Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/74789FC2713F11EF9483C485C4F9AE02.roa
File: 74789FC2713F11EF9483C485C4F9AE02.roa (raw, json)
Hash identifier: fNdQ76ecBjBNueUUgkc1f7Aon4+vNaSXIiquiW5F9To=
Subject key identifier: 6D:4F:85:08:28:E8:28:13:43:74:B2:4A:9B:87:52:46:1F:AA:64:6A
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 79
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/74789FC2713F11EF9483C485C4F9AE02.roa
Signing time: Thu 12 Sep 2024 19:44:42 +0000
ROA not before: Thu 12 Sep 2024 19:44:42 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 834
IP address blocks: 43.231.205.0/24 maxlen: 24
43.231.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 06:57:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Validity
Not Before: Sep 12 19:44:42 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66e344aa-3774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ab:ca:43:3a:91:12:92:5a:d8:fd:c5:ac:85:
40:4a:9b:39:d8:ce:00:af:fd:22:d6:85:f0:06:b6:
b8:18:5f:9a:05:a9:e4:77:73:7d:c9:5f:22:3e:14:
5e:0a:40:70:5e:6a:f8:7a:3e:d2:18:8f:7f:4b:7d:
30:fb:e3:bd:f9:de:15:3b:04:b1:36:fb:23:2b:52:
19:fe:9d:81:24:32:5b:2e:7e:5a:b6:f4:58:36:bc:
7d:f8:d8:3a:1b:06:6d:7f:b6:4e:a5:94:1c:3a:4f:
23:a6:3d:b0:35:5a:13:90:2f:54:e2:c2:c8:a9:19:
bf:e9:7d:db:bb:36:6f:08:d2:5f:a9:25:69:0a:fb:
51:18:43:6a:ac:d5:12:aa:a9:46:6c:65:09:37:48:
1a:01:1c:88:34:63:94:78:ee:60:19:cd:c8:ca:23:
21:38:e2:6b:bc:71:db:13:e3:0a:e9:a2:d6:95:eb:
53:57:dc:6d:ab:e3:5b:ed:69:cd:9b:70:e0:62:87:
02:2d:64:cd:69:ea:1b:92:b7:bc:f5:50:af:04:fc:
37:ef:cd:bb:e9:35:8c:82:aa:e6:8f:69:9d:bd:f3:
dc:d1:43:a1:7a:d1:1f:ca:e7:7e:4d:65:a8:7b:16:
9a:d6:c1:4b:42:43:bf:7b:46:5b:69:a6:3a:a7:03:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4F:85:08:28:E8:28:13:43:74:B2:4A:9B:87:52:46:1F:AA:64:6A
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/74789FC2713F11EF9483C485C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.231.205.0-43.231.206.255
Signature Algorithm: sha256WithRSAEncryption
5c:a9:a9:71:59:42:5b:c5:d7:38:ff:fb:08:19:cd:ae:6f:e5:
29:87:24:62:45:80:57:8a:7c:01:d3:6e:56:8b:f2:a8:ff:71:
b0:a3:4b:b8:31:9b:f3:20:7a:a7:13:42:59:a6:8a:a3:8f:61:
32:8b:5c:b9:dc:0d:44:18:4c:eb:4e:75:77:41:7b:e5:74:1b:
ad:38:e7:47:6b:db:be:21:4d:92:d4:47:69:70:78:be:35:ee:
0a:5a:a2:00:9e:0c:7d:db:3f:44:90:bd:ab:14:52:4f:51:45:
11:28:22:17:b9:21:b5:d2:31:77:fc:0b:90:75:a3:61:8d:62:
aa:e2:30:3b:3f:cd:b0:39:e1:28:06:18:be:6a:65:b0:2f:d3:
91:df:0a:dd:7f:d7:b3:74:bf:be:b2:bc:1a:f1:72:f2:19:db:
cd:a3:71:04:ff:fa:0e:88:3f:07:a2:19:7c:6f:56:03:dc:9c:
f7:8e:5c:39:39:cf:08:0f:a5:7d:ae:44:fb:0f:fc:77:75:fa:
2f:cd:40:a4:28:91:41:5b:52:84:55:a4:fd:51:b4:ad:9e:c5:
85:b9:e1:f4:c0:8c:4d:8d:21:2d:17:24:e0:56:a8:a7:6f:b0:
af:c6:02:42:aa:6d:e6:b7:32:cf:d2:e3:af:bc:a0:0b:fd:ca:
a0:3c:40:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 07:51:12 2024 by rpki-client on console-ams.rpki-client.org