Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/A5FDAA3A599211EEB55DE15CC4F9AE02.roa
File: A5FDAA3A599211EEB55DE15CC4F9AE02.roa (raw, json)
Hash identifier: dnln0XJjjtVI8YBjJubSHUFTis0GpXWfuy94NzjHkZE=
Subject key identifier: 5A:02:AD:50:EB:58:57:7B:C5:97:20:1C:0E:01:0C:64:EA:98:2B:87
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 04F2
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/A5FDAA3A599211EEB55DE15CC4F9AE02.roa
Signing time: Fri 22 Sep 2023 21:54:48 +0000
ROA not before: Fri 22 Sep 2023 21:54:48 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 29802
IP address blocks: 43.255.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 18:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1266 (0x4f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: Sep 22 21:54:48 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=650e0d28-65fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d1:87:8c:f2:0c:35:77:16:32:54:dc:05:9e:
43:8c:dc:ee:20:4b:7a:ed:6d:c1:db:4e:31:c3:27:
ea:aa:fc:38:ad:8b:9f:01:7c:46:68:7a:78:83:a1:
03:5c:40:e5:7b:a2:03:1d:77:3c:58:52:1d:7c:b3:
1f:1e:28:69:fe:93:29:04:c7:16:85:3f:c8:4f:31:
9a:bd:11:64:62:b1:bb:f8:85:fe:e2:0b:96:9c:79:
00:a7:e6:b3:12:2d:5f:34:44:34:cc:7f:b0:21:5b:
5c:92:2a:5b:d4:4c:61:31:78:ff:12:0a:a7:49:e0:
4e:92:d3:2a:f3:9c:30:06:4c:ff:b5:bc:72:76:07:
f7:a1:70:dc:fc:5d:e0:07:9b:05:92:06:04:49:20:
e6:4b:38:7c:92:6f:f3:3d:1f:df:02:2e:5f:bb:0e:
1a:02:82:85:39:30:d5:3f:78:c8:dc:ac:a3:4b:6b:
09:c7:5e:53:c8:ef:d7:d0:28:35:56:31:fc:53:bb:
2c:35:ab:d7:c2:62:55:ce:1f:f8:df:3d:a4:38:59:
b6:e0:52:7e:34:7d:9e:f5:3f:de:65:36:f0:34:04:
08:25:09:bf:c1:8a:d6:b9:49:4d:eb:30:37:53:6b:
37:a6:18:e2:a7:1d:bc:c9:f5:1a:68:21:34:46:ae:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:02:AD:50:EB:58:57:7B:C5:97:20:1C:0E:01:0C:64:EA:98:2B:87
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/A5FDAA3A599211EEB55DE15CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:02:a8:11:57:3d:6e:93:68:e7:b5:42:c1:4f:24:1e:cd:83:
b4:36:fe:47:7a:89:04:db:89:00:d3:62:5b:36:5c:8e:b6:d2:
0b:9e:41:3a:4d:44:3d:79:d5:09:32:53:e3:14:56:6e:89:87:
b8:4b:ed:28:c1:41:c5:6b:05:d9:a6:dc:e9:51:8b:ad:e7:76:
e1:e1:ab:da:ea:84:db:a9:14:33:66:07:80:b1:a2:46:17:ef:
17:8b:d8:d3:14:58:da:0d:48:3d:46:d0:1c:04:4d:cf:b3:1c:
0e:e1:c1:d0:96:69:63:54:b6:4b:a2:a3:a2:34:5b:be:42:fc:
75:31:ee:6d:ca:99:de:ba:d3:70:39:94:b9:b4:0a:eb:1d:88:
ac:0b:93:65:c4:70:41:0c:9d:77:5d:5a:6b:ae:55:46:a6:f1:
78:24:ca:b2:44:8e:69:d6:c8:c5:d0:d7:c3:a1:96:1c:c1:21:
76:e3:52:30:df:a0:ee:eb:cf:2a:83:0b:e4:7f:d6:bc:b5:e1:
9e:ba:ae:d7:aa:6a:98:98:42:fb:aa:a7:9a:cb:37:0c:b1:b2:
4e:7d:88:11:ff:bc:9f:21:ed:66:d4:f4:e4:33:8d:f4:9f:1b:
76:d1:e9:6e:1a:92:55:3c:13:13:30:ce:20:75:4b:a1:14:af:
32:80:34:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 21:09:41 2024 by rpki-client on console-ams.rpki-client.org