Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/BDA8549C147611EF86060639C4F9AE02.roa
File: BDA8549C147611EF86060639C4F9AE02.roa (raw, json)
Hash identifier: wTNoP9jfPSKorrEACwE3ZHI6Y51n8T4eyG7+tEhcdjo=
Subject key identifier: 06:E7:22:E4:16:B9:0A:29:2A:4F:99:8C:4E:9E:A9:B9:44:75:A0:D5
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 23
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/BDA8549C147611EF86060639C4F9AE02.roa
Signing time: Fri 17 May 2024 17:56:09 +0000
ROA not before: Fri 17 May 2024 17:56:09 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 834
IP address blocks: 43.231.205.0/24 maxlen: 24
43.231.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 07:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Validity
Not Before: May 17 17:56:09 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66479a39-2fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:79:61:05:9b:28:0e:be:a7:89:71:00:9d:f0:
7b:38:d4:73:3d:79:83:af:d0:d1:b9:df:6d:60:5e:
ec:8c:a4:d6:43:4d:7a:36:70:cc:7e:d5:96:8f:b3:
aa:6e:ed:99:d5:19:c8:10:f6:57:64:42:2c:b3:27:
ea:2d:16:66:80:91:dd:67:57:af:2e:87:44:4f:99:
b1:fc:8d:f7:d2:6a:25:46:ed:d2:17:61:95:2f:27:
cd:5b:60:d7:9f:77:58:ba:e7:80:94:52:65:ed:2c:
fe:50:cb:ee:6a:f9:1d:ce:fe:ce:7a:fc:d1:8d:48:
6d:85:20:68:fe:68:a8:f7:ac:b5:2a:96:57:6a:72:
ea:c8:c3:cf:9c:c6:d6:ea:65:e2:2e:41:13:d6:a9:
4d:c5:da:23:14:e0:c5:ab:f5:39:34:5e:5a:40:cb:
73:ea:9d:a1:63:bf:71:e8:5b:28:39:e8:f3:60:b6:
dd:3e:a0:c1:b8:70:6f:9b:b9:89:94:94:5e:14:f1:
89:53:89:91:91:19:a4:20:f5:35:18:ad:89:36:a7:
43:b3:9e:75:5f:12:bf:0f:91:a2:6a:12:f8:61:87:
e6:9a:c6:49:e9:16:50:c8:26:86:4f:53:56:7d:f7:
5b:aa:e4:b0:bd:d0:6b:af:85:33:53:31:39:0e:67:
3f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E7:22:E4:16:B9:0A:29:2A:4F:99:8C:4E:9E:A9:B9:44:75:A0:D5
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/BDA8549C147611EF86060639C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.231.205.0-43.231.206.255
Signature Algorithm: sha256WithRSAEncryption
4f:31:08:05:31:e5:06:d0:eb:63:c8:49:89:94:29:dc:27:4e:
73:26:7d:e3:29:32:5a:20:2d:a3:89:7f:2c:9e:25:0f:ec:84:
91:fc:3d:98:21:33:a1:7e:16:dc:2f:81:36:38:f1:18:04:bc:
16:01:dd:51:96:b7:6e:a4:6f:5d:73:f6:40:fb:88:34:8c:ee:
c2:34:cb:73:df:ae:37:a6:79:d5:64:cf:ae:d8:12:6d:d3:a6:
bb:4b:8f:46:d0:81:d3:91:e5:d9:b4:cb:6f:c7:2b:7b:e2:fa:
92:87:9f:d7:e5:7a:c8:17:87:11:83:9f:d6:6f:6b:bc:f2:3e:
7d:53:e1:1c:cc:af:c1:f4:c3:e6:81:47:05:8a:06:2a:a5:9f:
04:f6:d6:91:73:3b:95:14:de:7f:07:eb:74:0b:8b:02:7f:83:
4e:f2:ee:69:37:9a:71:fe:e5:c1:6b:70:bb:f3:d6:77:e4:ec:
7c:4d:fe:46:5d:1f:06:6a:ab:6f:20:64:0b:fc:bf:5d:6f:94:
28:c0:6f:90:f0:93:93:b9:dc:53:8b:6e:b5:35:d2:57:9e:1f:
47:76:9d:cd:50:53:d0:bd:e6:b8:07:d9:be:2f:2d:cf:8d:84:
1c:13:23:3c:77:57:99:63:33:7f:02:0b:a7:ef:ef:e5:44:ab:
b4:b2:04:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org