Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/C9BD0FDE31E111EE8CD1656AC4F9AE02.roa
File: C9BD0FDE31E111EE8CD1656AC4F9AE02.roa (raw, json)
Hash identifier: xfxBf5DLYFD644yuYg5hMBk15oaSm6beOKrtE3ARHHk=
Subject key identifier: 35:47:6A:DB:F9:CA:85:5D:BD:B9:50:96:F5:3D:8D:31:10:35:82:23
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 04BF
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/C9BD0FDE31E111EE8CD1656AC4F9AE02.roa
Signing time: Thu 03 Aug 2023 09:40:32 +0000
ROA not before: Thu 03 Aug 2023 09:40:32 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 9304
IP address blocks: 43.252.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215 (0x4bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Aug 3 09:40:32 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=64cb760f-d41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:45:12:5e:3e:cc:5b:81:32:1b:98:b3:0e:ba:
ea:ce:87:bb:e4:30:8f:df:04:8d:46:68:1b:ac:12:
83:98:4c:17:bc:eb:fb:06:cd:bc:5b:39:0e:c7:6a:
73:73:00:8f:6b:3d:4a:bd:eb:dd:4a:75:9a:0e:da:
d5:1e:c0:0e:1c:a9:f7:be:78:fd:9a:b4:74:c8:95:
53:22:20:52:ef:df:3e:f1:22:7a:97:05:10:f7:5a:
df:14:9f:16:2e:84:1a:63:26:1d:17:96:7a:1d:26:
27:b4:1c:26:61:4b:d4:43:bb:dd:cd:23:bd:31:ee:
a7:ab:6d:1d:d6:41:32:d5:25:a8:70:6b:30:ed:c6:
d3:65:51:a5:9a:4b:a7:e9:e0:c0:50:1e:ed:6d:e8:
a2:56:71:27:43:93:4e:0f:e9:79:22:ac:1f:5b:f3:
a7:95:a9:13:58:39:6b:b4:f7:e5:e6:ee:c7:9f:1c:
b5:1b:b7:72:c0:61:b5:a6:62:4e:55:a7:14:22:bf:
29:e5:aa:d4:25:a1:b0:74:aa:ee:8d:07:80:53:ab:
e8:b4:d5:08:83:02:93:66:95:8b:0e:f8:fa:7d:9b:
26:21:b7:8c:8a:16:a1:12:e1:75:42:04:4e:5d:06:
16:ae:ae:be:95:66:ad:42:79:2c:cc:36:60:03:83:
d4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:47:6A:DB:F9:CA:85:5D:BD:B9:50:96:F5:3D:8D:31:10:35:82:23
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/C9BD0FDE31E111EE8CD1656AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.252.211.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:4c:ef:7b:6c:df:cb:28:de:32:a4:48:a7:bc:e5:17:d4:b7:
ef:d1:e0:33:fe:69:12:5d:0f:91:05:2a:67:cf:43:63:6c:e9:
07:ca:7c:e5:cd:92:ae:f1:3e:c7:9b:2f:56:69:bf:7f:6e:7b:
4b:4a:de:a9:3b:bf:5a:8a:d5:2c:ea:1c:0f:14:c6:8f:9c:c9:
d3:c8:26:18:45:2a:43:74:0e:56:73:d5:4d:e1:fb:aa:a0:c5:
06:52:a2:4b:60:52:34:29:b4:ba:1b:51:37:66:93:47:90:e1:
bc:ec:f8:a5:d7:b2:22:11:f7:80:61:02:c8:e1:7c:00:88:61:
10:5b:a4:f5:51:97:81:2e:a1:c2:0a:9b:05:11:9e:e9:ad:e9:
c8:0f:77:d3:3e:2b:58:12:f7:0a:0a:13:63:47:68:e4:8a:d2:
0c:a7:8e:a9:15:e0:4b:f2:4e:9a:a3:b8:d6:dd:84:8a:a8:8a:
3e:05:f1:7a:97:07:c0:c2:f3:2e:1c:33:01:01:f9:9c:b4:68:
7f:91:2a:76:9a:a5:47:0d:88:8e:f1:e9:e5:12:24:e9:82:12:
45:df:2c:ce:72:9f:81:88:47:ac:a6:8b:c9:64:c1:88:a1:7b:
7d:cf:99:24:8c:95:d4:26:19:81:57:34:ad:7e:52:ac:7c:ec:
94:52:6d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 2 10:07:01 2023 by rpki-client on console-ams.rpki-client.org