Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/255198C6689E11EFA78E8D27C4F9AE02.roa
File: 255198C6689E11EFA78E8D27C4F9AE02.roa (raw, json)
Hash identifier: KeIljdDhTpWu1EYFj9nJV5YEJ73U3pexWsSeiG7EzcI=
Subject key identifier: 46:84:0D:80:81:90:B2:A0:B8:D5:C7:44:7E:A5:23:76:DF:04:1A:D4
Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Certificate serial: 0669
Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/255198C6689E11EFA78E8D27C4F9AE02.roa
Signing time: Sun 01 Sep 2024 20:09:51 +0000
ROA not before: Sun 01 Sep 2024 20:09:51 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 132335
IP address blocks: 36.255.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 11:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1641 (0x669)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Validity
Not Before: Sep 1 20:09:51 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66d4ca0f-6791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:94:be:98:ec:e1:8f:35:cb:c5:57:8a:e2:da:
9d:0a:21:e6:e2:b1:0f:58:20:0d:cd:33:14:16:6f:
9b:f1:fc:94:1b:12:f3:11:8c:27:56:e7:01:e4:61:
82:fc:3e:dd:7d:9f:a1:e7:d6:a3:30:43:d1:4d:73:
7f:0c:71:1d:ba:4e:59:19:38:55:65:74:1b:82:e5:
7a:4d:e9:3c:a4:28:3a:c8:ca:0a:82:c2:4a:e4:29:
54:a9:f3:3f:fe:f3:d6:3c:13:81:1e:4f:01:0e:40:
c2:d1:63:ec:7f:01:9f:e3:15:be:b5:cc:e6:5c:60:
6c:16:ef:e6:d9:77:e8:28:bb:73:f2:7d:15:12:d1:
f0:6e:31:05:13:c9:eb:ca:da:da:d9:7f:36:8c:0f:
5f:86:0c:af:72:22:ba:8f:29:d7:93:63:28:29:9e:
a4:9a:46:8e:06:cf:ea:1d:ad:d8:37:27:ee:87:d7:
d6:86:5d:8b:23:a9:c9:dd:f2:4d:e2:27:45:8a:7c:
c6:7f:c2:49:69:60:16:6f:ae:10:ca:b2:50:0c:83:
5b:81:ee:90:c5:99:ba:5a:2c:74:77:79:c0:3e:03:
ae:6d:94:76:30:d0:b8:b1:53:40:65:41:ce:f5:61:
ae:22:ac:98:fa:1f:43:bc:e4:68:f4:df:7c:7e:4b:
ba:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:84:0D:80:81:90:B2:A0:B8:D5:C7:44:7E:A5:23:76:DF:04:1A:D4
X509v3 Authority Key Identifier:
keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/255198C6689E11EFA78E8D27C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.197.0/24
Signature Algorithm: sha256WithRSAEncryption
91:0f:fc:5c:0b:98:33:df:ad:48:3a:40:e1:67:59:70:73:a6:
aa:27:fd:83:45:d8:a4:bd:3a:49:d0:f4:b9:17:c6:4f:2a:5f:
4f:6f:81:88:59:e1:ba:17:90:1c:39:39:1e:68:e6:e0:b9:fc:
0f:9a:f8:dd:13:28:8d:7a:79:42:09:33:ce:63:98:3b:3c:c2:
fe:b8:ea:ba:f4:19:32:8b:7d:de:85:c1:ea:27:09:0c:62:ae:
77:63:96:21:cc:a6:5a:28:58:fd:19:5f:bb:d8:78:6c:06:72:
22:5c:03:41:4f:ad:49:5d:32:07:7c:e1:f3:7d:dd:6d:a3:68:
5e:ec:93:fa:fb:ca:01:bc:0d:f0:d7:89:ce:c4:2f:8f:eb:89:
0e:ca:40:2d:d4:34:fc:a5:a3:e7:b9:f7:15:ec:26:24:f5:e2:
44:12:31:c0:d1:a5:dd:22:2c:96:a2:c2:9b:dd:2d:b2:ad:6a:
7e:dc:2a:9e:70:ec:b5:f3:f3:4e:71:c3:b2:b2:54:f6:23:ab:
d9:a6:51:a1:af:47:52:20:0e:34:e3:5f:ca:ff:ad:de:b7:fe:
29:86:15:c4:e0:cc:52:25:f8:3d:c1:1d:4c:30:be:e9:e0:1f:
f4:a2:28:86:84:d5:74:76:1e:2b:aa:17:2f:38:4f:96:c6:e5:
fa:2a:03:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 12:55:52 2024 by rpki-client on console-fra.rpki-client.org