Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/2FEF1C9CB3CF11EE848BCB83C4F9AE02.roa
File: 2FEF1C9CB3CF11EE848BCB83C4F9AE02.roa (raw, json)
Hash identifier: dFSyV1Hr3PxLODubFpQLPiGp+WMvTo95/Xs+CtE0YeQ=
Subject key identifier: 8A:01:CB:AB:77:AB:22:1C:73:06:85:B7:1F:60:87:9E:FC:53:CA:58
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 057F
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/2FEF1C9CB3CF11EE848BCB83C4F9AE02.roa
Signing time: Mon 15 Jan 2024 17:54:54 +0000
ROA not before: Mon 15 Jan 2024 17:54:54 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 152157
IP address blocks: 43.255.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Apr 2024 11:42:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1407 (0x57f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: Jan 15 17:54:54 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=65a5716e-b07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bd:7b:89:71:c7:cd:b9:ff:aa:3b:5c:b0:92:
02:0b:27:04:eb:55:18:34:e3:76:dd:68:57:fc:82:
c9:f7:37:c6:78:aa:5f:73:15:ed:ff:7a:dc:ae:aa:
66:5c:56:39:db:76:47:6d:ab:e5:cc:74:0b:85:b8:
d4:14:88:98:32:1b:4d:b2:ea:83:8a:f3:ab:54:f8:
c8:b8:03:12:07:eb:44:50:c7:1c:43:ee:36:9c:81:
ee:8b:9e:67:a7:c0:11:d3:a6:bc:90:3c:72:4f:82:
60:51:25:1e:bb:13:96:2c:1e:ad:c6:7a:b1:46:0f:
ba:95:87:7c:a9:5c:79:b6:e5:85:10:e7:e2:5e:0e:
4c:b0:3d:d8:8c:71:f6:32:c1:c1:ba:e3:ca:08:74:
c8:9b:c3:81:04:14:1a:7e:11:ee:4f:5c:44:a1:39:
2e:4d:d5:b9:7c:58:9a:48:d4:4c:e0:af:7b:5e:25:
a3:eb:c9:28:28:01:e2:4a:c5:37:eb:81:55:35:fb:
16:e2:5f:d2:4f:e3:77:e1:31:12:ee:cf:4c:ff:c3:
0f:12:e8:90:f4:36:0e:81:d3:63:82:39:9e:5c:56:
04:bd:46:dc:a1:3a:cb:cc:df:0a:a8:aa:eb:10:11:
f6:87:a1:09:66:d2:d0:01:5e:7e:ff:aa:e4:5b:dd:
db:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:01:CB:AB:77:AB:22:1C:73:06:85:B7:1F:60:87:9E:FC:53:CA:58
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/2FEF1C9CB3CF11EE848BCB83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.156.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:32:12:b1:17:f3:32:40:5d:93:b2:d2:f0:f4:56:a0:27:ed:
a0:ee:6f:1b:fa:fd:32:9f:17:c9:28:c6:87:9d:16:88:e3:06:
15:37:0e:7c:a5:be:7d:4c:0b:c8:47:08:bd:d7:52:7e:1c:0a:
46:be:cd:03:27:89:9c:a8:38:9e:ad:51:7b:d1:96:40:f9:cc:
0b:2f:e2:3c:44:87:a4:d7:f6:10:e6:4f:a8:fb:65:b1:4c:9c:
bf:d9:02:01:1e:42:7d:5e:c7:68:ed:68:51:23:2d:2e:a0:e1:
e7:e2:df:1e:bd:2e:af:3d:ce:10:ff:31:02:eb:c1:b0:28:e6:
36:c9:4e:3a:c7:81:4b:c2:e5:3d:d4:d4:b7:34:b1:bb:4e:e0:
c1:52:a0:c8:9b:6a:f4:9c:f3:da:d0:c3:e5:fa:4c:55:81:3f:
41:bb:6d:d1:c9:e6:ed:0a:34:a1:28:2a:88:bb:93:c0:54:10:
e0:b9:78:bf:2b:14:6d:c7:1b:7c:24:06:53:ff:34:62:7d:cd:
3e:47:27:7f:bc:c2:80:e0:e0:43:df:d2:fb:77:7f:f8:8d:b1:
8c:d8:b8:2f:e5:17:41:37:ab:97:40:d6:b9:2c:84:d7:5a:01:
cf:43:5f:10:97:a7:52:68:42:2a:49:d9:a3:84:cb:40:0d:f2:
38:b4:2f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 14:03:47 2024 by rpki-client on console-ams.rpki-client.org