Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/C91CBAA278D511EF906BE750C4F9AE02.roa
File: C91CBAA278D511EF906BE750C4F9AE02.roa (raw, json)
Hash identifier: pdlmO33Wna1ktYXCtTbQf+xfVePgK3ZcYD25tV6gbb0=
Subject key identifier: 10:BD:DE:98:16:07:E6:DF:51:77:77:C3:94:5A:C9:D2:4C:67:50:EF
Certificate issuer: /CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
Certificate serial: 1BDB
Authority key identifier: A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/C91CBAA278D511EF906BE750C4F9AE02.roa
Signing time: Sun 22 Sep 2024 11:29:26 +0000
ROA not before: Sun 22 Sep 2024 11:29:26 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 834
IP address blocks: 43.228.144.0/22 maxlen: 24
103.84.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 13:22:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7131 (0x1bdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
Validity
Not Before: Sep 22 11:29:26 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=66efff95-a124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:04:24:a1:de:5a:d3:e5:f5:db:33:83:61:
c2:5d:31:27:96:fc:86:40:c4:71:2e:5b:c5:62:f2:
78:b2:5f:be:08:a3:44:95:6b:df:1c:e4:29:ce:93:
0f:a6:54:cf:f9:81:02:2f:c9:f8:b1:b8:28:00:ff:
1a:00:05:3a:d9:a4:69:99:23:8c:55:2c:c4:83:48:
89:1d:e1:ad:77:88:d2:10:41:fe:88:ce:90:6e:ea:
81:a0:a1:71:c0:b4:af:83:e9:34:10:d9:14:c5:bb:
51:aa:87:a1:94:b1:aa:87:aa:7c:77:44:64:2c:e3:
0f:5b:7c:ff:36:e7:96:37:0a:95:e9:4f:d0:d0:f3:
17:ca:40:99:30:14:6f:a6:91:4a:55:20:99:d4:8d:
7b:67:32:40:c3:06:a2:82:a0:64:42:a6:e1:b7:0c:
08:c1:f9:71:d3:62:00:b1:a1:71:b4:86:cc:c1:40:
2a:a8:44:54:f7:7f:21:d2:0a:3e:6d:c8:f7:a2:8b:
39:c6:64:33:8f:4e:c2:1c:1a:c7:12:a3:ff:4d:a5:
56:b9:ba:6c:02:50:64:8e:87:b8:c8:70:8a:65:7c:
40:0d:23:e5:97:17:29:e4:2e:59:15:f1:46:de:0b:
00:f0:8a:d5:40:61:e6:76:3d:98:6e:c0:d4:20:0c:
61:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BD:DE:98:16:07:E6:DF:51:77:77:C3:94:5A:C9:D2:4C:67:50:EF
X509v3 Authority Key Identifier:
keyid:A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/C91CBAA278D511EF906BE750C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.144.0/22
103.84.216.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:d0:fb:69:46:d4:de:18:3d:c1:a1:a7:e8:43:27:78:90:2f:
44:26:00:ae:dd:c5:1f:66:84:cb:b8:48:4a:0d:07:2b:a9:c2:
f5:79:17:bb:0b:79:65:6f:c4:2f:77:d8:65:ab:0d:43:73:25:
59:d3:4c:2e:fe:bd:59:75:c0:47:79:6a:ed:7a:92:23:28:e8:
f2:00:a3:71:25:81:ce:ef:bb:6b:a2:7d:62:32:15:53:72:40:
0f:19:88:0f:81:b4:ed:81:42:e9:f0:3b:1d:26:3c:bb:92:9d:
38:a2:cd:55:54:8c:79:a8:27:e6:ad:f2:86:b8:4b:80:b6:32:
7e:4d:87:c4:c2:9a:88:46:97:a0:4a:33:cd:e8:0e:2d:28:25:
63:f8:dd:31:f0:f1:fb:a1:46:a9:95:5b:e9:70:81:bb:30:13:
bb:8c:95:6f:e0:c7:85:5e:36:5c:4d:8b:23:05:6e:57:f4:03:
05:90:ae:b5:b2:6f:2d:a3:13:f4:dc:84:7e:3e:fc:4d:b0:61:
08:48:c5:6f:fb:f8:06:54:38:2a:ff:ab:9a:7a:18:62:5d:4a:
84:9c:b3:74:60:ce:9d:70:b1:c9:9f:55:70:bd:9b:f7:07:35:
92:86:1b:71:b2:da:b5:71:82:a9:0a:3a:a9:f1:57:78:0b:4a:
c2:b8:80:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 15:32:01 2024 by rpki-client on console-fra.rpki-client.org