Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/2DFB1D7457BC11EEBA1AD70AC4F9AE02.roa
File: 2DFB1D7457BC11EEBA1AD70AC4F9AE02.roa (raw, json)
Hash identifier: YkM37z/T4oWrVpAt97W8K/ctbnIa6u/o3bt6vOdaAEQ=
Subject key identifier: CB:F4:E5:BC:56:49:6C:33:A8:A5:02:BF:3B:0B:C0:3B:F1:7B:BF:08
Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial: 03DF
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/2DFB1D7457BC11EEBA1AD70AC4F9AE02.roa
Signing time: Wed 20 Sep 2023 14:49:09 +0000
ROA not before: Wed 20 Sep 2023 14:49:09 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 9009
IP address blocks: 43.226.228.0/24 maxlen: 24
43.226.230.0/24 maxlen: 24
43.226.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 991 (0x3df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Validity
Not Before: Sep 20 14:49:09 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=650b0665-8bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:c0:ed:13:fb:22:e4:79:4d:19:e4:ee:ef:
75:82:75:89:79:d4:c1:46:bf:a5:55:ae:6f:99:30:
cb:e3:a8:05:86:e1:f3:8c:04:10:59:38:d9:9b:40:
81:17:19:8f:3d:d5:a0:61:de:ee:5c:b1:30:68:7f:
eb:8f:d7:fb:8d:fc:45:70:1b:43:7d:dc:52:4b:d4:
5d:17:74:5a:bf:81:f2:e9:f9:90:15:fa:23:b9:9b:
76:50:df:28:e4:dd:a0:24:38:2c:f8:47:53:c1:b9:
e4:de:fa:e0:7d:0f:20:3a:07:c2:95:54:d2:b3:95:
fb:c1:22:34:f4:59:4d:87:12:78:1f:4d:c9:96:1a:
14:c2:0d:80:5a:ba:ca:48:82:5f:c6:27:e0:23:46:
e1:9d:4f:66:4b:46:eb:52:f3:51:27:9c:88:4e:58:
e4:c6:6b:34:f8:69:0d:3b:2b:f5:8f:77:e1:ef:bf:
02:0c:0d:53:cc:d2:97:f9:33:fd:65:06:e4:db:29:
4b:bd:2e:21:76:04:11:17:5b:7a:44:74:8f:ab:ad:
c6:86:6c:3e:88:78:17:46:a1:dd:d3:70:d3:bd:82:
78:82:8a:51:9d:ff:62:ca:aa:2f:ce:3c:b6:9e:33:
7c:9d:71:ce:7e:1a:48:5c:8d:a9:b8:15:32:ed:e4:
00:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F4:E5:BC:56:49:6C:33:A8:A5:02:BF:3B:0B:C0:3B:F1:7B:BF:08
X509v3 Authority Key Identifier:
keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/2DFB1D7457BC11EEBA1AD70AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.228.0/24
43.226.230.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:32:8f:fa:ec:7a:8c:66:29:40:3a:06:a8:e5:ff:43:b9:31:
b7:88:42:09:c8:40:fe:a0:14:d7:0d:bf:09:08:6b:79:48:59:
ed:2e:59:a9:89:14:49:84:e9:1a:33:ea:40:0f:80:b7:b1:5f:
af:c4:dc:a9:94:82:7f:81:cc:db:62:55:ae:59:94:0e:be:62:
ea:0d:11:82:31:d6:42:ab:1b:99:e3:52:17:59:52:4a:80:34:
24:a2:7a:ea:41:de:e4:9f:5b:4e:02:1e:20:5a:52:e3:06:42:
fc:5c:94:b7:bf:d1:38:82:50:56:58:9f:48:6a:53:d0:25:1f:
29:d2:24:d7:ef:f9:df:33:cd:04:a9:14:f6:6c:94:a1:2f:91:
15:54:29:70:6c:45:9b:54:51:11:0e:d8:28:55:52:b0:e4:07:
77:71:66:9d:a0:2a:d5:2c:72:2c:28:ec:9f:04:f4:d5:e0:20:
c4:ae:e6:5d:43:76:9b:c4:70:21:3f:a8:c1:7e:c1:5b:6b:cd:
b8:e0:c3:6a:e1:9a:8c:f5:97:ff:06:ed:eb:7b:eb:98:a9:22:
e5:c1:b9:ae:62:cd:e4:74:a5:22:cc:06:bb:6d:3e:2e:61:04:
de:40:4a:86:1a:fc:62:e7:d1:1b:51:e9:7d:fa:25:f9:d2:a3:
7c:e9:7e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 13:07:46 2023 by rpki-client on console-fra.rpki-client.org