Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/1E22CC82D3BB11EE92AED83EC4F9AE02.roa
File: 1E22CC82D3BB11EE92AED83EC4F9AE02.roa (raw, json)
Hash identifier: prp/ZUfa0EJ1Wz03IAZipq06bW7R9nvV/d8oMQFLDcw=
Subject key identifier: 7A:65:24:8D:12:9C:A3:25:9C:7C:79:AC:0E:00:9B:6F:FF:60:20:96
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 0291
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/1E22CC82D3BB11EE92AED83EC4F9AE02.roa
Signing time: Mon 25 Mar 2024 05:01:12 +0000
ROA not before: Mon 25 Mar 2024 05:01:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 43.243.193.0/24 maxlen: 24
45.113.82.0/24 maxlen: 24
103.229.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 18:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657 (0x291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Validity
Not Before: Mar 25 05:01:12 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66010518-bee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:fc:50:e2:79:c2:5e:89:59:b2:0a:7a:7c:
59:01:07:a4:e1:0b:b2:8e:43:ae:d6:89:66:5a:cf:
33:99:ba:e5:d7:21:3a:07:5c:36:25:3d:b7:1e:98:
f2:3a:87:5d:9e:53:a4:51:b1:cf:67:d2:90:fc:64:
de:4c:59:67:40:9e:48:5a:50:bb:0e:8b:95:49:5d:
c6:ed:47:48:3d:8f:9c:42:46:05:39:1d:74:b7:b9:
0b:b7:4a:8c:e3:2e:5a:bc:64:c8:5d:1e:e5:69:fc:
6b:60:93:96:7e:9b:68:46:96:1f:a9:95:ff:09:b8:
37:d7:4f:4c:ed:9d:70:0b:77:15:1a:21:c1:db:79:
54:3e:17:32:e7:b2:28:65:9c:3f:fa:f2:3a:de:6f:
8f:d9:ea:15:df:7f:9e:b0:b1:27:37:5e:84:1d:34:
a9:1f:f2:69:09:82:01:02:56:87:76:bc:8c:fa:4b:
4c:53:d1:e1:7b:e3:28:71:36:c8:75:b0:ce:f3:a0:
3e:6d:a5:3f:fd:f4:b2:cf:21:a4:41:1c:79:9a:e5:
10:5b:04:20:a6:53:dc:00:d2:0e:08:06:50:f2:b0:
4a:3d:b7:54:72:e1:97:38:bf:c0:14:fa:cf:20:6f:
52:cc:43:2e:3e:5a:33:25:ee:d9:e6:3b:97:bb:1a:
f5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:65:24:8D:12:9C:A3:25:9C:7C:79:AC:0E:00:9B:6F:FF:60:20:96
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/1E22CC82D3BB11EE92AED83EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.193.0/24
45.113.82.0/24
103.229.118.0/24
Signature Algorithm: sha256WithRSAEncryption
91:fd:b9:9e:a5:3b:f6:10:8d:d3:c3:27:6f:db:3a:81:ba:38:
46:4d:f8:fc:5c:2c:cd:cf:f5:b4:83:ec:d0:39:d7:eb:5d:dc:
cf:ea:00:42:ca:77:a9:e9:f5:02:9b:57:e0:26:ce:e3:08:f0:
42:5b:ba:5f:62:0e:d3:cf:e9:0a:ee:ad:3b:54:af:83:39:30:
43:df:db:7e:af:9b:a3:b5:62:4e:f1:72:03:14:f5:30:dd:9e:
bb:21:e0:dc:dc:0b:43:29:76:4c:ff:8e:41:12:16:f2:e8:de:
99:ce:6e:a2:ec:f5:15:50:01:25:29:30:f0:a9:c2:b4:fd:ca:
66:ff:e6:c3:23:26:e1:87:3a:ec:42:38:cc:75:84:32:a0:f7:
53:de:1e:a0:24:bf:35:c4:65:1e:8d:dd:07:a6:c0:63:eb:40:
69:f7:4f:eb:a3:f9:52:c8:01:84:ec:8e:7b:b4:c8:52:5f:78:
13:03:30:13:b4:90:d9:55:ca:74:79:29:ac:5d:5d:d6:33:02:
3b:b6:c2:32:7d:9c:b3:9a:2b:93:7f:39:29:5a:e6:08:1b:74:
4c:06:7c:5e:67:03:0b:21:53:0c:c9:62:71:68:d3:9c:ab:41:
08:c1:78:64:0a:88:6a:4d:08:0b:2b:03:a7:31:81:07:05:75:
a5:ee:f0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:13:26 2024 by rpki-client on console-ams.rpki-client.org