Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/1B093822689B11EFAC345C0FC4F9AE02.roa
File: 1B093822689B11EFAC345C0FC4F9AE02.roa (raw, json)
Hash identifier: jU30tvp8t8o6cNylSRO2Nc2VHqAIXdXSAT3KNgeB/9o=
Subject key identifier: 00:5C:89:45:BE:71:31:C2:61:5E:E1:FA:16:2F:54:8D:AF:8A:56:4F
Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Certificate serial: 0666
Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/1B093822689B11EFAC345C0FC4F9AE02.roa
Signing time: Sun 01 Sep 2024 19:48:05 +0000
ROA not before: Sun 01 Sep 2024 19:48:05 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 36.255.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 12:40:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1638 (0x666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Validity
Not Before: Sep 1 19:48:05 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66d4c4f5-a496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:64:3c:f2:54:4d:70:b4:6b:61:a7:17:c5:27:
74:b4:6d:fa:f4:17:07:60:24:4e:02:73:64:3b:5f:
c9:91:4d:cf:0b:2d:d3:f0:d1:fe:de:84:76:dd:5f:
1b:17:9c:b2:89:59:09:7c:ea:17:7b:33:2c:6a:29:
b5:dd:51:f5:1d:33:e8:e2:86:92:17:84:e1:16:b1:
4a:93:4a:fd:dc:fa:df:3e:7e:52:f7:1e:e0:97:33:
5d:ef:b3:d0:99:0f:87:41:a4:0f:d2:8a:1b:d6:67:
bb:4d:2e:4a:5d:7c:9c:a7:c8:00:e1:e0:32:b2:8f:
51:85:7b:10:01:58:1d:a3:49:45:5d:a5:07:bc:77:
c7:2c:7b:ea:14:e9:a9:22:65:29:b3:c2:6b:ba:24:
3a:ef:ba:0c:d4:48:36:be:a8:b9:80:0d:bb:87:88:
72:d6:cf:34:74:34:06:d4:b2:4e:b0:59:68:78:72:
9c:ea:9f:7c:a6:0e:51:86:53:48:67:59:71:af:ba:
44:c5:be:10:74:7a:9b:64:c5:03:e7:49:42:d7:69:
f6:18:b5:55:5b:02:05:bd:81:d0:b2:29:2b:ef:d8:
b6:ad:d1:29:43:41:2a:7d:c5:56:f2:f7:a3:04:e7:
0f:43:aa:00:8c:68:b3:6a:fe:a0:58:ec:c2:70:bc:
1a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5C:89:45:BE:71:31:C2:61:5E:E1:FA:16:2F:54:8D:AF:8A:56:4F
X509v3 Authority Key Identifier:
keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/1B093822689B11EFAC345C0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.198.0/24
Signature Algorithm: sha256WithRSAEncryption
99:86:d3:c3:b7:bf:ad:97:a4:3f:56:00:e2:15:15:a8:62:de:
c3:1f:8f:15:1d:c1:91:79:96:62:ad:17:56:ee:84:84:1a:40:
ef:48:45:8d:45:48:ea:28:8a:05:50:39:90:44:77:d6:b9:f5:
f0:d4:94:66:6d:ca:f5:97:9e:fe:c3:99:88:4e:df:91:d4:f9:
2f:4e:b9:c0:09:af:de:5a:97:9f:01:44:17:fc:74:bc:3d:42:
24:68:5c:45:0e:e9:c7:17:e5:87:2d:35:a7:90:45:b6:86:47:
04:43:a7:7f:8b:85:39:21:24:c3:5b:bd:4c:d5:b4:71:24:d7:
b0:db:ae:d9:a6:e9:55:33:bb:dd:e8:10:d8:13:24:c2:ea:ce:
3b:b0:dd:e4:2b:51:4f:93:dd:81:48:5b:f5:df:24:aa:77:eb:
24:b5:30:db:59:41:29:a4:77:f6:f3:14:b9:2d:68:b7:1f:ea:
c5:f0:23:77:47:65:b9:fb:ec:32:61:6e:02:fe:ee:47:5c:fb:
c4:31:53:65:e0:d8:18:00:62:26:d8:91:57:4b:d4:5a:0b:82:
6f:f1:3e:4c:59:61:42:12:75:0e:ac:d1:84:2c:c4:46:9d:43:
11:67:85:a5:6d:df:ed:12:e1:54:84:38:86:97:c5:3f:2b:df:
7d:3b:97:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 16:29:51 2024 by rpki-client on console-ams.rpki-client.org