Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/F9341586EDDA11EEB7B92015C4F9AE02.roa
File: F9341586EDDA11EEB7B92015C4F9AE02.roa (raw, json)
Hash identifier: /P/4C+DI1IWnDZ/kR3Rolylp/uFmfZUNpmilWuwAYao=
Subject key identifier: 18:82:65:B5:A5:00:0C:A4:B4:3A:F7:1A:EA:C5:60:7C:4F:18:85:3F
Certificate issuer: /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Certificate serial: 0606
Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/F9341586EDDA11EEB7B92015C4F9AE02.roa
Signing time: Fri 29 Mar 2024 14:45:23 +0000
ROA not before: Fri 29 Mar 2024 14:45:23 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 21859
IP address blocks: 43.250.172.0/24 maxlen: 24
43.250.173.0/24 maxlen: 24
43.250.175.0/24 maxlen: 24
103.42.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 03:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1542 (0x606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Validity
Not Before: Mar 29 14:45:23 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=6606d403-f9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:ad:65:20:54:60:c5:fa:85:e4:ed:1a:9e:
8f:2b:b5:da:82:15:f5:a6:c1:08:ed:3f:a7:e3:56:
63:57:48:6a:ac:c3:77:8e:d5:21:f3:1c:eb:94:18:
06:cc:59:e8:3b:06:73:36:65:a2:42:d2:5e:dd:15:
86:c7:b9:07:b3:5e:cc:b7:8c:98:dd:e5:40:f1:26:
e5:b0:63:a8:ee:a4:9d:67:63:01:d5:92:66:60:2a:
d6:8f:32:57:b5:a4:3a:f4:4e:4a:00:51:23:dc:25:
ca:b5:ba:e6:61:9b:e4:98:76:33:01:f9:06:94:18:
8a:d1:c8:98:98:92:82:a9:a7:f1:4d:92:2d:2a:f1:
eb:20:63:15:66:14:1e:cc:f8:3e:a6:f2:a7:55:a7:
33:72:eb:46:98:3f:ac:8b:07:fd:10:96:72:c3:69:
c4:12:3f:1d:6b:a4:1e:0d:df:8a:3f:97:37:33:e4:
7c:d5:8c:33:c3:9d:fc:00:5a:1f:2a:db:85:9f:30:
d8:59:3b:88:93:1b:d4:b6:c5:a7:00:85:9f:04:42:
5c:0a:c8:c0:2e:71:be:08:97:f3:8a:07:34:13:68:
cc:13:63:b5:36:b9:cd:13:d3:7d:ad:65:0d:e8:37:
53:b9:3c:d6:03:1c:3c:c0:cb:6a:50:91:26:58:ba:
37:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:82:65:B5:A5:00:0C:A4:B4:3A:F7:1A:EA:C5:60:7C:4F:18:85:3F
X509v3 Authority Key Identifier:
keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/F9341586EDDA11EEB7B92015C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.172.0/23
43.250.175.0/24
103.42.28.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:84:3b:82:2d:ef:03:59:1e:b5:cf:c4:10:ba:1f:43:a5:35:
19:74:2d:ab:9b:de:69:85:de:c0:ac:43:4e:2f:85:11:c3:5d:
c4:d4:4b:a5:96:4d:3d:31:29:60:c2:c9:b5:18:ae:2b:82:7d:
6d:ab:65:8f:e7:73:16:8c:96:a2:61:77:55:3e:d4:21:4f:e4:
6c:5f:f8:29:dd:72:ad:b6:d0:71:35:6c:fa:b3:0e:30:a8:8e:
1f:e4:bf:35:50:4e:f0:f7:b9:76:24:39:9c:41:a7:d9:d7:c8:
ca:fe:dd:79:de:85:1e:ff:61:b3:f3:9b:96:7f:70:8a:75:32:
e1:f6:f6:be:f3:71:39:cf:05:fe:5c:12:e9:15:75:72:cc:f8:
40:4c:d7:2c:dd:7c:27:b9:53:3f:76:08:4d:c9:80:9d:4a:f4:
2e:02:45:1a:df:23:76:bf:a8:ab:94:38:24:01:be:b8:2f:5b:
46:a9:59:5b:22:bc:52:01:b0:ab:97:d0:cf:2b:f1:1e:9e:80:
ec:07:16:97:fd:d8:3d:5f:af:fb:8d:00:93:f0:31:94:2d:87:
d0:3b:c4:db:50:ff:2f:7d:66:78:e9:5e:9b:14:24:ad:e7:2a:
16:18:ba:68:ce:83:cb:ca:84:af:be:9d:5f:d6:92:32:7e:df:
26:d8:ce:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 07:01:10 2024 by rpki-client on console-ams.rpki-client.org