Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/9CCBF6DC7CD311EFA1EC5454C4F9AE02.roa
File: 9CCBF6DC7CD311EFA1EC5454C4F9AE02.roa (raw, json)
Hash identifier: oZkTyd8NdbdsGCCCLlBejRBB4vOJsBuBr66o0+SzbqY=
Subject key identifier: 9C:35:00:25:47:0B:C6:8B:71:76:7F:FF:DD:DC:5E:67:5C:C4:82:C9
Certificate issuer: /CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
Certificate serial: 1BE3
Authority key identifier: A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/9CCBF6DC7CD311EFA1EC5454C4F9AE02.roa
Signing time: Fri 27 Sep 2024 13:24:08 +0000
ROA not before: Fri 27 Sep 2024 13:24:08 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 18019
IP address blocks: 43.228.144.0/22 maxlen: 24
103.84.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 12:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7139 (0x1be3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
Validity
Not Before: Sep 27 13:24:08 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=66f6b1f7-a060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a9:c7:03:da:e9:2c:b6:04:b1:94:cd:60:8e:
3c:5a:ff:a4:b7:ac:98:ea:31:90:a4:ab:35:40:4e:
c3:02:65:a3:16:6c:44:64:d3:87:0c:22:ef:b7:5c:
1c:77:66:36:2b:c4:49:05:df:83:f2:fc:5e:c0:a4:
e8:74:09:3b:62:2f:ee:d6:5b:72:c6:fb:8c:52:63:
ea:bc:5a:28:d3:51:42:c4:65:7a:24:b0:85:17:ca:
23:9c:1a:6c:67:66:73:29:3b:f0:d2:a8:7d:a7:2f:
b6:02:b2:7a:98:bb:a8:30:ac:0a:b9:93:9f:3b:7a:
a3:db:73:4e:d6:d0:54:aa:e5:43:63:93:16:0c:a6:
45:01:0a:ac:4c:0f:15:df:95:6d:c3:56:75:87:ac:
3a:57:f4:67:e8:8c:d4:98:28:d4:6d:8e:29:2d:42:
b8:42:67:9d:4d:5c:9f:71:7b:8e:50:78:df:5f:67:
6b:17:f4:74:1e:0d:17:c1:08:09:28:62:76:f3:c5:
62:3a:a4:69:86:f9:77:4f:46:7d:29:e1:84:6c:a4:
c7:62:67:f0:d0:80:07:d9:74:7b:b1:ca:f4:dc:af:
59:8d:87:24:e4:b7:d0:05:4f:3e:48:8a:8a:76:8f:
ad:48:78:9d:51:05:1b:81:ab:87:58:d8:70:d0:f3:
2a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:35:00:25:47:0B:C6:8B:71:76:7F:FF:DD:DC:5E:67:5C:C4:82:C9
X509v3 Authority Key Identifier:
keyid:A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/9CCBF6DC7CD311EFA1EC5454C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.144.0/22
103.84.216.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:20:b9:d2:7b:a5:86:19:b4:00:d7:e1:97:c0:cc:05:e8:3a:
04:35:1d:fb:b2:2c:d8:91:64:97:f9:b1:5a:24:ca:77:d2:00:
c7:e9:f2:a8:25:b0:ab:b6:79:0c:51:da:ac:fb:4a:62:8e:4c:
9b:76:a1:fa:7c:63:39:e1:0b:93:95:aa:2f:c4:80:98:01:f1:
ec:6a:4f:31:8f:08:58:e5:29:26:b8:26:03:5a:1f:de:91:9f:
1c:73:39:cf:6c:46:a5:63:c5:9c:3a:45:ed:10:4a:36:aa:dd:
0a:2b:8e:0d:03:48:6c:9b:75:86:ae:56:38:e0:42:1b:f1:29:
98:98:38:4e:dd:12:7b:5c:83:1f:b2:4f:e1:86:fd:12:0f:df:
6e:26:06:65:6e:b9:0f:06:72:92:44:07:e8:10:0d:29:83:de:
5c:4c:79:4d:6f:fa:d7:ee:a7:fd:f1:66:ef:f6:67:b6:bf:32:
46:71:2f:0d:62:ca:b9:62:73:2e:c3:b5:d5:5d:b6:ff:49:fd:
8d:90:86:b3:59:99:a2:1b:db:c5:99:a7:4b:f5:71:4b:20:21:
cc:1d:c2:9d:d8:0e:91:3e:49:9b:9b:e3:b8:c2:0d:07:98:38:
61:e8:03:b0:44:ff:f4:84:c6:cc:67:21:ff:4a:bb:73:c8:ab:
98:d2:00:1f
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICG+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI5NzgxMTAvBgNVBAUTKEE4M0IwMUM5NkU3OTRERThDRjhGMUM5RkE4NjQyMTI5
NkRBODcxQzQwHhcNMjQwOTI3MTMyNDA4WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmY2YjFmNy1hMDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4qnHA9rpLLYEsZTNYI48Wv+kt6yY6jGQpKs1QE7DAmWjFmxEZNOHDCLvt1wc
d2Y2K8RJBd+D8vxewKTodAk7Yi/u1ltyxvuMUmPqvFoo01FCxGV6JLCFF8ojnBps
Z2ZzKTvw0qh9py+2ArJ6mLuoMKwKuZOfO3qj23NO1tBUquVDY5MWDKZFAQqsTA8V
35Vtw1Z1h6w6V/Rn6IzUmCjUbY4pLUK4QmedTVyfcXuOUHjfX2drF/R0Hg0XwQgJ
KGJ288ViOqRphvl3T0Z9KeGEbKTHYmfw0IAH2XR7scr03K9ZjYck5LfQBU8+SIqK
do+tSHidUQUbgauHWNhw0PMq5wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJw1ACVH
C8aLcXZ//93cXmdcxILJMB8GA1UdIwQYMBaAFKg7AclueU3oz48cn6hkISltqHHE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjk3OC9GQzRBMkEyMEU5
MDExMUU2OEMyQ0QzMTFDNEY5QUUwMi9xRHNCeVc1NVRlalBqeHlmcUdRaEtXMm9j
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FEc0J5VzU1VGVqUGp4eWZxR1FoS1cyb2NjUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUI5NzgvRkM0QTJBMjBFOTAxMTFFNjhDMkNEMzExQzRGOUFFMDIvOUNDQkY2REM3
Q0QzMTFFRkExRUM1NDU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAIr5JADBAJnVNgwDQYJKoZIhvcNAQELBQADggEBAH4gudJ7
pYYZtADX4ZfAzAXoOgQ1HfuyLNiRZJf5sVokynfSAMfp8qglsKu2eQxR2qz7SmKO
TJt2ofp8YznhC5OVqi/EgJgB8exqTzGPCFjlKSa4JgNaH96RnxxzOc9sRqVjxZw6
Re0QSjaq3Qorjg0DSGybdYauVjjgQhvxKZiYOE7dEntcgx+yT+GG/RIP324mBmVu
uQ8GcpJEB+gQDSmD3lxMeU1v+tfup/3xZu/2Z7a/MkZxLw1iyrlicy7DtdVdtv9J
/Y2QhrNZmaIb28WZp0v1cUsgIcwdwp3YDpE+SZub47jCDQeYOGHoA7BE//SExsxn
If9Ku3PIq5jSAB8=
-----END CERTIFICATE-----
Generated at Wed Nov 20 15:03:34 2024 by rpki-client on console-fra.rpki-client.org