Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/CD251666E84911EE9947A115C4F9AE02.roa
File: CD251666E84911EE9947A115C4F9AE02.roa (raw, json)
Hash identifier: V77qBJ46MbBMYHvpxyG7aYJ07Y0RCSLymDX/RNY4kFg=
Subject key identifier: 70:20:BC:7D:62:A8:59:89:61:C3:D4:F8:D6:A7:5D:0D:A0:8E:C2:CE
Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Certificate serial: 063F
Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/CD251666E84911EE9947A115C4F9AE02.roa
Signing time: Sat 22 Jun 2024 23:57:57 +0000
ROA not before: Sat 22 Jun 2024 23:57:57 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 36.255.197.0/24 maxlen: 24
36.255.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Sep 2024 19:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1599 (0x63f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Validity
Not Before: Jun 22 23:57:57 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66776505-4729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:36:72:61:19:35:c5:80:9c:e5:48:21:84:6e:
32:57:c9:a5:cc:56:8f:74:07:f7:c5:62:43:e4:22:
44:84:73:93:28:fe:3e:f1:39:bb:63:0e:17:79:b4:
fa:cb:54:20:e8:0d:bd:f6:42:75:c1:5d:ed:a3:0a:
6a:2e:0e:c4:86:88:6c:16:2a:69:4c:4a:e9:e0:4e:
44:15:0b:6f:01:64:9a:88:f4:46:47:8e:b2:41:3c:
37:5e:7b:fe:80:97:18:aa:ef:d9:2c:7d:10:f5:7a:
e8:af:60:0f:76:79:25:82:63:d5:c1:f2:b7:8b:0a:
76:8b:9f:6b:38:20:92:3a:57:9a:9a:4d:4a:d3:c4:
4f:21:e6:7f:f7:d4:11:7d:c7:10:cd:43:16:30:b8:
30:7f:64:4d:38:b5:e3:4c:9c:51:6d:7d:6e:f7:46:
e4:5b:2f:78:93:9f:84:5c:c2:80:79:bd:39:63:a8:
51:5d:d6:ce:d3:a4:37:4c:11:13:37:be:7b:dc:89:
d9:ad:ac:e1:9b:47:11:7d:b5:f8:64:c1:ba:e3:74:
96:31:1a:c5:40:5b:ec:ab:96:1e:e0:46:b9:96:8a:
ee:3d:d5:91:91:d1:06:74:d1:e7:42:8c:9b:93:89:
63:0e:85:d9:41:32:29:43:2d:ed:68:ea:00:21:67:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:20:BC:7D:62:A8:59:89:61:C3:D4:F8:D6:A7:5D:0D:A0:8E:C2:CE
X509v3 Authority Key Identifier:
keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/CD251666E84911EE9947A115C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.197.0-36.255.198.255
Signature Algorithm: sha256WithRSAEncryption
79:c6:d6:b3:75:e6:0e:e3:49:88:6d:32:44:3c:fc:0b:df:ea:
25:4f:9b:19:b6:a8:34:68:bf:d3:17:31:19:3d:63:85:9d:93:
0e:5c:41:e0:12:fa:f7:90:5e:80:da:b9:74:50:2c:97:e1:8e:
be:eb:33:11:5a:4f:62:bb:c5:63:43:c5:eb:2a:87:8e:de:8a:
25:c6:fc:9d:67:34:0e:f1:fe:f1:19:98:19:45:3f:fd:7a:04:
fc:97:d8:32:7e:a8:c0:3e:67:3d:28:72:6b:da:c8:1b:89:37:
36:f0:13:91:a5:3a:37:24:d5:55:80:9b:d0:74:da:ef:b7:d2:
c1:f1:96:da:eb:50:db:df:10:9c:fa:d9:f5:bc:74:70:cf:bb:
3f:f7:a6:dc:d7:e1:9b:a5:d3:96:53:e3:69:ab:5f:26:73:0b:
6f:12:d3:8c:8d:e9:d5:95:fe:8d:6e:f8:41:5c:11:4a:48:9a:
e2:4d:2e:99:f6:67:5e:f1:f4:80:a2:73:70:43:d7:36:50:b2:
8a:a4:15:32:e9:9b:2a:51:c8:3c:7f:ad:68:3c:f2:de:1b:d2:
fa:28:0e:20:b2:77:e8:e8:48:74:af:ec:98:f7:97:1b:56:cf:
12:e5:00:3c:95:de:4e:7f:9d:86:46:f9:0c:c2:67:06:aa:2a:
8f:6b:e0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 21:03:44 2024 by rpki-client on console-fra.rpki-client.org