Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/8EF9AD126E8711EDB407C430C4F9AE02.roa
File: 8EF9AD126E8711EDB407C430C4F9AE02.roa (raw, json)
Hash identifier: 1K3+xS3iYV7jJdkKLjOzrIuOUr5my+X5ohpwg9Hg7CA=
Subject key identifier: AE:21:F3:01:47:A8:AD:45:E6:6A:1C:50:4A:0A:1F:F5:90:BC:87:F9
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 02B5
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/8EF9AD126E8711EDB407C430C4F9AE02.roa
Signing time: Mon 13 May 2024 04:08:43 +0000
ROA not before: Mon 13 May 2024 04:08:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201351
IP address blocks: 43.243.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 18:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693 (0x2b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2
Validity
Not Before: May 13 04:08:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6641924b-d77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3f:7c:6d:5a:0e:46:e8:02:f8:33:e9:5d:af:
e3:ba:ba:bc:e1:7e:ad:9f:ba:44:b1:77:83:d0:ac:
6e:50:98:1a:4b:fa:b2:c4:38:98:64:2f:c3:e8:32:
50:e7:ea:94:df:77:65:a8:8c:f1:87:9a:6a:05:3b:
dd:2e:34:9b:9d:2d:b0:e3:21:8a:e2:3b:40:8a:59:
c4:da:3b:07:57:85:9d:fe:01:42:33:9b:1b:58:36:
5a:26:67:78:71:b9:af:20:dd:79:a2:b2:9f:2d:e5:
e8:59:a0:b4:05:a5:ba:bc:8a:37:fd:66:f0:e6:7c:
ac:10:54:9e:2f:60:2d:4c:09:81:f5:4c:23:d7:d5:
eb:03:f0:5a:13:dd:be:b8:cf:c6:33:8f:65:11:05:
07:ae:f9:8b:17:98:97:f6:d5:c7:b4:9c:ae:ad:6e:
a7:20:fd:3d:f1:fd:a2:6d:64:4e:16:81:8f:f8:03:
f2:2a:6a:bb:92:d7:7d:0e:89:13:7a:b5:d3:95:36:
ba:8d:31:35:93:0d:af:7f:b2:2b:46:e6:5a:e0:2c:
25:73:d7:b6:33:35:9a:bb:b2:ad:2c:54:2a:d9:36:
e1:4a:05:75:3f:9d:e9:76:43:39:6b:93:fb:98:00:
af:01:71:58:72:79:98:c2:20:16:5c:7b:8e:56:67:
2b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:21:F3:01:47:A8:AD:45:E6:6A:1C:50:4A:0A:1F:F5:90:BC:87:F9
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/8EF9AD126E8711EDB407C430C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.192.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:94:be:e1:a3:6f:d7:f6:cc:40:08:59:e5:bb:c4:4f:fb:a8:
96:7f:47:05:28:01:39:77:7d:1a:4e:16:21:7c:9a:ac:d4:f3:
f1:4f:4d:da:01:56:2a:ea:0f:c1:19:6e:25:60:24:8b:4a:1b:
4d:f2:d3:48:86:a0:16:35:e0:16:d2:2f:30:8d:07:cf:dd:e6:
93:c9:a1:d1:74:0c:a4:5a:73:f6:8a:4b:d8:5a:ad:3c:1e:15:
8a:6e:b0:c4:b8:1a:82:68:77:c1:4d:d6:7d:02:1d:09:fd:aa:
76:a5:be:2f:a4:50:5e:ed:2f:ed:b6:ed:ae:c6:a3:ce:2f:f0:
60:45:04:fa:a0:c5:8d:ac:02:38:75:57:86:3d:63:35:47:58:
a5:e1:7a:45:73:e0:a8:2a:7a:36:db:94:db:53:46:6d:42:d6:
bb:1c:ab:2e:43:8f:17:8a:9e:a2:14:f4:0b:7d:ac:85:42:ae:
2f:b1:67:1e:72:ba:70:6b:4a:42:4a:b9:4c:49:c8:80:4b:2b:
ba:b6:53:d1:be:c5:20:77:a3:38:85:34:f1:5b:f8:da:4d:e0:
9b:ed:44:4a:89:43:7f:b9:69:1c:b1:7c:d8:22:52:5d:e3:1f:
65:e0:ba:fd:85:6c:4f:38:57:d8:47:61:33:0f:0a:ed:e2:8f:
5c:92:cf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:40 2025 by rpki-client