Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/13A51C2EA4C711EEABBD0D5AC4F9AE02.roa
File: 13A51C2EA4C711EEABBD0D5AC4F9AE02.roa (raw, json)
Hash identifier: bnI4qUqs8lUYSkGrzCL9aFeq/tK0TAYh4XJEfXbqQtM=
Subject key identifier: 04:1F:0A:2B:B9:72:E6:FD:2B:87:30:59:80:52:D5:D9:DF:32:92:E5
Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Certificate serial: 0B
Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/13A51C2EA4C711EEABBD0D5AC4F9AE02.roa
Signing time: Thu 28 Dec 2023 06:12:06 +0000
ROA not before: Thu 28 Dec 2023 06:12:06 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 137707
IP address blocks: 36.50.240.0/23 maxlen: 23
36.50.240.0/24 maxlen: 24
36.50.241.0/24 maxlen: 24
2001:df3:5240::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Validity
Not Before: Dec 28 06:12:06 2023 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=658d11b6-3202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:5d:e4:c9:e3:93:c7:2e:dc:f6:1e:2a:47:
77:53:1c:a4:39:1c:59:e1:83:8b:18:89:bf:c4:eb:
65:ae:36:fe:0f:c3:fc:1b:d5:da:b7:b7:56:40:db:
3d:9d:54:01:c5:51:44:4e:6b:6c:88:d6:34:0a:42:
7e:e8:41:2a:07:54:fb:b6:47:cf:a6:98:48:22:90:
55:ae:25:82:d6:fa:99:58:04:58:ff:49:2c:d4:88:
f9:10:d5:80:ba:ae:84:02:9e:67:7c:aa:ff:91:b9:
27:1d:12:56:6c:f4:0a:90:e1:87:e5:77:fa:6e:ef:
7e:ea:5f:0e:08:3d:57:81:bd:6e:f9:a0:e3:87:86:
f2:4a:70:16:55:bc:ca:05:8e:a2:96:ba:ee:b7:ac:
2f:81:a7:52:42:1f:c0:1b:be:38:50:3a:fe:c9:28:
c7:f6:1d:b8:f3:ea:79:48:83:e1:60:0d:14:bd:38:
ab:d8:19:47:e6:d1:c6:bc:b8:fe:e2:b7:7b:45:f0:
eb:d8:29:00:90:da:fa:1d:b3:85:8c:4f:7c:7c:cf:
e5:1f:03:da:ad:42:5a:11:dc:2d:4c:76:72:bf:0d:
f6:fd:52:af:76:95:12:ff:05:5b:0b:9e:71:bd:6b:
fc:8c:eb:50:f6:23:a6:c4:d4:2d:d0:bf:d9:c6:ae:
86:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1F:0A:2B:B9:72:E6:FD:2B:87:30:59:80:52:D5:D9:DF:32:92:E5
X509v3 Authority Key Identifier:
keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/13A51C2EA4C711EEABBD0D5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.240.0/23
IPv6:
2001:df3:5240::/48
Signature Algorithm: sha256WithRSAEncryption
9d:ef:c8:e9:62:86:df:8e:2b:6c:11:ff:21:da:d0:b7:6e:63:
55:88:2b:d1:81:c7:7b:c1:49:ce:46:10:b2:b2:29:fe:3c:bd:
59:df:89:d6:b7:3e:8e:16:e7:30:a3:38:7a:dc:4c:ac:62:d5:
1f:0c:4e:0f:a9:59:5a:8a:87:ed:40:ab:43:9f:b0:ed:85:e5:
48:e3:98:99:1a:f1:a6:05:6c:15:bf:8d:87:30:2d:78:31:dd:
69:48:5b:f3:a9:21:3c:9b:5e:1d:07:89:7e:68:71:60:69:8c:
21:6d:2a:19:48:2c:3e:6a:e5:d8:cb:1b:91:6e:dc:ec:e8:08:
8a:5d:7a:b8:7d:da:e6:06:b3:68:66:18:65:f6:73:79:2c:45:
ff:d4:f9:5b:ed:af:60:46:5d:20:5c:27:b2:d7:51:df:51:a7:
34:9e:9d:33:4d:47:d1:0b:0b:d9:a3:98:37:f3:92:3a:1b:d9:
cf:1e:ff:92:95:74:81:f4:db:b8:aa:32:d6:98:79:84:b4:95:
3f:15:d2:b0:a3:9c:b6:ab:9f:4c:4a:6b:08:3a:48:f5:aa:00:
53:d9:ab:1d:b9:0d:86:1e:11:19:a8:ec:94:e4:3a:ab:9c:85:
b2:20:fd:e4:56:a7:a5:22:cc:8a:d8:4a:71:3e:f7:ae:0a:7c:
78:82:1f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 6 17:49:09 2024 by rpki-client on console-ams.rpki-client.org