Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/EE9912D648B411EF90F5E71DC4F9AE02.roa
File: EE9912D648B411EF90F5E71DC4F9AE02.roa (raw, json)
Hash identifier: E5jjC9fMWEENvRxVoai2Y1jEn/ts7o8u7XbP/VXlyto=
Subject key identifier: 36:8E:52:2B:1B:C6:E6:49:04:B2:50:AC:16:98:7D:75:54:DC:24:C0
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 74
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/EE9912D648B411EF90F5E71DC4F9AE02.roa
Signing time: Mon 09 Sep 2024 07:49:52 +0000
ROA not before: Mon 09 Sep 2024 07:49:52 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 834
IP address blocks: 43.231.205.0/24 maxlen: 24
43.231.206.0/24 maxlen: 24
103.72.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 19:44:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Validity
Not Before: Sep 9 07:49:52 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66dea8a0-2083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:ca:88:ab:f9:e2:19:96:d9:63:fc:2e:25:
e6:2b:7f:33:3a:b9:c6:2c:90:e6:19:d9:e7:e4:64:
ac:fa:20:e8:ac:5d:1c:ff:67:27:d8:86:83:bc:61:
c4:72:fb:3a:f0:31:c0:13:b3:44:71:8c:b8:2e:ae:
84:6f:d3:0b:f2:a6:0a:7b:15:15:db:4b:83:e9:8a:
05:fe:32:d5:ca:bb:ae:5d:0e:45:92:00:6d:d9:cb:
a6:03:e3:3d:40:88:d5:e3:62:88:0f:ed:a0:32:4f:
bf:47:84:a2:1a:9f:d7:55:6a:35:7c:f6:d6:bf:50:
1f:8f:e6:c7:69:fc:f9:ac:b4:46:e0:3e:ae:f3:9a:
56:27:08:93:75:90:a9:fa:7c:e8:cd:15:32:1c:94:
f9:16:ae:14:8c:03:97:79:21:c1:76:33:9c:19:6e:
15:46:fe:9b:fd:80:4b:53:1a:ac:2e:77:3b:78:cb:
82:43:85:2c:45:1c:f5:64:86:3c:40:d4:26:b5:60:
cc:d5:5d:14:00:2f:b0:b1:c2:fe:3f:a1:f7:dc:34:
25:ce:38:29:cf:66:f0:1f:93:0b:c0:29:9d:e4:7b:
19:ac:b4:fe:ec:d0:f0:41:8f:6f:1d:8b:a2:25:1b:
19:4b:1c:20:c2:3d:b2:e1:76:51:a5:80:60:32:36:
46:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8E:52:2B:1B:C6:E6:49:04:B2:50:AC:16:98:7D:75:54:DC:24:C0
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/EE9912D648B411EF90F5E71DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.231.205.0-43.231.206.255
103.72.194.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f9:d2:79:6c:c0:0a:24:2e:39:4b:72:ae:81:b3:ab:3b:74:
7e:92:88:90:24:e6:a6:ec:b7:9d:46:ce:14:f4:c4:37:13:e1:
e4:78:5b:99:43:6c:37:51:71:a2:b2:e4:bc:6c:36:af:de:b5:
23:b2:b4:da:5d:8d:3d:31:74:fe:87:a0:d2:65:3e:1f:58:1d:
02:9e:a2:7b:4a:66:91:86:1c:bd:ce:5d:4e:90:74:47:d1:8e:
eb:98:25:f8:f5:be:3a:15:24:63:d8:d8:30:7e:99:47:3d:47:
e2:82:80:e5:25:2e:f0:a3:95:a0:6d:ea:e3:23:c9:2f:5b:f7:
29:77:04:49:2e:09:2b:78:64:d0:d7:b7:bc:7a:4b:91:08:f1:
ba:96:47:b6:9a:5f:a9:7a:b8:20:26:f3:81:59:67:8a:8a:de:
12:9b:f2:4a:06:02:1f:93:12:a2:32:ce:32:4a:5e:f4:1a:83:
fc:13:5f:7b:a0:b3:5e:f4:33:5e:4d:6f:50:b5:fd:f2:d2:4c:
18:aa:a7:dd:b4:4b:58:99:b1:01:2d:75:0f:da:8e:d8:36:ca:
e1:dd:fd:ce:37:d2:b2:44:37:9f:20:4a:43:16:f9:d3:bb:c3:
42:13:4e:35:64:bf:fb:69:48:5d:c9:63:5f:5b:36:e6:da:8d:
79:49:99:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 22:20:45 2024 by rpki-client on console-ams.rpki-client.org