Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/55DC992AF25911EE99C6BB21C4F9AE02.roa
File: 55DC992AF25911EE99C6BB21C4F9AE02.roa (raw, json)
Hash identifier: +2TgnG32wHtk3scoraRNGHyW+C2aiAGMEYg+zxpVu4g=
Subject key identifier: C4:FC:1E:C0:9A:A3:D6:22:20:44:11:24:AB:47:14:50:C2:24:EB:C1
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 495C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/55DC992AF25911EE99C6BB21C4F9AE02.roa
Signing time: Tue 21 Jan 2025 09:28:31 +0000
ROA not before: Tue 21 Jan 2025 09:28:31 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 150855
IP address blocks: 36.50.16.0/23 maxlen: 24
103.112.210.0/23 maxlen: 24
103.159.52.0/23 maxlen: 24
2401:10e0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 21 Jan 2025 09:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18780 (0x495c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jan 21 09:28:31 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=678f68bf-f568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:ea:26:25:c6:7f:fb:9f:08:a2:0f:d3:be:
0a:f2:46:15:f9:19:43:d2:25:a2:56:3a:42:39:7a:
46:16:2b:58:60:52:43:f6:09:6e:44:50:75:18:cc:
f9:8f:9f:76:63:ca:f2:33:3e:d3:ae:2e:01:3b:c0:
91:0d:7b:02:59:1e:14:b7:c9:18:82:c5:ee:50:5e:
2d:67:40:37:f8:aa:99:d3:e2:8f:00:94:45:7f:a9:
4c:14:b1:e4:b8:d8:e7:8d:6e:71:99:67:73:43:ec:
45:9e:14:60:a7:15:ac:7d:7c:85:40:a2:f8:29:88:
63:88:e5:6a:a4:0d:a0:01:43:6c:b7:07:54:a1:7e:
a2:7f:db:3a:19:d3:b5:63:2f:df:a0:50:71:5d:f7:
50:80:8e:ce:70:cb:4e:7e:b8:5f:27:e5:a0:20:62:
8d:10:7f:e4:11:52:17:d4:83:67:2b:5a:bc:eb:bf:
ee:c0:22:9c:e1:8f:e1:ea:f4:57:71:08:06:52:9c:
ec:2c:77:23:71:7e:67:b6:38:bb:13:83:49:12:51:
7d:6c:fb:5e:1b:dd:b0:bf:21:6c:a7:98:19:92:8e:
b4:f2:66:28:26:5e:aa:e3:48:7e:d1:2e:a0:dd:08:
1b:86:60:07:4b:5e:d7:3b:05:14:9b:75:8b:b8:49:
97:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FC:1E:C0:9A:A3:D6:22:20:44:11:24:AB:47:14:50:C2:24:EB:C1
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/55DC992AF25911EE99C6BB21C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.16.0/23
103.112.210.0/23
103.159.52.0/23
IPv6:
2401:10e0::/48
Signature Algorithm: sha256WithRSAEncryption
a0:d7:b8:9d:19:af:d3:d9:74:09:2c:3c:26:a7:ab:84:3b:f9:
35:19:bd:0b:b1:d1:b5:e2:b3:9c:70:0d:29:5e:37:2e:17:19:
0c:c7:53:88:5b:6e:27:66:27:f6:97:f7:be:e4:99:d7:ce:61:
51:0e:31:2e:8b:c9:1c:bb:5d:e9:bb:ec:ae:74:d2:e1:6a:a2:
fd:04:4e:91:1e:f0:4b:95:1f:8e:9b:30:49:02:49:41:e4:8b:
36:6e:00:bf:5a:8c:70:4f:43:88:b4:bb:fa:ec:f4:f4:26:f7:
91:9c:a4:9e:18:25:0d:ef:1b:af:ac:25:67:67:07:81:ac:19:
fb:66:3c:a3:f5:eb:77:0b:86:f2:4c:51:1a:a0:54:14:dc:d2:
48:b1:25:f6:bb:0b:56:50:c4:e3:19:51:1e:a5:ee:43:36:dd:
74:c1:93:36:d9:f2:62:58:d9:f0:91:75:fc:fe:d1:75:04:4d:
33:58:8e:3a:4b:c9:8c:ff:c8:ed:68:b8:56:95:72:8b:a0:61:
0e:5c:9b:dd:4e:26:54:c5:93:66:35:4b:1c:a7:1b:7a:75:2d:
d8:e2:d7:b6:d9:aa:b8:43:58:66:ca:81:3f:c1:e0:5c:75:bc:
1e:aa:a7:45:28:29:88:3e:9e:c3:5c:46:57:69:a3:e0:ea:8b:
35:4e:45:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:18:31 2025 by rpki-client