Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/4E3C6E2CA7E411ED9ECBE345C4F9AE02.roa
File: 4E3C6E2CA7E411ED9ECBE345C4F9AE02.roa (raw, json)
Hash identifier: skkfengjXyPotpSpcTs6esd4yXndDcEHaAOzG+7QW5k=
Subject key identifier: BD:1F:E7:9A:8F:27:96:1B:5A:B8:67:E3:98:0A:94:56:15:93:B7:45
Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Certificate serial: 050C
Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/4E3C6E2CA7E411ED9ECBE345C4F9AE02.roa
Signing time: Wed 08 Feb 2023 19:10:53 +0000
ROA not before: Wed 08 Feb 2023 19:10:53 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 134475
IP address blocks: 36.255.197.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1292 (0x50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Validity
Not Before: Feb 8 19:10:53 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63e3f3bc-375f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:2e:31:84:41:6a:97:b9:73:09:5a:68:86:
f1:16:25:ce:ff:5b:01:95:a2:fa:0e:83:ea:26:8b:
c0:a6:25:be:84:64:d3:d8:8f:3d:ff:cd:f9:d3:c4:
c2:93:a2:7a:a9:8b:35:79:2f:f8:a7:b1:67:15:6f:
f4:09:b9:85:ea:b0:eb:d1:e2:73:33:ef:c0:4e:3c:
7a:73:4e:e7:90:ab:72:18:3a:2b:00:3c:0f:35:14:
3a:e2:a5:57:95:e0:9a:d3:b3:49:3d:cd:14:f6:97:
95:fc:c8:ae:b8:fd:e8:2d:76:90:69:59:80:ef:c5:
24:9d:90:da:b6:21:da:7c:5e:26:03:74:e4:e6:c4:
0c:52:13:5a:b4:83:22:1a:a2:79:63:9b:b7:83:4b:
e9:24:5a:4b:bd:c7:4e:ed:5d:8f:0f:aa:7f:a7:d2:
9a:14:ef:12:94:87:8c:fd:99:f5:59:73:2c:d3:dd:
d6:f5:59:9c:cf:91:ed:ca:49:75:42:88:09:9c:8f:
43:2b:bf:99:27:9b:32:68:3e:b9:92:0e:17:bb:e5:
83:3f:26:00:85:33:05:8a:79:e1:12:4d:f3:32:a8:
15:25:23:0c:e8:99:95:75:b1:c5:48:44:1e:53:e0:
49:8b:b5:dc:6d:88:d6:35:16:80:0c:ab:56:f0:ab:
79:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1F:E7:9A:8F:27:96:1B:5A:B8:67:E3:98:0A:94:56:15:93:B7:45
X509v3 Authority Key Identifier:
keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/4E3C6E2CA7E411ED9ECBE345C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.197.0/24
Signature Algorithm: sha256WithRSAEncryption
90:4b:00:ff:13:d4:39:e2:70:05:04:55:3a:ce:d4:9e:1b:96:
ae:5a:1e:12:c5:1a:ba:e9:0e:ac:b5:27:45:5e:dc:44:8a:dd:
53:59:2a:ad:e6:41:03:f1:79:b0:ea:48:70:2c:62:af:b9:16:
bf:2c:15:39:3a:97:2f:0b:3e:8f:b2:06:fb:92:47:94:2c:04:
8b:f1:16:e9:54:58:ae:ec:3a:12:98:ce:33:4e:e4:de:30:17:
6e:de:9e:e0:9e:5c:96:f6:bd:ac:f5:75:7d:b1:25:81:21:8e:
e2:a1:ba:4d:e7:48:35:af:5a:e8:ec:59:ae:c5:8d:30:ac:78:
4d:99:b5:c5:3a:3b:ea:3a:4e:f1:de:6a:d0:ba:8e:43:c9:07:
b4:e6:ba:cf:5d:a4:31:22:ab:da:ab:99:17:4d:34:2e:01:ec:
9f:e3:3c:33:56:7a:ca:e1:1d:25:fe:9b:e8:ef:42:47:b8:57:
ce:c3:25:7a:53:16:a1:bf:c2:ff:b5:dd:cf:da:3e:aa:b8:61:
29:40:a5:01:2f:ea:ff:1b:54:ab:20:30:39:78:e8:45:11:f8:
cd:cf:3d:b2:93:f4:6c:69:2c:11:3c:b5:a7:67:50:86:bd:31:
ea:63:20:d6:25:8f:b9:94:57:d6:72:c8:33:f3:62:33:6a:af:
1f:49:50:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-ams.rpki-client.org