Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/8906E6B08A9011EE87C34B51C4F9AE02.roa
File: 8906E6B08A9011EE87C34B51C4F9AE02.roa (raw, json)
Hash identifier: LElpf+o+czjA7ZO/4/g2RiLyCacb7csVrtqMAzYRayg=
Subject key identifier: CD:E2:A2:2D:3A:7C:42:05:77:0C:46:90:23:74:00:E7:F1:B3:9E:06
Certificate issuer: /CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
Certificate serial: 0804
Authority key identifier: 3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/8906E6B08A9011EE87C34B51C4F9AE02.roa
Signing time: Fri 24 Nov 2023 06:13:08 +0000
ROA not before: Fri 24 Nov 2023 06:13:08 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 137184
IP address blocks: 202.43.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 03:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2052 (0x804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
Validity
Not Before: Nov 24 06:13:08 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65603ef3-0376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b4:be:fa:c7:8d:7f:83:64:bb:95:c3:b2:e6:
a9:4b:91:e3:b4:cc:58:10:07:4e:0c:f2:1d:69:13:
89:5a:1c:ba:54:d6:05:50:3f:d5:4f:01:d4:66:38:
0f:1e:cc:bf:ab:31:27:4a:84:cd:d5:fc:3d:70:a9:
59:2f:1b:f9:9e:68:14:c0:9d:35:c0:15:61:0d:60:
c4:e4:e8:ba:1a:c8:38:f7:c3:4d:48:0b:4d:36:b4:
19:fb:69:5f:ac:3f:ce:3c:4e:88:42:b1:e1:d9:7b:
64:39:26:96:93:b5:c9:61:4e:22:b7:6b:40:8a:49:
4f:59:aa:34:0d:0c:68:66:b1:2a:42:d5:a5:33:b7:
1a:83:66:1c:04:dc:6f:a0:5d:e5:94:a8:de:8b:97:
a1:68:75:30:38:16:0e:3f:de:2f:be:73:a4:29:11:
19:c2:5f:e0:1b:42:82:36:5a:d3:32:15:38:ad:91:
6c:5b:58:fb:05:13:8a:c9:9e:13:4d:9b:40:dd:60:
4a:b3:e5:8c:19:fd:d4:7d:42:34:72:ee:4c:28:c6:
9a:b7:f7:9f:3e:13:d9:fe:19:84:16:8c:ec:da:0c:
42:ee:a3:c5:9a:6d:85:f2:dd:44:3a:c6:38:80:52:
a5:12:a7:75:4d:43:24:9b:80:5a:b3:89:68:90:bc:
71:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E2:A2:2D:3A:7C:42:05:77:0C:46:90:23:74:00:E7:F1:B3:9E:06
X509v3 Authority Key Identifier:
keyid:3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/8906E6B08A9011EE87C34B51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.43.225.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:20:ed:e4:34:43:78:b4:63:be:b5:80:e2:24:4a:1b:82:89:
5e:fe:ea:bb:36:e4:20:02:26:3c:49:1d:22:10:f3:d4:44:d3:
6d:88:71:64:0d:bf:13:43:93:10:42:6b:70:f8:aa:83:9e:4b:
11:16:be:4d:14:bd:65:a3:5d:6d:d6:b3:20:d7:b2:94:96:07:
45:27:bd:4e:f9:0c:11:d0:19:12:a0:8f:9d:06:63:0c:41:b9:
07:69:26:3a:f2:85:95:d3:51:73:82:f3:93:c1:d7:71:4c:a1:
ff:41:a7:29:7c:65:23:8a:7c:5b:63:9e:68:7e:d1:46:b1:1a:
95:f8:8a:5a:10:1d:5b:0b:1e:8a:02:6b:fe:de:20:46:79:32:
ea:30:e6:ff:f3:d1:9b:78:6f:eb:1b:db:9a:44:30:5b:cd:dc:
93:67:e4:cf:74:9c:a2:ef:1a:bb:e5:7a:ed:9f:07:a8:4c:84:
54:e6:c2:78:3a:90:b6:36:19:70:19:a5:ff:cf:4b:37:41:aa:
30:0c:d1:57:13:55:5b:97:6a:fe:f5:70:2c:fb:d1:8b:99:07:
e2:fe:4a:cb:16:75:15:cc:12:04:7f:08:40:16:be:8c:0b:e6:
a7:ab:39:e6:a7:3f:5b:e5:87:0b:70:25:62:87:02:d4:0f:ca:
b3:3a:91:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 05:47:25 2024 by rpki-client on console-ams.rpki-client.org