Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E5877284B1611EFBB8C2D13C4F9AE02.roa
File: 7E5877284B1611EFBB8C2D13C4F9AE02.roa (raw, json)
Hash identifier: peh5/rjbLs+QEg6jas8Odf941G2SpG60p/aESaVxvwI=
Subject key identifier: D9:91:54:D8:2B:82:CD:63:59:7D:5A:09:F9:9F:95:7C:4F:45:24:42
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 954B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E5877284B1611EFBB8C2D13C4F9AE02.roa
Signing time: Fri 26 Jul 2024 06:15:45 +0000
ROA not before: Fri 26 Jul 2024 06:15:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151157
IP address blocks: 36.50.166.0/23 maxlen: 24
2400:f620::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 26 Jul 2024 06:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38219 (0x954b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 26 06:15:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66a33f11-226e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:b5:a4:66:c7:52:43:0f:4f:f6:19:bf:0f:
ca:03:27:bd:b9:7b:20:83:15:28:25:95:a6:f7:10:
b5:3b:ea:50:aa:a6:cd:bb:fa:7a:81:a4:d4:e1:c4:
fa:d0:89:84:22:cb:28:30:29:a7:5e:61:83:96:1d:
4f:83:51:85:cb:73:33:a5:db:17:ac:93:c7:28:b6:
04:7b:02:1a:2d:a1:6e:53:cf:d7:0f:a9:16:36:4e:
e2:30:04:53:c8:fe:ee:59:7b:7d:05:68:df:c8:53:
9e:da:98:86:a3:c0:22:e0:7b:9a:1a:4c:8e:d3:00:
6c:a9:2e:0c:83:0a:ec:57:b0:b0:b5:4b:d3:d8:c0:
75:62:71:7f:01:61:2e:53:d5:64:e4:95:3e:b0:25:
2e:ce:ec:96:ce:0d:5c:5a:79:ed:2a:6e:c6:89:91:
95:08:ff:ca:e0:91:c5:d5:95:b1:c7:8d:c9:de:3a:
17:bf:ed:67:7e:9d:5a:80:47:47:27:db:8c:32:86:
05:23:c7:9d:7a:d7:72:5d:07:c1:ee:7d:7b:c9:45:
3f:4c:ba:ee:92:64:c1:75:47:22:26:5e:3e:e5:d9:
ed:c3:a6:74:df:a6:19:b4:75:c1:6b:df:98:75:7a:
b3:85:c3:46:14:4f:ff:66:59:dd:88:8a:65:fc:c2:
08:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:91:54:D8:2B:82:CD:63:59:7D:5A:09:F9:9F:95:7C:4F:45:24:42
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E5877284B1611EFBB8C2D13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.166.0/23
IPv6:
2400:f620::/32
Signature Algorithm: sha256WithRSAEncryption
40:9c:65:b9:80:4a:60:10:ad:56:91:4f:70:13:76:f2:1d:af:
82:62:46:a6:10:fe:ec:08:7f:05:15:be:9c:c1:30:8d:36:b3:
6f:b6:51:ad:c9:3b:42:6c:82:29:5d:68:a8:80:67:6c:e1:8b:
b5:8d:a5:77:ea:a8:dc:93:6d:49:04:47:52:3f:98:ed:2b:9c:
f0:f9:62:f9:59:19:b4:48:6e:cd:f6:47:74:f4:9e:dd:a7:26:
b6:76:df:88:14:7f:12:f1:dd:d7:90:d5:2e:56:29:01:7b:1b:
03:bf:08:7e:18:ba:46:08:98:d6:d6:76:21:74:e8:f9:4f:19:
89:98:cc:fd:89:68:99:0c:f7:ce:5c:31:4c:f8:41:ee:76:0b:
1c:9e:da:f6:83:20:93:cd:02:91:98:7d:a0:c0:10:1b:78:42:
0c:58:7a:26:e4:68:71:a2:aa:dc:79:cf:c0:d8:ae:87:08:84:
57:d2:9b:6b:77:06:b1:a4:d3:56:74:1e:13:f1:98:62:69:25:
55:cf:12:e0:cc:3a:30:74:ca:ad:3e:c0:b1:ab:7d:68:1c:e5:
d3:ac:15:ea:de:e0:6a:35:73:8f:7e:2b:50:c9:85:1f:c2:3d:
dc:49:a5:e0:eb:85:91:db:db:6d:9d:ed:3c:b3:ab:cf:f1:f0:
d5:f3:4f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:08:20 2025 by rpki-client