Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/C12060F069E011EFA2747F75C4F9AE02.roa
File: C12060F069E011EFA2747F75C4F9AE02.roa (raw, json)
Hash identifier: hEGIRvv9zceuFmyOgNKASsi3YwX27pXIhModrxSjQqA=
Subject key identifier: D9:53:03:C3:1A:45:CF:06:CC:39:7A:B0:B7:7F:D9:AE:EE:83:B2:BD
Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Certificate serial: 066D
Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/C12060F069E011EFA2747F75C4F9AE02.roa
Signing time: Tue 03 Sep 2024 10:39:11 +0000
ROA not before: Tue 03 Sep 2024 10:39:11 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 140641
IP address blocks: 36.255.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 05:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1645 (0x66d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Validity
Not Before: Sep 3 10:39:11 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66d6e74e-15bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:70:76:83:09:2c:4b:90:df:b2:80:e2:2c:
8c:d8:7f:11:c6:62:a1:b4:3f:81:6b:c2:ab:79:bb:
01:8b:69:47:96:0a:34:fa:aa:6a:63:cd:15:14:09:
0b:62:13:db:bc:54:68:c1:f2:c7:6b:30:ee:6b:37:
88:0b:f7:80:3b:44:3e:1b:f5:64:6f:51:89:ed:b3:
61:bf:ff:60:aa:e5:47:74:c8:bf:11:37:15:ff:e9:
ce:98:c0:24:52:d6:a1:aa:de:cb:8b:10:1a:e6:c2:
e0:05:9d:da:d7:86:73:e3:23:52:e9:78:8c:0e:0c:
21:e3:d5:29:73:a2:d7:31:27:b4:67:05:95:e7:79:
54:61:0a:f7:2a:4b:28:26:59:ea:ef:d5:58:c5:5b:
8a:63:dc:b1:fc:a0:aa:80:47:c5:c6:81:5f:5d:f3:
ef:83:a2:b8:a2:f9:6d:83:68:98:48:68:6b:f3:dc:
0c:0a:c2:ad:f5:37:59:a2:3b:49:5b:92:c6:fb:5c:
2b:d3:ee:c5:97:47:f0:2e:18:84:dd:89:1b:22:88:
67:f3:cd:19:4f:76:13:05:e8:67:6e:37:68:bd:ce:
88:0a:76:c4:eb:63:6b:04:99:65:1a:3a:34:e7:4d:
c0:16:b9:00:52:ae:60:71:90:00:f3:45:8a:5f:17:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:53:03:C3:1A:45:CF:06:CC:39:7A:B0:B7:7F:D9:AE:EE:83:B2:BD
X509v3 Authority Key Identifier:
keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/C12060F069E011EFA2747F75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.197.0/24
Signature Algorithm: sha256WithRSAEncryption
26:37:fc:28:d9:b4:a3:ec:7f:8e:60:6e:08:e8:29:4a:4d:0e:
e9:dd:34:65:a5:ca:a9:a4:dc:ad:a0:42:0b:54:d5:da:6b:b7:
d9:6a:d6:7c:48:51:21:e6:23:d0:34:1b:78:b8:c6:ee:5f:1f:
38:bc:d5:95:44:2d:8d:35:48:d2:12:e6:da:f7:6d:91:0f:44:
c6:9d:da:61:a1:20:5a:7c:0e:d6:ac:6e:1d:01:2b:1e:de:3b:
b3:19:8a:f4:1f:23:31:1f:b2:a2:96:7e:20:b4:63:91:36:1b:
cc:29:69:28:ae:e3:94:34:c3:4c:0b:c7:e3:06:1e:c1:89:f9:
f4:14:2d:a5:6a:44:ee:b7:ec:56:93:8a:e0:05:25:15:34:d8:
b3:d4:4c:d4:5c:2c:39:35:40:9f:32:97:4b:dd:c3:82:28:08:
e4:4b:b5:02:22:b5:af:a2:b0:0f:e5:58:ac:e4:e6:0c:70:e8:
91:ed:d6:9f:4e:cb:4b:d2:01:95:73:8b:c7:69:f3:79:98:39:
50:67:9d:9d:0b:2a:74:95:2b:12:72:1b:0e:47:cf:14:d1:25:
98:c1:65:ea:dc:13:ba:cc:dc:a0:94:cb:82:c8:51:6d:9c:8b:
82:ef:18:3b:28:7f:71:79:96:d3:6e:70:aa:92:1c:67:6d:b5:
64:e9:ed:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 08:09:25 2024 by rpki-client on console-ams.rpki-client.org