Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/89959B0E276111EE9F1CE340C4F9AE02.roa
File: 89959B0E276111EE9F1CE340C4F9AE02.roa (raw, json)
Hash identifier: 6Zs6JdLCH21Oc0LlLyanxz6xB5jEQ26CvV97TFOa3lU=
Subject key identifier: 6A:F9:83:10:78:36:82:BD:84:2E:13:48:A2:F6:C5:44:58:47:CE:B6
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 062B
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/89959B0E276111EE9F1CE340C4F9AE02.roa
Signing time: Tue 03 Sep 2024 01:14:12 +0000
ROA not before: Tue 03 Sep 2024 01:14:12 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 150716
IP address blocks: 43.254.164.0/24 maxlen: 24
103.240.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Sep 2024 23:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1579 (0x62b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: Sep 3 01:14:12 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66d662e3-3d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:39:3e:d5:72:13:77:c4:e2:d8:3e:71:34:
f1:77:3a:6f:68:d8:4b:3a:2a:17:dd:91:12:67:df:
db:8a:9c:2c:69:cf:3f:e7:e5:1f:5f:d1:35:2b:6f:
3d:20:71:7a:6d:29:45:e8:b9:cb:e7:6d:2e:18:a9:
c2:43:00:7d:4a:40:38:ba:ac:e9:15:5a:b0:85:4b:
1c:83:18:87:ae:38:4e:9e:4d:7c:63:98:fd:a7:71:
20:b7:c7:02:a7:f8:2a:94:ee:ad:09:ae:b8:93:f2:
2e:93:6a:77:da:b2:a9:a6:ba:66:ca:d2:c6:1f:8e:
17:a0:f5:b7:51:40:d1:c0:cb:58:5f:3e:20:53:ab:
0a:09:1d:d8:2a:5c:ce:22:0c:83:9b:a9:81:46:dc:
bc:f6:1b:ac:ac:4b:44:f6:27:2c:67:58:75:e1:e5:
aa:5b:50:6f:90:23:c3:23:7e:d6:3c:9d:67:84:76:
4a:f0:72:14:70:0d:5e:61:fc:11:ae:51:d9:bc:37:
62:b7:50:6c:6c:74:10:01:3c:4c:1c:ab:9a:d1:c7:
ec:8b:b7:02:85:97:52:41:7e:75:79:cc:9b:a2:24:
e3:81:68:c7:6c:7b:11:55:8f:6d:41:41:57:e8:84:
15:d1:52:f0:fc:f7:f2:71:57:8c:fb:90:ae:90:a6:
f4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F9:83:10:78:36:82:BD:84:2E:13:48:A2:F6:C5:44:58:47:CE:B6
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/89959B0E276111EE9F1CE340C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.164.0/24
103.240.196.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:9a:9c:8d:90:a8:95:79:c2:9a:f3:a0:fe:b6:a9:25:ea:ef:
7d:ce:a9:a5:9c:53:eb:d4:12:00:f3:ca:04:18:7d:eb:a3:0c:
41:b7:6d:a2:e6:e7:c1:f3:fb:c5:61:4c:c8:67:77:fc:51:71:
9b:2d:56:fd:1a:cf:61:1a:34:45:8c:d3:65:d0:2e:9b:b4:d9:
9f:0c:c3:9a:92:70:52:c5:d5:52:f7:68:51:8f:4a:e0:90:30:
20:17:57:d2:a5:2b:db:26:5b:f0:41:65:74:fb:ed:0c:d2:9c:
3c:79:91:32:f2:d5:0f:4c:d2:46:0a:06:e2:bc:05:97:07:54:
f6:02:1e:c7:9f:2e:07:b7:7c:3e:81:24:77:36:cd:87:b3:13:
18:ba:b6:c0:e5:51:5e:9b:7b:ef:18:3a:10:ca:54:6b:05:42:
c3:e2:dd:77:bb:29:df:22:e0:39:ab:77:74:bd:a3:35:ce:26:
29:ca:4c:5f:b2:ef:af:d4:53:df:7e:9b:e7:50:75:28:1e:56:
43:d5:45:65:6c:a5:74:3f:04:5e:cb:97:34:d4:6f:7f:07:52:
a5:e8:87:cb:1d:b6:cd:e4:63:45:a8:9f:e0:c0:ec:40:c0:40:
cf:51:80:c5:e7:15:a1:e8:de:04:3d:bb:54:13:e2:7a:fd:3f:
a2:39:34:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 02:01:09 2024 by rpki-client on console-ams.rpki-client.org