Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/B563B81E99C211EEB5617D55C4F9AE02.roa
File: B563B81E99C211EEB5617D55C4F9AE02.roa (raw, json)
Hash identifier: 4i/QbqYQ3cROAWuJJydxCiVkBCAX/+jaXRle1TrStWI=
Subject key identifier: DA:59:51:42:B5:A9:92:1E:E5:20:8A:D3:F1:79:AF:14:95:E5:0E:7D
Certificate issuer: /CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD
Certificate serial: 02
Authority key identifier: BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/B563B81E99C211EEB5617D55C4F9AE02.roa
Signing time: Wed 13 Dec 2023 14:20:04 +0000
ROA not before: Wed 13 Dec 2023 14:20:04 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 152170
IP address blocks: 36.50.102.0/24 maxlen: 24
36.50.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 06:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD
Validity
Not Before: Dec 13 14:20:04 2023 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6579bd94-82f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:0b:6c:d0:b4:01:97:6e:61:d1:c9:b5:3b:
fc:a3:f1:60:50:61:dc:28:16:1e:59:92:7c:97:1d:
4c:3e:87:07:1a:50:09:0b:67:42:06:87:6e:a2:23:
a3:c5:84:fd:4a:3e:6e:82:cc:d1:4c:58:8f:88:da:
b2:4f:5d:b0:d0:d4:f8:78:9c:eb:cf:80:49:aa:53:
5b:a3:83:9a:66:e4:96:e2:fd:c3:4f:35:be:5f:92:
78:50:57:51:9f:6b:ce:04:f8:9b:55:49:dc:01:92:
6e:3a:4c:6e:88:d5:b0:be:c7:95:3b:74:4c:26:03:
cb:f8:3d:dc:d1:f1:8a:98:a0:97:24:e6:45:51:a5:
0c:1d:96:3b:9a:30:0a:bd:b0:c9:f0:de:e0:e3:1a:
5f:2d:06:20:5f:08:c4:67:15:8c:12:80:bd:ff:95:
53:13:44:dd:31:23:4e:ae:14:a9:08:59:cc:6e:8c:
09:96:f7:60:10:9b:f5:d3:9f:1a:f4:18:67:81:29:
fc:b2:c8:4e:ac:70:b1:44:62:7a:05:d9:a3:91:f3:
1b:f8:88:24:d0:22:b0:61:16:d4:63:d6:67:5b:f6:
ab:74:2a:88:f1:a1:89:e2:c4:ee:97:06:0d:7a:c4:
0e:25:df:ed:d4:c9:8f:5f:5a:69:1f:88:50:d2:2a:
48:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:59:51:42:B5:A9:92:1E:E5:20:8A:D3:F1:79:AF:14:95:E5:0E:7D
X509v3 Authority Key Identifier:
keyid:BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/B563B81E99C211EEB5617D55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.102.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:50:58:50:6e:0d:0e:fd:97:a3:53:c6:75:3a:51:00:27:09:
56:a5:9b:31:63:ca:36:f3:70:1d:ea:7f:cc:09:fe:6e:01:01:
6f:85:c6:31:6e:f0:af:33:56:a7:2c:13:a8:83:c7:b2:dd:c4:
7d:78:94:1c:f3:51:64:0e:ad:91:0f:ff:53:fb:93:18:0f:4e:
3d:88:8d:82:24:8d:ba:ed:8a:56:ad:51:c2:f8:f3:67:75:01:
13:9d:6f:9c:32:9e:18:e5:c0:d6:d0:bd:1d:12:2a:a2:b8:6e:
74:35:db:00:4f:8b:49:05:a8:60:84:f7:4f:ad:7b:72:7a:91:
16:8b:c7:05:3a:80:a8:b4:93:8b:60:59:a7:6b:35:93:f5:43:
73:7a:ce:3d:93:15:9d:20:28:0c:59:0a:e3:2e:43:76:0b:d3:
cd:22:b7:9e:46:42:15:7e:cb:dd:fa:9f:8c:62:c1:bf:21:a6:
f6:cb:6b:4e:fc:ce:db:93:6b:47:9f:58:f6:60:b9:8d:f8:fd:
9a:1e:f3:2f:44:c2:08:60:c9:7c:f9:af:90:c8:16:31:b1:ed:
36:19:e7:ab:71:89:65:3d:40:e3:d0:d8:51:b7:44:7e:c0:de:
ea:38:6b:a3:26:85:0a:9c:3d:92:52:e1:f8:fc:12:82:d9:2b:
ea:08:08:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 10:11:20 2024 by rpki-client on console-ams.rpki-client.org