Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/EED0B20C82EB11EEBE17CF64C4F9AE02.roa
File: EED0B20C82EB11EEBE17CF64C4F9AE02.roa (raw, json)
Hash identifier: SwBo+OcsaURt95JqH6PW/tQ/o8ENThL7XYVsUvLLJ9Y=
Subject key identifier: 40:40:7E:AA:84:B2:0B:18:96:C6:99:64:42:47:05:6C:58:54:6E:C0
Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial: 0435
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/EED0B20C82EB11EEBE17CF64C4F9AE02.roa
Signing time: Thu 11 Jan 2024 01:43:21 +0000
ROA not before: Thu 11 Jan 2024 01:43:21 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 9009
IP address blocks: 43.226.228.0/24 maxlen: 24
43.226.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 May 2024 12:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1077 (0x435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Validity
Not Before: Jan 11 01:43:21 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=659f47b8-f6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:99:3d:35:b6:cc:0c:fe:59:63:d7:20:c4:97:
9e:61:3a:35:67:02:bb:de:ad:2c:6d:30:50:f3:fa:
02:9d:86:0d:34:fd:16:5a:6d:f7:58:83:53:b9:75:
76:99:b9:b8:1a:d1:b8:87:ac:1b:df:7a:6c:b7:a4:
31:1b:c0:74:1d:31:a0:b8:b9:f8:56:3b:34:9c:b9:
9c:c7:ce:c8:cd:b6:5e:00:be:32:05:2c:4c:16:88:
95:4e:77:50:de:75:95:c0:ba:65:f4:0e:39:6c:04:
00:5c:dd:7a:0d:6a:4b:78:53:67:84:9a:4f:4f:22:
53:13:b7:4b:ca:ee:00:1e:1d:25:3d:eb:ea:5e:f1:
99:91:2f:da:48:0a:ae:1c:0e:71:1e:35:5e:90:49:
5e:72:f8:3d:a2:81:da:d5:13:18:08:00:7e:3e:e9:
2f:72:8f:3a:4e:70:a8:8c:fd:87:74:fd:0f:53:a4:
8b:d3:45:7b:1f:3e:56:d2:57:05:93:f1:c2:86:b5:
b2:55:7e:9b:cd:2d:45:62:b8:69:39:5b:b8:3c:ca:
74:fd:a2:c0:a3:2b:f6:31:bd:d5:a5:c4:39:dc:3b:
8b:4f:19:ab:83:3b:a9:25:91:07:28:fb:83:16:d8:
d2:ef:81:e6:30:4d:b1:a1:9b:5d:d1:67:b8:09:a0:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:40:7E:AA:84:B2:0B:18:96:C6:99:64:42:47:05:6C:58:54:6E:C0
X509v3 Authority Key Identifier:
keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/EED0B20C82EB11EEBE17CF64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.228.0/24
43.226.230.0/24
Signature Algorithm: sha256WithRSAEncryption
86:84:f1:a8:a9:5d:95:49:a1:b4:50:38:31:f9:bf:07:65:49:
8f:4b:ed:e8:73:74:f5:c5:12:c9:b2:55:8c:01:e1:d0:46:ef:
c8:48:7d:a1:ea:28:db:0a:37:8b:67:40:85:78:58:a3:7c:d7:
f6:c6:1d:7c:9c:20:64:ce:8a:89:02:20:61:69:b6:e7:8d:30:
9b:c7:79:2b:88:4e:d3:44:b4:ea:da:6f:93:da:fa:de:89:07:
c7:ec:c3:bc:c1:54:33:b7:b5:d1:9c:d7:72:9e:55:14:80:0b:
9c:4e:9d:b9:66:10:24:6a:69:dd:86:3a:95:2c:6a:a1:18:e4:
47:70:df:43:aa:d6:94:55:2a:11:72:f2:cc:41:47:64:00:91:
41:86:8c:dd:37:9e:3a:cc:c0:dd:0f:6a:f4:46:04:ae:1b:a4:
53:ee:b7:77:7a:7b:c2:6f:ed:c2:0f:e4:bc:94:35:dd:3e:4a:
75:2c:f2:d5:af:ed:ce:10:a1:66:af:16:fb:eb:ee:d3:68:a8:
d3:1b:c3:f2:b6:61:9a:23:87:5e:3d:e7:d6:a8:cf:35:de:b0:
b2:27:67:4c:8b:f2:75:cb:4a:08:f6:54:6b:e8:db:df:06:6a:
b9:24:f9:7e:cd:81:fb:39:1a:b7:76:42:5e:ff:2f:c1:5f:e9:
d0:7b:62:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org