Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/F63F540CF50111EEBE68621AC4F9AE02.roa
File: F63F540CF50111EEBE68621AC4F9AE02.roa (raw, json)
Hash identifier: ocUuw4gZ/6dwSG83Eute17iabgCpCqxbpt6wgMcqY/Q=
Subject key identifier: 52:D2:2E:FC:A7:6A:19:4C:A0:EB:07:C2:93:76:DC:4A:23:D3:C1:77
Certificate issuer: /CN=A91542DD/serialNumber=1C80F9D577EDC4603520314A17A45CB6A7C5C160
Certificate serial: 0C08
Authority key identifier: 1C:80:F9:D5:77:ED:C4:60:35:20:31:4A:17:A4:5C:B6:A7:C5:C1:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HID51XftxGA1IDFKF6RctqfFwWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/F63F540CF50111EEBE68621AC4F9AE02.roa
Signing time: Sun 07 Apr 2024 17:12:07 +0000
ROA not before: Sun 07 Apr 2024 17:12:07 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 7922
IP address blocks: 36.255.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 19:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3080 (0xc08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91542DD/serialNumber=1C80F9D577EDC4603520314A17A45CB6A7C5C160
Validity
Not Before: Apr 7 17:12:07 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6612d3e7-665e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:ef:3e:16:5e:df:50:79:97:fa:f1:36:4b:
43:cb:7b:46:3a:82:d0:55:25:36:11:41:94:fc:3b:
16:54:3b:7b:4f:1f:35:3a:cf:a5:4b:de:e4:9a:90:
2c:d7:56:30:7d:07:2a:6d:3a:f8:0e:eb:ea:56:27:
2c:0c:22:b8:a1:a1:cd:8d:7f:99:55:3e:69:87:09:
87:67:55:16:9a:ad:3d:17:a2:93:04:f2:66:65:2e:
c0:0e:45:aa:29:b7:2f:c7:05:b1:c5:d0:e7:8d:d3:
de:92:f8:7f:6d:c9:7e:a4:ef:93:56:db:4b:63:18:
6f:88:47:c2:7f:8b:a5:08:fc:b3:24:57:0b:c1:89:
00:2d:6e:3a:6e:89:46:2c:4f:a0:1b:d6:d4:27:e2:
43:00:be:20:12:fe:d2:90:9f:53:b4:7a:b3:0e:f8:
10:6b:69:75:c3:be:33:f7:80:a9:44:2c:02:23:a5:
32:f1:7e:d1:87:8f:be:4b:92:13:91:0c:54:8f:fe:
8e:83:b8:5d:51:88:8f:49:d8:b2:72:62:c9:ff:97:
e9:0c:5e:bf:6a:4b:08:87:73:3d:35:fe:d3:b3:1f:
70:2a:9e:3a:8a:56:23:75:51:c7:23:6f:98:16:c0:
d6:a9:53:74:27:26:86:7a:9f:d8:55:87:4d:d2:83:
59:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D2:2E:FC:A7:6A:19:4C:A0:EB:07:C2:93:76:DC:4A:23:D3:C1:77
X509v3 Authority Key Identifier:
keyid:1C:80:F9:D5:77:ED:C4:60:35:20:31:4A:17:A4:5C:B6:A7:C5:C1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HID51XftxGA1IDFKF6RctqfFwWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/F63F540CF50111EEBE68621AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.213.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b4:96:a7:c8:42:f0:8a:d9:d0:0f:5b:b7:da:70:5c:01:04:
96:a5:2b:ca:e1:bb:1c:29:ee:5b:99:8e:f4:24:9b:59:07:90:
74:2d:1f:8b:6b:50:1a:f0:5a:dc:3f:ca:22:57:b8:c6:9c:9d:
55:75:cb:c8:9c:af:af:de:f6:69:f8:4d:30:04:cc:e3:0b:f1:
a3:45:32:48:c1:30:01:ad:e0:b6:b1:25:fa:47:26:c0:35:ad:
4e:74:92:a2:f5:d8:fb:e6:51:b6:b9:10:3a:74:2c:59:ac:f4:
e7:42:8e:99:63:a5:0b:f4:94:99:59:6f:c4:80:30:94:ed:ad:
e8:18:2c:6c:14:3f:ae:59:b6:e6:17:a2:d7:0d:7c:2f:b2:be:
ad:96:c5:bd:71:37:f8:92:28:de:84:16:7e:97:3d:d6:06:dd:
71:d5:aa:c5:9b:13:31:71:c7:49:af:3a:56:2e:5a:4a:d4:95:
4f:5e:ed:ec:8e:d3:5b:4c:04:69:92:f9:05:c1:4f:d3:0c:d5:
51:2b:c2:e6:74:16:2e:cb:09:bb:c1:0f:ec:b3:26:db:c2:22:
bf:39:63:ba:8b:69:29:9b:8e:73:be:53:c7:1c:0c:01:9e:5d:
9b:4a:64:92:e1:6a:4d:b6:e3:a2:35:95:d5:11:51:91:5d:bc:
61:9a:33:f3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQyREQxMTAvBgNVBAUTKDFDODBGOUQ1NzdFREM0NjAzNTIwMzE0QTE3QTQ1Q0I2
QTdDNUMxNjAwHhcNMjQwNDA3MTcxMjA3WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjEyZDNlNy02NjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArtTvPhZe31B5l/rxNktDy3tGOoLQVSU2EUGU/DsWVDt7Tx81Os+lS97kmpAs
11YwfQcqbTr4DuvqVicsDCK4oaHNjX+ZVT5phwmHZ1UWmq09F6KTBPJmZS7ADkWq
KbcvxwWxxdDnjdPekvh/bcl+pO+TVttLYxhviEfCf4ulCPyzJFcLwYkALW46bolG
LE+gG9bUJ+JDAL4gEv7SkJ9TtHqzDvgQa2l1w74z94CpRCwCI6Uy8X7Rh4++S5IT
kQxUj/6Og7hdUYiPSdiycmLJ/5fpDF6/aksIh3M9Nf7Tsx9wKp46ilYjdVHHI2+Y
FsDWqVN0JyaGep/YVYdN0oNZ8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFFLSLvyn
ahlMoOsHwpN23Eoj08F3MB8GA1UdIwQYMBaAFByA+dV37cRgNSAxShekXLanxcFg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDJERC85Mzk3OTc0NkU2
NEQxMUU5OEExODg1N0JDNEY5QUUwMi9ISUQ1MVhmdHhHQTFJREZLRjZSY3RxZkZ3
V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hJRDUxWGZ0eEdBMUlERktGNlJjdHFmRndXQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTQyREQvOTM5Nzk3NDZFNjREMTFFOThBMTg4NTdCQzRGOUFFMDIvRjYzRjU0MENG
NTAxMTFFRUJFNjg2MjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAk/9UwDQYJKoZIhvcNAQELBQADggEBAE20lqfIQvCK2dAP
W7facFwBBJalK8rhuxwp7luZjvQkm1kHkHQtH4trUBrwWtw/yiJXuMacnVV1y8ic
r6/e9mn4TTAEzOML8aNFMkjBMAGt4LaxJfpHJsA1rU50kqL12PvmUba5EDp0LFms
9OdCjpljpQv0lJlZb8SAMJTtregYLGwUP65ZtuYXotcNfC+yvq2Wxb1xN/iSKN6E
Fn6XPdYG3XHVqsWbEzFxx0mvOlYuWkrUlU9e7eyO01tMBGmS+QXBT9MM1VErwuZ0
Fi7LCbvBD+yzJtvCIr85Y7qLaSmbjnO+U8ccDAGeXZtKZJLhak2246I1ldURUZFd
vGGaM/M=
-----END CERTIFICATE-----
Generated at Thu May 2 21:31:56 2024 by rpki-client on console-fra.rpki-client.org