Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/A212E31022C611EFB3417C62C4F9AE02.roa
File: A212E31022C611EFB3417C62C4F9AE02.roa (raw, json)
Hash identifier: vwTFmGa471S2D5RrSjgZeVj/dZFXecjPmkx9NhQW+D4=
Subject key identifier: B1:4F:D0:CE:BC:0D:FE:4E:6E:F3:A6:5D:8D:E7:17:86:B4:0C:14:07
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 02E2
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/A212E31022C611EFB3417C62C4F9AE02.roa
Signing time: Fri 28 Jun 2024 23:56:39 +0000
ROA not before: Fri 28 Jun 2024 23:56:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 43.243.194.0/24 maxlen: 24
45.113.82.0/24 maxlen: 24
103.229.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 17:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 738 (0x2e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2
Validity
Not Before: Jun 28 23:56:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=667f4db7-4b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:56:4b:06:11:bc:e9:f0:11:26:b6:00:22:31:
8a:f2:37:06:f4:98:cd:1b:98:7d:33:f2:e2:2b:2f:
4d:cc:17:71:b5:6c:d9:1a:92:9a:f7:35:86:fb:d2:
de:01:0f:be:17:cb:08:56:6d:7d:06:56:1d:39:c3:
1a:8e:32:8b:50:10:c2:e5:84:ad:31:ac:a2:62:43:
19:24:04:71:c2:bb:3d:39:76:38:48:3f:0a:f9:59:
10:25:90:38:aa:b0:dc:97:5e:a0:21:8c:49:bf:a9:
77:fd:1a:8f:8d:c1:f0:d5:21:0e:97:bd:d8:4e:4d:
d9:b9:34:3a:5f:4c:c6:dc:96:4d:b4:01:04:a3:88:
07:ee:94:5a:17:74:4a:78:8d:d5:4a:7f:29:35:62:
14:a5:c0:fe:4d:56:c4:bc:54:c5:ff:2a:6c:3f:75:
fa:43:c0:5c:7b:c4:d5:a9:f9:37:c4:d9:46:14:b3:
e8:3b:d3:70:e3:32:e7:4a:5b:20:65:fb:f3:a2:7a:
72:77:60:65:c1:b0:2e:b3:a1:af:16:71:11:54:2a:
a7:04:f2:e0:5b:f2:30:5b:5a:e5:3c:3a:13:da:03:
43:87:5d:50:ca:e4:52:00:f6:29:5d:4b:ca:01:d3:
28:4c:b1:04:2d:e9:89:ba:79:d8:f1:84:2b:5a:e3:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4F:D0:CE:BC:0D:FE:4E:6E:F3:A6:5D:8D:E7:17:86:B4:0C:14:07
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/A212E31022C611EFB3417C62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.194.0/24
45.113.82.0/24
103.229.118.0/24
Signature Algorithm: sha256WithRSAEncryption
62:97:83:23:14:22:1e:95:26:9c:15:4e:1a:1e:88:fd:27:6f:
ac:94:b1:be:80:a3:aa:a4:e5:61:20:21:44:4c:3e:74:95:35:
6b:10:14:7f:ec:78:1b:ff:8a:a6:a5:67:6c:12:f3:cc:8e:a5:
47:79:4f:37:c1:5c:ef:bd:65:86:80:e2:ee:83:b1:b3:25:8a:
57:a8:c5:ae:4f:12:1a:4b:42:a9:64:2b:7d:96:1f:01:21:ae:
78:87:e1:ac:09:d8:f2:b9:bb:64:d8:8b:aa:78:2d:3b:ff:5a:
7d:4d:ec:af:1f:47:50:ed:35:51:f0:0a:e4:75:fe:75:13:0b:
3c:5e:fb:d9:e4:a8:b8:cd:2a:ed:ee:32:eb:19:f1:07:17:06:
e8:7d:7d:ab:d6:cb:1c:9d:13:fc:32:0a:ce:b6:cf:cd:88:63:
43:d6:d7:20:9e:d3:3a:c6:f4:bb:c0:56:af:fa:c3:6b:59:36:
1f:d3:61:b5:95:7d:ac:00:ae:75:ac:e6:ee:f5:2d:de:71:12:
19:08:ce:09:dc:e6:f6:dd:5e:69:6f:90:de:2b:18:dc:61:82:
5c:02:c1:8c:e4:3e:28:fe:50:f8:96:8c:06:7f:69:d5:1c:f7:
cc:be:d2:1c:8b:cf:76:dd:cb:02:bf:18:5e:fb:7c:38:ca:04:
24:d2:55:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:42 2025 by rpki-client