Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/A69C6F284BB711EE81B0EF6CC4F9AE02.roa
File: A69C6F284BB711EE81B0EF6CC4F9AE02.roa (raw, json)
Hash identifier: Rs6kU0pRLUn+BbmmaPdTq17TwzBFhGCZ+p/WpMkgKxI=
Subject key identifier: 4A:6B:F0:38:05:56:99:D4:7F:EC:BD:EA:52:EE:C1:8A:97:8B:75:62
Certificate issuer: /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Certificate serial: 060B
Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/A69C6F284BB711EE81B0EF6CC4F9AE02.roa
Signing time: Sat 30 Mar 2024 14:55:22 +0000
ROA not before: Sat 30 Mar 2024 14:55:22 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 134365
IP address blocks: 43.250.174.0/24 maxlen: 24
103.42.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 May 2024 13:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1547 (0x60b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Validity
Not Before: Mar 30 14:55:22 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=660827da-8fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:cd:20:c5:a1:e3:64:ad:a6:40:32:26:38:
c5:2f:0c:3f:24:e0:c3:3d:9c:11:56:27:8a:75:65:
0f:43:79:a3:40:8b:ce:4b:6c:38:1b:93:f9:9f:10:
ee:95:21:5f:ce:99:2b:07:6e:83:48:40:f6:35:67:
de:5d:29:c7:3e:21:e1:d7:57:19:81:53:6a:1f:fe:
0f:d3:92:0d:a2:79:f2:eb:49:43:ba:30:0e:ac:e7:
69:9b:91:98:d5:50:c6:6c:30:3d:32:e7:08:b4:39:
78:0d:1f:14:d1:65:f4:f7:14:2f:24:93:a8:61:d6:
cc:34:2b:24:54:28:7b:bc:7a:48:7d:d3:f1:65:0a:
02:be:a2:62:f9:99:bb:3b:f0:80:f5:c5:33:66:b0:
53:d3:49:04:10:7e:5e:a3:8c:ee:b9:1c:03:c4:da:
25:28:8b:23:22:ef:1a:9c:07:12:58:16:a2:f3:16:
63:aa:1d:e5:07:6d:fe:0c:81:79:64:31:98:7f:77:
3c:3b:c0:15:a3:1a:6d:20:65:01:af:cf:08:a5:4a:
aa:d1:db:6d:b2:6f:fe:f5:92:32:1b:5a:bd:da:06:
9c:00:9c:ca:d6:e7:f0:6f:9d:ad:0a:22:b0:a2:dc:
26:46:03:8d:cf:c9:26:ea:65:de:61:41:c4:75:55:
e9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6B:F0:38:05:56:99:D4:7F:EC:BD:EA:52:EE:C1:8A:97:8B:75:62
X509v3 Authority Key Identifier:
keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/A69C6F284BB711EE81B0EF6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.174.0/24
103.42.29.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:89:3e:76:b7:d8:95:c3:77:fc:ea:20:ae:27:a9:e4:1d:7d:
71:06:2b:3c:9f:72:d3:e6:76:b5:0c:5c:25:58:20:9d:4f:9a:
49:6d:92:9d:2f:54:05:14:06:6f:21:0a:30:44:b7:a8:48:81:
e5:0b:b4:27:47:ef:dc:cd:41:16:ca:d2:2b:63:71:04:e8:d2:
39:30:d5:35:eb:0f:97:69:64:86:64:e4:e3:32:2b:19:8b:e6:
fc:bb:8a:35:de:ab:d6:23:09:8d:33:5f:37:24:78:21:f8:fe:
cb:2b:eb:86:de:33:db:b7:1a:54:4d:f7:80:80:68:76:39:08:
a8:a0:b0:85:b3:d5:ac:f0:9b:55:4f:2d:95:f5:68:1f:1e:39:
9d:61:5b:8a:c5:58:d5:d5:0a:d7:7a:d7:9c:4f:0f:87:2a:8e:
b6:ff:58:d2:ba:9a:6e:06:0c:f0:3c:d9:da:ce:33:fb:d4:4a:
d1:e5:3d:e6:c8:f1:c8:68:81:02:54:74:c4:9a:5a:da:b2:e0:
d9:a9:fe:63:b5:fb:a9:03:58:4f:9d:82:6f:2a:2a:df:c5:96:
a0:56:66:ec:51:a0:70:13:90:a4:f0:fa:68:70:0a:5a:04:df:
cd:dc:46:77:08:bc:2d:08:58:b6:74:82:d5:d5:42:20:38:84:
3e:ec:e6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org