Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/AC6AF97ABFBF11EEAA5AC736C4F9AE02.roa
File: AC6AF97ABFBF11EEAA5AC736C4F9AE02.roa (raw, json)
Hash identifier: xZnRQuGmH+tPK553xhJr/YwZYByUzuaoNBPGfXz/s1A=
Subject key identifier: C5:4A:53:7A:B5:01:CE:1A:C5:36:14:7C:39:30:8D:F9:5A:70:B9:FC
Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
Certificate serial: 2581
Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/AC6AF97ABFBF11EEAA5AC736C4F9AE02.roa
Signing time: Tue 30 Apr 2024 16:23:08 +0000
ROA not before: Tue 30 Apr 2024 16:23:08 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 63944
IP address blocks: 150.107.50.0/24 maxlen: 24
150.107.51.0/24 maxlen: 24
2400:eb80::/33 maxlen: 33
2400:eb80:8000::/33 maxlen: 33
Validation: Failed, certificate revoked on Tue 29 Oct 2024 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9601 (0x2581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
Validity
Not Before: Apr 30 16:23:08 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66311aec-9299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:77:dd:3f:93:01:13:c6:12:ed:42:0d:ed:71:
06:3a:1f:07:9b:ad:70:cc:7a:2f:56:b4:7c:02:55:
02:5d:6b:e5:9f:9e:16:99:78:ef:ac:70:6a:ef:15:
ed:a4:20:e8:92:c9:c0:0e:b0:3b:40:4f:8e:01:74:
ef:86:21:9d:d1:a1:a5:5b:bc:d8:b3:db:bb:fb:8a:
cb:83:b2:d9:19:79:bd:72:82:f6:b5:b3:4b:d3:47:
c0:f2:03:7b:50:4c:3a:a7:52:ae:d2:c1:93:1a:a7:
c4:b2:24:cf:16:7f:c8:fc:96:cd:d5:6b:a8:30:04:
cf:dc:90:40:4f:74:d4:e2:d8:c8:dd:86:6c:a4:36:
e0:46:7d:4c:5c:a0:38:0e:92:f8:3f:6f:7e:e3:94:
d5:72:7a:4e:a1:99:0f:2f:3b:6f:88:34:bc:7c:34:
b4:92:27:78:b4:94:b8:ce:e2:2d:a0:7a:68:7a:da:
aa:05:71:55:41:d4:01:3c:b5:94:f8:92:e9:70:dc:
81:d4:45:1c:87:a5:42:7b:94:03:ab:09:86:80:4d:
76:70:4b:7d:db:8d:f9:4d:a2:4d:aa:33:ab:59:d7:
6f:3c:28:ea:8d:ff:61:39:05:6b:b0:0f:b1:bc:32:
ff:6b:79:51:25:6c:fd:75:91:50:4f:e3:14:fd:3b:
b2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4A:53:7A:B5:01:CE:1A:C5:36:14:7C:39:30:8D:F9:5A:70:B9:FC
X509v3 Authority Key Identifier:
keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/AC6AF97ABFBF11EEAA5AC736C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
150.107.50.0/23
IPv6:
2400:eb80::/32
Signature Algorithm: sha256WithRSAEncryption
2f:dd:cf:79:30:1e:59:23:f7:6a:18:75:bf:fe:fb:58:8d:96:
f9:b1:52:b5:b5:b5:47:2a:31:3c:88:df:da:1a:47:be:36:34:
0a:31:88:76:c2:c1:2d:74:cc:37:40:c7:39:2f:fa:2a:22:3b:
77:8b:d3:51:71:09:77:3c:12:f0:e3:1e:27:35:bd:a7:e9:ca:
d8:81:a7:9a:49:dc:24:ef:d6:23:af:ed:d2:48:3c:74:b7:19:
73:25:e7:c6:10:6e:46:58:fe:4a:f9:81:0a:e3:d0:3d:e8:78:
8d:40:e3:b9:2e:7f:a0:a9:9f:e6:40:77:b5:8a:b9:e5:23:5b:
a7:77:eb:2e:a4:9d:c8:8b:1d:12:71:e0:06:00:e9:33:c7:ce:
20:fe:5e:40:52:45:86:7b:be:df:fa:f5:cc:25:1b:5d:a8:a4:
c2:7c:47:bc:5c:68:48:2c:a1:bc:65:cf:c1:9e:45:56:14:48:
e7:7d:99:55:37:84:db:1f:f8:97:8d:61:aa:22:e6:4b:c5:4c:
62:db:b1:d9:ec:14:53:95:fe:dc:24:27:5c:9f:1f:2f:9c:48:
c1:a1:89:a2:9e:6f:9c:6f:62:25:39:e3:d7:f9:e1:9c:e7:41:
53:20:11:6d:d0:4c:86:7a:8c:c5:f0:6a:19:b2:88:a1:d8:dc:
e5:dc:3d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 09:20:38 2024 by rpki-client on console-fra.rpki-client.org