Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/3DADE67CD9E811EDBC8C0E47C4F9AE02.roa
File: 3DADE67CD9E811EDBC8C0E47C4F9AE02.roa (raw, json)
Hash identifier: jxX24foai43JI+MBJcuh2F6lL7hIccHAzXxcnpxjMUI=
Subject key identifier: F9:71:72:78:10:F7:CD:96:65:82:D4:70:7F:9F:D9:93:CC:02:5A:63
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 01B1
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/3DADE67CD9E811EDBC8C0E47C4F9AE02.roa
Signing time: Sat 27 May 2023 00:44:40 +0000
ROA not before: Sat 27 May 2023 00:44:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 43.243.195.0/24 maxlen: 24
103.229.116.0/24 maxlen: 24
103.229.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Validity
Not Before: May 27 00:44:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64715278-0644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:a1:fb:13:4a:c0:3c:9b:88:e3:18:d2:17:
bd:7e:61:02:60:e2:9e:c2:44:80:3d:21:8e:2f:9b:
a7:a8:50:5e:fd:f3:63:be:50:2f:69:88:1d:fb:95:
d8:82:e7:bf:d1:36:bb:09:ca:51:4f:66:2f:42:cc:
35:d7:b4:92:bf:dc:65:a7:03:7d:08:26:7d:52:34:
df:11:cc:73:46:53:1c:f0:10:cf:a6:d8:5f:ac:2d:
a9:c8:83:95:4f:b9:b0:22:7e:de:92:de:40:d2:e6:
a6:25:95:de:ca:be:47:9d:14:df:86:7a:60:a1:33:
d6:93:15:a9:3d:b6:16:ad:4f:a5:34:df:c7:ea:1d:
bc:b4:39:04:50:20:76:af:b3:66:54:56:65:4d:cc:
63:eb:d5:75:ea:45:fd:32:9c:50:49:59:7a:ad:f9:
84:2a:c1:19:34:02:0c:d4:74:21:ba:4b:51:43:7c:
e7:e0:a5:a9:f2:dd:61:e1:d9:c9:67:a6:dd:30:ab:
38:56:2e:99:d0:e6:5a:d3:de:71:71:be:59:16:10:
62:7c:e7:e7:24:df:3c:5e:76:ec:a5:5d:6d:ac:96:
51:69:35:b2:f0:3f:82:01:5b:15:32:48:7a:3e:16:
63:7f:4e:b7:ec:8b:c0:f9:15:ad:bf:43:3a:21:ab:
a9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:71:72:78:10:F7:CD:96:65:82:D4:70:7F:9F:D9:93:CC:02:5A:63
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/3DADE67CD9E811EDBC8C0E47C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.195.0/24
103.229.116.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:20:56:ab:4d:dd:0b:09:89:48:99:87:f8:46:9c:9f:6e:d7:
9b:93:0d:37:8a:73:23:90:fc:17:af:cf:3d:e5:87:79:77:9b:
22:8c:e1:f5:25:8c:b3:9c:ea:60:54:9a:16:45:0f:1d:a0:43:
9e:3a:7b:9f:9a:80:75:fd:ea:c5:01:1a:d3:ca:e7:4c:7f:91:
d7:c3:a9:cd:a5:12:54:e1:c0:06:1e:fb:c5:14:44:f6:a3:3f:
a9:1a:9f:3c:63:d7:31:10:86:92:e5:fd:0f:55:c7:ba:98:5a:
93:10:aa:45:49:9e:fc:e8:a9:bc:89:3f:96:e4:e5:3d:43:3d:
a0:59:c6:44:69:52:3f:f5:24:47:5d:fa:31:e0:bd:7c:5e:f2:
a2:d4:f3:d3:19:64:44:63:ce:2e:0f:4e:da:27:fd:44:eb:15:
16:6a:42:6c:33:e5:45:04:cd:bb:65:25:b7:51:46:8b:be:7c:
be:71:cb:7c:ae:56:7d:ba:5c:55:98:91:0b:84:0b:c8:63:5c:
7a:e0:e2:74:bb:f5:5f:9d:97:8d:ac:db:74:3c:2f:48:ec:d5:
a7:ce:c3:21:bc:99:80:8b:8a:2f:22:4d:ed:dc:88:d7:5b:04:
17:39:d1:40:ee:0f:78:8f:6f:1a:ce:12:f1:dc:e6:87:84:b9:
f6:aa:4c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:44 2023 by rpki-client on console-ams.rpki-client.org