Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/68D4B7E8368D11EE9F81C622C4F9AE02.roa
File: 68D4B7E8368D11EE9F81C622C4F9AE02.roa (raw, json)
Hash identifier: +1SK85B9Jvx5RjV1KKO+X84QfBrO1Hlth9McuJou5BE=
Subject key identifier: 8E:9E:AE:03:82:E3:F7:93:E4:70:58:8A:70:A6:45:75:14:41:3D:58
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 04C0
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/68D4B7E8368D11EE9F81C622C4F9AE02.roa
Signing time: Tue 05 Sep 2023 00:51:42 +0000
ROA not before: Tue 05 Sep 2023 00:51:42 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 60504
IP address blocks: 43.247.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 10:56:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1216 (0x4c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: Sep 5 00:51:42 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=64f67b9d-7cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:42:99:64:0e:c9:99:0d:f3:37:4b:2b:eb:ba:
e8:50:e9:f2:f8:48:2e:14:58:1e:3f:b8:4e:ee:72:
62:38:3d:17:8e:f4:e2:dc:70:c0:19:30:c6:eb:42:
08:c2:a9:ac:f8:2f:9b:ea:f2:64:33:4d:b3:6e:52:
f4:61:13:c4:69:af:ca:83:48:6a:d4:a3:5c:59:6a:
71:cb:29:91:0b:5c:cf:97:60:bc:e0:f6:cf:d8:4f:
46:4f:81:80:2f:21:0d:d5:24:d8:01:96:97:e4:73:
1f:30:39:88:0d:03:86:94:34:bb:6b:55:72:62:66:
1e:d9:97:02:1a:f5:85:ee:f4:53:1b:0f:8f:2c:4e:
98:7f:2a:aa:ef:8d:ca:06:19:29:f7:8f:b2:78:e6:
b1:c8:03:e6:6d:d4:7f:ca:c9:05:4b:34:be:29:04:
16:80:fb:85:c5:5c:a7:51:e3:73:f8:e4:49:05:3f:
a9:da:8b:ae:11:79:df:6b:89:11:f8:93:63:58:a3:
94:d8:b1:c5:fe:a6:7c:37:e8:3c:f4:6a:69:ea:00:
da:9e:c1:1b:84:89:22:b8:fc:b8:5d:aa:76:a2:a5:
67:43:cd:7a:07:7d:c7:d3:cb:34:b6:2e:da:93:3d:
e6:e8:0a:14:20:b1:5a:0e:44:98:f4:18:c4:96:a6:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9E:AE:03:82:E3:F7:93:E4:70:58:8A:70:A6:45:75:14:41:3D:58
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/68D4B7E8368D11EE9F81C622C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.247.134.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ba:09:49:64:de:fd:e0:e0:75:53:2e:70:58:e4:5f:78:f8:
20:c7:04:9f:ba:c8:c7:35:60:7e:7a:85:3d:9a:89:3a:0d:2f:
95:79:fb:8b:62:0e:d4:aa:71:f9:6d:c7:98:34:0d:da:2e:26:
85:08:aa:de:aa:33:16:6b:b8:ea:93:10:ef:99:56:ef:6a:1e:
cd:e7:bf:59:b3:24:c7:8e:ec:62:ab:1c:6d:84:51:1f:35:52:
6d:e8:1c:f4:73:42:50:16:88:7c:5e:59:ff:81:e5:e1:10:bd:
46:49:a2:81:91:5f:9e:7f:0e:34:c0:8b:df:03:a5:93:d8:5d:
56:12:ca:6b:4d:d8:15:64:41:19:56:ed:28:5d:b4:a5:51:98:
5f:0e:cc:ef:e9:61:dc:f8:93:e4:6b:da:70:92:31:ec:bb:04:
b7:df:9e:e8:ef:7c:bf:84:e4:81:0d:e1:da:d0:45:57:d8:28:
d2:bf:bb:12:d6:d2:8b:31:d2:e8:3b:dc:a8:b3:9d:42:9a:d7:
5e:f9:2b:66:68:5e:17:6e:0d:d4:5c:3e:90:2a:a1:00:55:da:
ce:a3:56:be:d3:6a:24:53:47:f4:83:cb:0b:25:02:ba:c3:5d:
bc:28:8d:5e:11:a3:cd:40:80:07:b2:c7:dc:6d:b4:a2:90:88:
3b:4c:40:6a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF
QTNDNzEwMTMwHhcNMjMwOTA1MDA1MTQyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGY2N2I5ZC03Y2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA10KZZA7JmQ3zN0sr67roUOny+EguFFgeP7hO7nJiOD0XjvTi3HDAGTDG60II
wqms+C+b6vJkM02zblL0YRPEaa/Kg0hq1KNcWWpxyymRC1zPl2C84PbP2E9GT4GA
LyEN1STYAZaX5HMfMDmIDQOGlDS7a1VyYmYe2ZcCGvWF7vRTGw+PLE6Yfyqq743K
Bhkp94+yeOaxyAPmbdR/yskFSzS+KQQWgPuFxVynUeNz+ORJBT+p2ouuEXnfa4kR
+JNjWKOU2LHF/qZ8N+g89Gpp6gDansEbhIkiuPy4Xap2oqVnQ816B33H08s0ti7a
kz3m6AoUILFaDkSY9BjElqZOjQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI6ergOC
4/eT5HBYinCmRXUUQT1YMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2
NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF
Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvNjhENEI3RTgz
NjhEMTFFRTlGODFDNjIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAr94YwDQYJKoZIhvcNAQELBQADggEBAKy6CUlk3v3g4HVT
LnBY5F94+CDHBJ+6yMc1YH56hT2aiToNL5V5+4tiDtSqcfltx5g0DdouJoUIqt6q
MxZruOqTEO+ZVu9qHs3nv1mzJMeO7GKrHG2EUR81Um3oHPRzQlAWiHxeWf+B5eEQ
vUZJooGRX55/DjTAi98DpZPYXVYSymtN2BVkQRlW7ShdtKVRmF8OzO/pYdz4k+Rr
2nCSMey7BLffnujvfL+E5IEN4drQRVfYKNK/uxLW0osx0ug73KiznUKa1175K2Zo
XhduDdRcPpAqoQBV2s6jVr7TaiRTR/SDywslArrDXbwojV4Ro81AgAeyx9xttKKQ
iDtMQGo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org