Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/1ED6CE7E54BA11EEB6F36C44C4F9AE02.roa
File: 1ED6CE7E54BA11EEB6F36C44C4F9AE02.roa (raw, json)
Hash identifier: crKO/keIJ7cgbkcJbsZWEGk8zwJXbKX7b81QudMzGKQ=
Subject key identifier: F4:AB:4D:F5:67:CB:7F:EB:60:02:97:5E:DD:7F:A1:D5:00:C8:47:D1
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 0632
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/1ED6CE7E54BA11EEB6F36C44C4F9AE02.roa
Signing time: Tue 03 Sep 2024 01:14:18 +0000
ROA not before: Tue 03 Sep 2024 01:14:18 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 396356
IP address blocks: 43.254.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 06:25:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1586 (0x632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: Sep 3 01:14:18 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66d662ea-67c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:27:e6:93:a2:c4:30:05:e3:f4:4c:fd:1a:
c7:7d:6f:4d:d1:fc:9d:0b:71:2a:21:33:e1:e7:a4:
03:21:93:c2:fd:1c:65:3c:55:4c:d9:28:fe:72:ff:
d5:99:98:0e:d5:53:b7:d5:02:54:21:9a:68:19:a9:
c6:2f:5e:8d:19:4c:a5:ac:23:41:63:ad:b0:ab:d1:
21:a1:0d:8a:6e:8a:da:36:34:20:f0:65:6c:36:0a:
91:a5:7e:ce:2d:e9:33:a1:45:9a:8a:47:c4:0b:3e:
fc:c7:d9:94:22:17:9b:b4:0d:22:9b:34:bc:e3:4a:
51:3e:4f:87:64:6b:c1:96:db:b4:f4:5f:a0:23:99:
a5:d5:8c:d3:cd:89:d6:f9:58:0c:fd:c6:33:b7:cb:
a6:64:3e:a5:3f:e8:73:ad:1b:ab:6b:13:ee:cd:62:
36:5c:c3:88:6f:bb:d2:eb:b4:0e:aa:c0:23:51:d0:
b2:e6:af:d1:83:61:c7:77:c7:67:5a:a4:1c:69:46:
22:9a:bf:c2:04:8e:62:05:e7:a4:89:8a:10:61:ef:
b2:da:ce:82:d9:30:e6:0a:fc:bd:a0:92:87:2d:48:
e0:5b:e1:00:eb:ab:dd:a3:87:b2:7f:d1:d2:7d:fa:
ba:bd:92:7d:e1:b1:25:cc:ae:58:d4:e1:89:64:32:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AB:4D:F5:67:CB:7F:EB:60:02:97:5E:DD:7F:A1:D5:00:C8:47:D1
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/1ED6CE7E54BA11EEB6F36C44C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.167.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:69:b9:43:0a:41:5a:85:86:9c:42:68:4f:04:3b:39:6b:c4:
4c:2f:4a:0e:dc:f6:f6:34:51:3c:c2:3a:a8:9c:fd:38:5b:51:
aa:e1:66:63:b5:fd:cd:88:13:f6:3d:cf:4f:63:a4:36:97:dc:
5e:aa:77:99:0e:24:aa:9f:fe:aa:6e:26:1b:6d:14:58:e7:99:
5a:45:a0:ed:86:9d:e9:d2:f5:b3:26:3f:c4:30:e1:9a:85:79:
32:e4:c4:92:66:00:93:eb:6a:c8:db:23:02:09:69:a7:4c:66:
5f:33:2d:be:aa:56:b8:e3:70:6e:2c:60:f8:43:dc:1a:c8:ba:
a6:cd:48:c4:4d:07:63:9c:7d:57:40:20:44:d0:64:db:db:d6:
e9:72:d2:e4:c1:ba:a5:79:f2:91:65:7a:b1:51:09:c7:84:db:
cb:8e:6b:08:23:13:16:df:11:d7:d0:f6:20:87:98:d3:7a:fb:
ee:08:b1:3a:3d:13:6b:02:65:d1:ae:cc:55:2d:a7:72:02:2d:
80:8e:87:c6:f9:a3:34:1b:65:d7:bb:d7:89:c1:60:70:f1:54:
4d:fc:f3:a8:4f:52:30:9c:38:be:fc:12:75:b5:6c:63:2b:60:
d4:09:53:e6:9c:4b:c3:73:d2:71:c3:d2:14:81:94:f1:03:d0:
97:64:ec:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 07:24:11 2024 by rpki-client on console-fra.rpki-client.org