Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/92ADB278AAC211EE990B9157C4F9AE02.roa
File: 92ADB278AAC211EE990B9157C4F9AE02.roa (raw, json)
Hash identifier: J7FrBKDSatHFM1wi4akmWTY/3VFRBw1gK8JHALHC6vc=
Subject key identifier: C4:87:13:5F:4A:D0:69:78:C2:6A:0D:6E:09:23:E6:27:8F:27:0D:F3
Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Certificate serial: 19
Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/92ADB278AAC211EE990B9157C4F9AE02.roa
Signing time: Thu 04 Jan 2024 05:36:45 +0000
ROA not before: Thu 04 Jan 2024 05:36:45 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 152300
IP address blocks: 36.50.240.0/23 maxlen: 23
36.50.240.0/24 maxlen: 24
36.50.241.0/24 maxlen: 24
2001:df3:5240::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 Jan 2024 19:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Validity
Not Before: Jan 4 05:36:45 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=659643ec-c8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:91:aa:cb:f2:11:6f:30:a6:27:45:1f:b1:a1:
0b:a9:a4:bd:7d:16:45:e6:b6:cd:11:4d:e6:2d:d2:
68:ac:60:79:6e:72:f7:09:02:a2:a8:a2:3a:d3:fc:
ed:3b:94:22:81:fb:21:81:44:74:fe:17:be:ee:54:
29:7d:55:b5:3c:c8:e2:95:dc:db:0b:a9:de:6c:80:
bd:96:d9:60:02:ad:87:5f:5d:b0:18:a8:49:ed:10:
40:16:01:49:8d:b9:db:7a:8a:e4:5c:72:91:b3:04:
0b:c0:17:e6:2e:e0:e0:fa:8d:10:6d:d9:78:79:9a:
0a:38:e5:40:8a:66:c0:f2:00:1c:0a:b6:5a:30:b2:
69:7b:e5:26:f5:fd:ee:de:32:1a:da:bc:d2:86:3d:
c2:0c:5f:3f:45:e7:28:8f:79:1e:b1:df:18:27:47:
eb:a2:a2:18:d8:c8:74:33:c4:67:6d:7c:1a:1e:98:
2c:69:ca:99:90:0e:80:c3:69:ad:70:82:64:68:9e:
ab:2c:37:2f:bb:e5:24:0d:1c:f6:7d:10:09:c1:2f:
6e:ca:b6:36:f0:d5:c4:7a:b8:db:95:62:1f:8b:df:
84:44:d1:c2:cc:3a:83:e8:9f:54:80:84:3d:4b:51:
c7:7e:46:a4:d3:fa:0d:e6:c4:00:56:d9:f7:05:3e:
f5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:87:13:5F:4A:D0:69:78:C2:6A:0D:6E:09:23:E6:27:8F:27:0D:F3
X509v3 Authority Key Identifier:
keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/92ADB278AAC211EE990B9157C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.240.0/23
IPv6:
2001:df3:5240::/48
Signature Algorithm: sha256WithRSAEncryption
a0:c5:56:ae:52:2b:7d:30:f8:41:8d:a5:8b:ec:13:80:b1:9a:
4d:88:38:b1:61:4e:b9:ce:a9:e3:82:f0:6d:2e:e3:18:4e:ca:
df:60:38:46:9f:00:77:35:43:14:83:36:1f:7a:f7:5d:b4:74:
82:8a:9d:4b:2c:81:ae:9e:6f:15:46:09:94:ef:0c:6a:64:13:
bf:54:51:5c:be:97:a4:fc:e7:6a:84:c5:d0:9a:8f:1d:76:28:
91:ae:a3:b2:98:9a:79:41:e7:03:27:67:dd:4b:90:4b:3a:bd:
37:1b:0f:b2:48:28:8b:08:b6:7e:83:ff:9d:b6:1b:20:96:d6:
5b:37:14:3a:6a:30:0c:c1:74:1b:05:00:44:98:36:15:aa:d5:
34:ed:87:f7:63:30:6a:37:f9:11:f4:66:8c:5f:99:ee:69:d6:
0e:9d:6f:47:48:b4:1b:cb:56:09:66:43:97:6a:d1:75:ca:6f:
40:65:d1:d3:29:73:5b:9f:79:02:2b:68:ad:c2:17:dd:2a:e2:
2c:a5:1f:46:55:24:a6:d0:af:3e:3f:ad:48:20:c6:3d:2f:86:
97:35:7b:ce:0f:5f:4f:16:61:2a:0b:47:d5:61:b1:74:d8:af:
33:dc:d8:24:6d:55:8b:1d:46:5c:b8:b0:90:7b:cd:c7:e0:b6:
b9:01:6d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 23:43:59 2024 by rpki-client on console-ams.rpki-client.org