Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/16F9560A722411ED93665911C4F9AE02.roa
File: 16F9560A722411ED93665911C4F9AE02.roa (raw, json)
Hash identifier: Ccf7VOehi+N8t3QMWP/CBUBn1xmXT5wLi+g9YRt8Gs4=
Subject key identifier: 48:0D:18:9C:B1:AF:1C:05:87:3E:F2:10:E5:1F:8D:2A:37:7B:6E:D7
Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Certificate serial: 054D
Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/16F9560A722411ED93665911C4F9AE02.roa
Signing time: Wed 31 May 2023 01:28:49 +0000
ROA not before: Wed 31 May 2023 01:28:49 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 36.255.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1357 (0x54d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Validity
Not Before: May 31 01:28:49 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6476a2d1-a87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:14:16:f5:a8:00:d3:3d:ff:29:ec:80:8a:
86:c0:42:2f:f3:7c:8c:d6:8a:7e:af:ba:a8:3d:94:
9a:ca:c8:2b:59:d3:b8:19:3b:80:e9:41:34:d2:92:
09:72:b3:27:c2:bd:a2:fb:23:76:16:e1:95:da:3a:
d5:b8:1d:d0:3a:8e:98:d6:e7:22:6f:6a:b4:0b:bb:
8e:f7:60:59:23:c1:23:e6:c9:02:21:f6:83:de:00:
75:6b:a7:88:5c:a3:6a:13:7b:88:25:6a:85:5c:b0:
c1:fa:2d:2f:de:86:d4:75:5f:4c:d1:36:23:43:c6:
d6:f4:d3:6f:00:63:1e:a4:c7:47:2e:e5:78:85:78:
d0:79:f1:55:a6:58:3c:2d:85:12:6b:3d:aa:88:fd:
30:4a:a8:0a:65:b1:94:71:d6:b9:43:67:ad:56:a0:
4e:fd:51:c5:70:5b:7d:ed:96:d7:2e:c6:9d:63:b1:
e1:ac:2f:ad:36:f9:03:f2:9a:66:7f:c8:2b:a5:73:
93:18:2a:13:43:7b:6a:81:49:fc:0b:40:49:27:a0:
f5:f7:14:16:fd:b7:0f:d3:ef:7f:9a:9e:7a:6a:8e:
50:0f:ad:95:3c:62:87:4e:cd:3a:3d:5e:4a:32:30:
1d:fd:0b:a0:2a:eb:71:93:81:51:9a:a7:b3:66:a0:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0D:18:9C:B1:AF:1C:05:87:3E:F2:10:E5:1F:8D:2A:37:7B:6E:D7
X509v3 Authority Key Identifier:
keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/16F9560A722411ED93665911C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.196.0/24
Signature Algorithm: sha256WithRSAEncryption
64:eb:07:a2:9c:be:c8:23:bd:64:e8:68:ec:55:35:0b:cc:ad:
9d:28:f8:65:f4:61:90:58:43:50:5d:e8:29:38:2e:1d:b3:63:
6e:bf:e0:b7:9f:6e:18:60:a3:c9:41:4c:12:27:31:7c:af:7f:
a4:f7:36:ed:6e:7b:67:73:d5:38:52:43:f2:ae:c7:1b:1f:6e:
71:7b:ed:48:e8:d0:e1:68:47:e1:23:7d:1f:1f:a5:88:0c:eb:
d0:a3:4d:dd:30:c6:22:e3:f2:0b:1f:16:6c:b8:f3:d3:8c:d4:
99:fc:64:96:d9:db:22:64:24:29:95:35:46:14:9b:63:09:69:
62:7f:f5:64:8b:80:c0:28:bf:6d:06:a6:46:0f:42:45:c4:a1:
0a:f6:35:ec:05:b1:ba:94:cc:c9:70:f4:91:d2:44:5a:28:f1:
77:3b:49:91:df:54:bd:28:cb:6d:66:b0:5f:61:9e:0b:c0:ec:
5c:97:5d:04:12:ff:5b:81:61:0e:6f:b9:d1:d3:a4:04:d6:13:
ad:8c:b5:fb:0d:11:4f:eb:e2:c0:d5:8a:08:54:8d:c7:9e:7f:
28:a5:08:32:db:b8:c8:8c:48:ee:b3:60:b7:5b:1c:91:46:a4:
17:7d:74:2e:29:d4:c9:e5:51:85:b8:6a:be:59:60:69:bd:cc:
81:d9:d9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:48 2023 by rpki-client on console.sobornost.net