Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/60CD2DFCF1F711EE8B846286C4F9AE02.roa
File: 60CD2DFCF1F711EE8B846286C4F9AE02.roa (raw, json)
Hash identifier: cRh9QATHNWoB5/lHho5+bjLSPCI1Dme+M8wS/1GsA+I=
Subject key identifier: 77:D2:EC:69:69:9D:39:59:C3:CE:6C:74:A3:BF:DF:32:37:AF:08:55
Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Certificate serial: 59
Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/60CD2DFCF1F711EE8B846286C4F9AE02.roa
Signing time: Wed 03 Apr 2024 20:31:22 +0000
ROA not before: Wed 03 Apr 2024 20:31:22 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 137707
IP address blocks: 36.50.240.0/23 maxlen: 31
2001:df3:5240::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Apr 2024 18:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Validity
Not Before: Apr 3 20:31:22 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=660dbc9a-c0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3a:c9:44:44:72:2e:dc:94:70:f9:80:c2:00:
33:16:3e:5a:7b:64:19:8b:1a:8d:b7:fa:ba:e5:e7:
df:36:e8:1c:f4:0b:c1:d4:cf:27:dc:e4:c8:0c:36:
78:83:ce:49:ab:67:7a:49:3b:12:52:ee:f0:14:83:
95:88:b9:70:7c:1e:13:e6:b5:6a:37:0c:e7:5c:5b:
94:76:1b:25:da:71:5a:b9:5b:b8:c7:1b:53:1d:91:
8c:31:aa:ca:68:a5:5e:23:c7:5f:79:8b:8d:d5:e9:
4c:4a:2d:8c:ac:41:b2:4d:5e:13:9b:5f:5f:b9:71:
43:91:2b:eb:9d:b7:78:43:4b:38:54:1c:72:13:9a:
7b:a7:b3:c9:ad:6e:83:fd:2d:d2:7e:f1:63:94:62:
13:8c:7b:e6:f5:1e:43:5f:09:18:21:58:fc:52:ed:
0d:db:7e:51:ec:40:a3:c9:25:1b:45:e0:65:74:54:
59:98:d4:0e:41:10:a5:bd:6f:b4:34:fc:b8:1f:a3:
31:20:ac:5e:90:3f:9e:90:c1:a9:e7:06:3d:24:9b:
7a:63:bc:23:da:c4:fd:b2:6a:d2:88:01:f9:8d:82:
03:4e:77:b1:58:a1:d4:c5:e1:b6:02:ac:f9:44:9a:
3a:9b:5c:32:60:f5:f4:e1:0e:66:35:d7:2c:76:e8:
54:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D2:EC:69:69:9D:39:59:C3:CE:6C:74:A3:BF:DF:32:37:AF:08:55
X509v3 Authority Key Identifier:
keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/60CD2DFCF1F711EE8B846286C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.240.0/23
IPv6:
2001:df3:5240::/48
Signature Algorithm: sha256WithRSAEncryption
bf:ce:00:c4:da:58:fd:19:6b:48:20:58:20:1a:45:0d:c3:62:
f1:12:99:08:ed:05:58:d7:2e:63:71:16:c3:cd:80:10:df:ef:
c6:48:ff:c2:73:35:00:18:1a:41:08:9d:9d:b5:0f:1d:b1:14:
aa:3a:2b:c5:81:06:a1:f3:b9:bf:61:15:aa:b4:d7:f8:f7:24:
50:54:e5:0a:7d:df:29:7f:a2:d1:0b:40:40:71:d7:ac:c9:a1:
ea:ac:50:9e:9c:d8:4c:17:d8:03:82:b0:0d:48:43:a8:ef:77:
19:d3:36:d2:70:f2:25:5c:5d:d3:84:7a:d5:8c:44:9d:0f:1d:
cd:50:8f:13:a9:c4:ab:4c:df:a1:53:d1:1d:e6:26:d2:ca:7b:
ca:d1:54:45:ac:fb:e2:e4:0b:e7:7f:40:39:42:83:b3:bf:e8:
13:98:99:dc:52:1a:02:27:45:92:dc:40:fd:cd:de:5c:55:80:
c8:d8:2c:2d:3e:d3:16:9c:ba:d9:d9:b5:ed:ea:3e:c2:4b:34:
51:b8:97:97:ea:13:70:ca:23:48:f8:f6:d5:ea:f3:0a:6d:35:
59:d4:38:98:ee:06:d8:82:f1:37:a8:44:09:1d:b0:6a:b0:16:
a0:2e:82:ed:7e:4f:f5:73:e9:a0:44:72:f7:55:db:c5:4a:c0:
40:d9:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 20:32:43 2024 by rpki-client on console-fra.rpki-client.org