Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/B4E99EB04ADC11EE9154D945C4F9AE02.roa
File: B4E99EB04ADC11EE9154D945C4F9AE02.roa (raw, json)
Hash identifier: uwsyQuKkPUUrVxbS4AjNCS1eGvymdNxtdo/pmhsXZ4k=
Subject key identifier: 75:AB:8E:EE:81:CF:1D:9D:2E:E4:4C:07:3A:BB:89:23:C5:4B:3C:87
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 04C8
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/B4E99EB04ADC11EE9154D945C4F9AE02.roa
Signing time: Tue 05 Sep 2023 12:54:57 +0000
ROA not before: Tue 05 Sep 2023 12:54:57 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 834
IP address blocks: 43.254.167.0/24 maxlen: 24
43.255.121.0/24 maxlen: 24
43.255.122.0/23 maxlen: 24
43.255.156.0/24 maxlen: 24
103.24.216.0/23 maxlen: 24
103.231.58.0/23 maxlen: 24
103.240.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1224 (0x4c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: Sep 5 12:54:57 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=64f72521-e176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:c0:17:6a:5e:8e:30:c5:0d:03:1a:f7:ee:
5c:8d:46:76:69:bd:83:c7:37:af:3e:68:5d:b1:99:
17:d3:2a:1f:db:4e:fb:f1:1e:23:aa:7f:cc:b2:f1:
7d:2f:4c:b5:d4:10:d7:0d:04:ce:89:98:f3:17:67:
0d:06:b1:1f:7a:38:95:ea:1f:19:32:65:89:35:31:
a0:9d:95:f4:c1:f6:22:6f:c4:0e:1a:30:d0:47:37:
5b:20:96:f2:b7:72:d0:98:37:27:61:05:df:10:02:
17:77:a6:6a:6d:17:e5:c1:9b:d4:d8:08:c2:08:6d:
59:21:99:29:7d:86:2d:39:df:5a:ce:e5:d2:0a:35:
b6:be:1c:d9:6c:e1:2c:ab:a6:ee:f7:3d:47:2a:68:
2c:b2:8a:34:ea:8b:6b:fa:04:04:de:39:d4:74:1e:
3a:e2:8b:e5:55:a3:76:e6:5f:84:56:b3:47:23:ee:
89:8a:58:90:45:39:6b:b1:4f:43:90:ae:83:7c:8c:
7b:1c:bc:ea:cf:fa:4e:55:43:84:86:8d:7e:2d:1c:
8e:8a:50:2f:33:71:87:31:e6:22:0e:a1:9a:ab:95:
63:85:58:d7:5f:04:b0:79:24:bc:95:84:04:e0:94:
0d:48:21:fd:ee:43:fe:99:95:4a:bd:a7:77:96:7f:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AB:8E:EE:81:CF:1D:9D:2E:E4:4C:07:3A:BB:89:23:C5:4B:3C:87
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/B4E99EB04ADC11EE9154D945C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.167.0/24
43.255.121.0-43.255.123.255
43.255.156.0/24
103.24.216.0/23
103.231.58.0/23
103.240.198.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:c7:cc:1c:e7:a3:12:ee:15:f4:c7:4f:28:36:a1:f3:5b:5d:
a7:19:c6:bf:d3:96:49:2c:70:d3:a3:e0:d4:ff:a7:19:b4:05:
ec:38:ef:4a:bf:10:0d:38:24:ef:a2:61:5a:58:71:89:1c:57:
1c:a7:b8:53:fa:ba:94:93:95:e8:05:95:e3:23:bf:31:a5:b7:
d5:b5:95:f5:7c:eb:8a:49:63:96:f7:3c:8e:e7:fa:53:14:8e:
e8:25:f8:ac:c5:6b:3a:a8:17:66:6a:7d:57:0a:5b:6b:c9:13:
00:a0:a8:c0:ab:6c:94:f5:3c:d7:91:fe:b5:dc:d1:99:20:36:
e4:50:6f:2a:72:54:55:18:b5:8e:0a:65:35:90:24:52:78:1b:
44:cd:49:e6:a0:f2:fe:2e:d2:76:bc:58:0b:46:b4:31:7c:f5:
9f:6c:ac:fd:a9:61:bb:d1:73:9d:58:4b:b4:d5:0f:19:d5:20:
87:62:b8:7c:d7:58:ec:5b:0d:6a:09:57:18:31:47:b2:38:13:
61:fa:5e:06:31:81:cc:bd:65:8c:d4:d0:f1:2d:6e:9b:c2:01:
34:43:7e:18:ec:a3:0f:40:1d:e7:22:f3:a1:ee:49:8c:1d:a8:
7b:a8:e5:35:37:01:1d:b9:75:f8:0d:39:ae:c4:60:20:1b:37:
4b:76:c8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 05:13:17 2023 by rpki-client on console-fra.rpki-client.org