Subject key identifier: 53:1A:E5:73:4E:B6:85:65:9D:62:5B:0A:EC:81:2B:27:29:40:E6:E3
Certificate issuer: /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial: 02C6
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/F6311004DD8E11EC8005001CC4F9AE02.roa
Signing time: Thu 27 Jul 2023 02:03:35 +0000
ROA not before: Thu 27 Jul 2023 02:03:35 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 59374
IP address blocks: 147.50.228.0/24 maxlen: 24
147.50.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 05:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710 (0x2c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Validity
Not Before: Jul 27 02:03:35 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64c1d077-e98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:b4:80:85:a1:5e:ef:52:5f:39:f8:92:25:
bc:b4:cd:bf:7a:d0:07:a3:aa:56:ca:20:b6:a0:a4:
d0:79:38:c6:4f:9a:74:f5:4e:62:e0:a1:d6:38:8d:
4c:48:b9:77:a5:22:ab:59:57:cb:1a:ed:b4:10:e1:
35:e6:a8:02:94:c8:2e:d8:d8:77:82:72:d7:03:1f:
8e:91:8a:c4:d2:23:06:2f:24:56:d9:55:95:1d:b4:
d3:32:61:2e:bd:5e:2b:65:05:ac:3d:68:ee:23:7b:
19:9b:10:05:3b:1e:e2:2b:51:80:9a:68:78:6b:c8:
ae:40:79:7b:e7:75:c9:d7:8c:cb:d7:0b:ba:69:1f:
91:e4:3c:e6:40:92:24:1e:ec:07:df:64:9d:ee:29:
0e:53:66:5b:f5:49:c1:f6:c6:35:87:ce:1c:89:6c:
2d:37:e2:4b:92:a3:e7:52:2c:2e:bc:83:bf:ed:a2:
0a:57:dd:5b:63:26:2b:17:12:49:59:63:6e:bc:f2:
84:76:42:f6:bf:4b:47:f7:33:f9:c1:80:4a:aa:c3:
21:9b:93:aa:2c:35:c0:c4:69:c4:39:73:72:92:6a:
f0:77:71:ed:02:50:54:24:6a:ab:e9:88:08:45:2d:
25:cb:dd:db:58:eb:55:84:52:9e:ba:7e:d1:fc:7a:
06:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1A:E5:73:4E:B6:85:65:9D:62:5B:0A:EC:81:2B:27:29:40:E6:E3
X509v3 Authority Key Identifier:
keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/F6311004DD8E11EC8005001CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.50.228.0/24
147.50.241.0/24
Signature Algorithm: sha256WithRSAEncryption
23:be:f6:d7:75:b2:ea:42:3b:66:a2:b7:b6:5e:1c:d7:ef:a8:
26:04:9b:28:34:18:0b:6b:93:fa:e0:75:ec:ad:c8:9e:c4:d5:
02:af:8c:4f:7a:07:bc:b6:7e:77:fd:92:e5:24:af:58:a7:d5:
ce:ac:05:92:5b:82:6d:a4:00:89:6d:ee:a9:a3:af:ab:1c:44:
4f:a8:22:07:c3:90:e7:45:34:8b:2c:9d:32:c6:f0:94:c2:22:
62:fa:b9:d0:76:6a:e3:5b:07:ff:fa:fb:8e:07:bb:25:89:7a:
d2:4b:5a:e6:9a:fc:b0:4b:71:88:26:7e:ec:fa:94:ad:5d:d8:
3d:ec:93:25:c9:8e:9f:59:62:e2:cc:e1:69:d2:8e:74:40:31:
de:fe:70:eb:a9:16:d0:98:78:41:89:9b:ee:60:1e:e2:d2:a9:
12:01:8c:b1:71:dc:7c:1a:2f:5e:38:90:c4:e4:de:49:b8:c0:
da:89:c2:ad:18:70:d0:63:de:b1:d6:dd:13:29:d0:b1:ac:54:
4e:e5:22:94:65:ca:f0:00:5a:3e:5a:2d:30:85:8d:cf:df:84:
83:09:a9:67:99:fc:08:11:e6:c2:12:7a:67:39:ba:1f:99:b7:
de:84:d6:f4:1c:05:fd:f9:8f:bf:e3:77:78:2e:f7:c0:b4:65:
85:a7:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 06:11:34 2024 by rpki-client on console-fra.rpki-client.org