Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/4F384016337211EE9B07310DC4F9AE02.roa
File: 4F384016337211EE9B07310DC4F9AE02.roa (raw, json)
Hash identifier: NJPP9Sk+Z8gFPWRSC7bS0dNe/VtCe6+oOolJjrlwfQ8=
Subject key identifier: 24:45:A0:FB:EA:BF:B3:AA:33:DE:EE:EE:86:4C:4B:38:26:4B:2C:51
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 0637
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/4F384016337211EE9B07310DC4F9AE02.roa
Signing time: Tue 03 Sep 2024 01:14:22 +0000
ROA not before: Tue 03 Sep 2024 01:14:22 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 61317
IP address blocks: 43.247.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Sep 2024 23:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1591 (0x637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: Sep 3 01:14:22 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66d662ee-e5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:86:9c:6f:3a:00:3c:e0:7a:fe:a2:be:f6:ce:
56:97:f0:ab:79:39:00:89:76:52:14:4a:f7:32:a2:
10:8c:1a:63:7c:b0:ef:6b:6e:d5:cd:2e:dc:c8:c2:
ab:3b:43:02:e5:a6:94:f4:8b:57:52:f3:dd:ff:44:
89:bd:38:39:d0:11:61:2c:22:09:83:d4:b4:b9:53:
f4:22:07:d2:56:98:6a:63:66:a0:1f:0d:cb:a5:95:
10:13:9d:33:cf:4c:c4:30:61:8c:f3:94:82:bc:b3:
f9:50:5f:5f:65:91:47:78:38:0d:b1:a5:f0:53:4f:
90:55:fd:56:30:d7:73:38:57:a5:79:a6:ef:4b:9c:
27:1d:6a:67:ec:9d:25:6b:55:41:4f:32:09:b8:7c:
1d:73:67:28:25:e0:f8:0b:ce:82:87:e6:70:86:45:
44:3e:32:04:8d:5b:2e:55:84:b1:9e:7b:c3:e9:75:
23:a6:63:e9:65:8a:c9:23:46:b2:b9:21:28:fd:1d:
7e:3c:1a:51:ed:3f:1c:a7:2d:a8:ed:67:f1:95:8f:
4d:f7:f0:77:48:f4:32:b3:2f:9f:c4:8b:79:63:02:
2f:83:60:c7:e5:0e:64:9f:26:18:4b:c8:41:08:29:
b8:30:b4:12:b3:23:9d:6a:bd:c2:4f:bd:eb:b6:21:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:45:A0:FB:EA:BF:B3:AA:33:DE:EE:EE:86:4C:4B:38:26:4B:2C:51
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/4F384016337211EE9B07310DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.247.133.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:90:31:df:11:a7:9b:28:b6:15:c8:a9:c2:ad:ab:5f:c4:99:
de:72:03:0e:65:e6:3c:88:2f:e6:d9:7b:2e:5c:c4:d6:a4:fb:
5d:ac:66:54:b9:cb:b9:b7:c0:4e:67:63:aa:7d:bd:c2:6a:c3:
32:af:ea:21:c4:35:6b:77:d1:11:aa:06:fd:f0:48:f8:ea:c5:
54:43:1f:2f:14:65:8e:ba:c5:42:cb:63:65:c5:ca:cf:98:b1:
63:4b:98:8d:57:2b:81:34:72:6b:c4:88:56:74:7e:ad:8d:75:
01:da:4a:30:9e:16:b1:50:22:f0:39:dd:f1:b6:52:c7:86:75:
e4:3d:5c:3c:cc:9a:f8:54:6d:91:f7:0c:e0:bf:06:05:a3:47:
71:ef:dc:48:98:30:f9:f6:35:71:16:a7:eb:46:3c:74:5a:89:
d6:0b:31:64:50:b3:18:d1:ca:dc:f8:5d:d4:51:ea:76:6b:d4:
fb:e4:d5:12:4a:1c:46:70:47:71:51:59:13:68:50:bc:ad:b4:
12:ca:a4:3c:7d:70:b3:3e:51:d8:f5:07:ea:b6:9c:ab:b7:91:
43:7b:48:41:ab:2b:14:2d:25:55:1b:c7:77:63:ce:cb:46:95:
4f:f4:40:cc:b9:9d:6a:35:c0:d1:da:2e:df:f5:d2:33:f3:b5:
c7:a5:08:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 02:01:09 2024 by rpki-client on console-ams.rpki-client.org