Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/47F3CEE42B9B11EEA94DDC3EC4F9AE02.roa
File: 47F3CEE42B9B11EEA94DDC3EC4F9AE02.roa (raw, json)
Hash identifier: Qo05CMkhWwYZ2NaSFGAGSr71jfIBvJy8NlozeIJ+884=
Subject key identifier: ED:E4:25:C2:83:4B:94:D2:63:22:2A:B1:4C:96:00:2A:4C:45:6F:9A
Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Certificate serial: 0579
Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/47F3CEE42B9B11EEA94DDC3EC4F9AE02.roa
Signing time: Wed 26 Jul 2023 10:00:42 +0000
ROA not before: Wed 26 Jul 2023 10:00:42 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 36.255.197.0/24 maxlen: 24
36.255.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1401 (0x579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Validity
Not Before: Jul 26 10:00:42 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64c0eeca-a897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:ef:51:4d:82:d5:e7:34:8b:38:7d:86:5a:
41:97:74:87:77:0d:c1:e6:e7:7e:b7:55:2e:a1:a4:
3e:32:77:1f:72:96:59:37:d5:ac:e3:b8:5e:d2:f6:
89:95:67:31:9f:31:fb:8f:59:69:64:6c:3e:d0:59:
7a:e1:f9:c9:67:98:67:25:ff:05:f7:6e:7a:d4:41:
75:f1:bc:83:ab:d5:48:a3:57:05:a2:d1:f3:e9:73:
d4:28:c9:22:60:d7:51:c5:3c:26:b7:21:2e:cc:a1:
98:f4:86:be:e0:cb:8e:46:ef:cc:61:9d:f2:df:b8:
23:9b:cc:c4:37:c0:6d:39:85:b2:19:7d:2f:fa:d0:
b2:c8:80:80:03:64:2f:fc:e3:77:0f:3c:c3:98:f0:
0d:6e:9b:fd:7e:c3:24:96:e5:cc:e5:0a:29:71:eb:
5e:5b:9d:1a:1f:64:26:cc:97:61:a5:b6:c8:90:89:
f5:7b:53:f1:f3:d9:ac:aa:c7:94:f3:96:f3:8e:ed:
12:e6:d6:67:1e:38:eb:1a:cd:87:51:9e:de:16:be:
aa:88:1d:cb:56:48:96:00:a7:47:8d:a4:a9:ca:d3:
30:bb:a2:3a:02:82:75:c8:2e:27:cd:f6:5f:ab:23:
ce:83:d1:9b:21:5e:53:7a:e8:ed:74:4e:15:14:8d:
e4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E4:25:C2:83:4B:94:D2:63:22:2A:B1:4C:96:00:2A:4C:45:6F:9A
X509v3 Authority Key Identifier:
keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/47F3CEE42B9B11EEA94DDC3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.197.0/24
36.255.199.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:a2:6c:ed:a7:97:66:d8:49:a2:14:c4:35:63:33:f6:8e:70:
d9:f4:7f:fc:55:ed:1b:3c:78:1a:7f:70:77:ef:2d:5c:52:eb:
d2:bd:60:03:bb:e5:80:88:ae:93:40:20:d2:ad:0c:e4:e6:31:
22:4a:fb:65:0e:92:29:47:e7:8a:22:b5:91:71:46:ed:07:0c:
da:4c:9d:cb:a0:f1:90:ef:5a:34:19:a0:5e:ca:41:e3:fa:34:
cf:dd:93:7a:3b:8e:67:be:36:ba:3e:cf:bc:54:ab:1a:f7:ff:
67:7d:6f:43:e0:20:2c:81:41:33:70:28:5e:65:d4:06:f8:d3:
f4:69:e3:1e:69:6d:6a:4f:bd:3a:1e:72:5f:53:ea:85:4b:76:
25:81:b9:08:99:6b:df:be:9b:b7:d7:b5:af:ac:1f:df:25:ad:
d2:90:0e:c1:f4:e0:96:4d:e4:9a:26:d8:f4:55:af:d7:82:64:
5c:ea:fa:04:c4:60:44:bd:d0:26:21:23:cc:2a:f8:29:ff:7d:
65:0c:3b:5f:13:36:82:3f:3e:6b:96:21:83:c9:c7:d4:cc:6a:
22:e4:04:68:ea:5e:4f:96:ab:20:6f:11:37:80:1a:1f:ac:b6:
75:c1:28:d7:c4:7f:f0:c1:0b:11:35:ec:23:17:c8:2a:09:e5:
97:78:e4:14
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy
QTgxMzZCNTMwHhcNMjMwNzI2MTAwMDQyWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGMwZWVjYS1hODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvYPvUU2C1ec0izh9hlpBl3SHdw3B5ud+t1UuoaQ+MncfcpZZN9Ws47he0vaJ
lWcxnzH7j1lpZGw+0Fl64fnJZ5hnJf8F92561EF18byDq9VIo1cFotHz6XPUKMki
YNdRxTwmtyEuzKGY9Ia+4MuORu/MYZ3y37gjm8zEN8BtOYWyGX0v+tCyyICAA2Qv
/ON3DzzDmPANbpv9fsMkluXM5QopceteW50aH2QmzJdhpbbIkIn1e1Px89msqseU
85bzju0S5tZnHjjrGs2HUZ7eFr6qiB3LVkiWAKdHjaSpytMwu6I6AoJ1yC4nzfZf
qyPOg9GbIV5TeujtdE4VFI3kewIDAQABo4ICmzCCApcwHQYDVR0OBBYEFO3kJcKD
S5TSYyIqsUyWACpMRW+aMB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG
ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh
MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0UxRkUvMzg2MjM1RjA2Rjg4MTFFQkE4NkJGNjRBQzRGOUFFMDIvNDdGM0NFRTQy
QjlCMTFFRUE5NEREQzNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAAk/8UDBAAk/8cwDQYJKoZIhvcNAQELBQADggEBAB2ibO2n
l2bYSaIUxDVjM/aOcNn0f/xV7Rs8eBp/cHfvLVxS69K9YAO75YCIrpNAINKtDOTm
MSJK+2UOkilH54oitZFxRu0HDNpMncug8ZDvWjQZoF7KQeP6NM/dk3o7jme+Nro+
z7xUqxr3/2d9b0PgICyBQTNwKF5l1Ab40/Rp4x5pbWpPvToecl9T6oVLdiWBuQiZ
a9++m7fXta+sH98lrdKQDsH04JZN5Jom2PRVr9eCZFzq+gTEYES90CYhI8wq+Cn/
fWUMO18TNoI/PmuWIYPJx9TMaiLkBGjqXk+WqyBvETeAGh+stnXBKNfEf/DBCxE1
7CMXyCoJ5Zd45BQ=
-----END CERTIFICATE-----
Generated at Sat Aug 5 05:54:29 2023 by rpki-client on console-fra.rpki-client.org