Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/BEA4836268BE11EDB8F14C0BC4F9AE02.roa
File: BEA4836268BE11EDB8F14C0BC4F9AE02.roa (raw, json)
Hash identifier: +M3TlPD9WL8ze4os+N0vPUHoqKDFOCqzm1D2SBs7coU=
Subject key identifier: 66:06:F5:0B:1D:E7:87:B5:05:0E:28:18:F3:9B:D4:E0:6C:D3:0F:61
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 01A5
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/BEA4836268BE11EDB8F14C0BC4F9AE02.roa
Signing time: Sun 21 May 2023 05:54:24 +0000
ROA not before: Sun 21 May 2023 05:54:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204381
IP address blocks: 43.243.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Validity
Not Before: May 21 05:54:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6469b210-771e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:85:07:63:13:b0:87:93:a3:55:47:76:d1:
70:79:61:6c:00:ce:90:89:e6:4b:9f:5d:39:8b:a4:
22:bc:74:fe:d4:64:1e:d6:6a:0d:ea:f1:de:a9:33:
a0:7b:63:27:14:a2:31:23:c0:6a:a2:5b:a9:74:ee:
57:71:76:c0:72:cd:39:a6:d2:53:d6:d5:3b:7f:61:
71:33:c1:63:48:38:b5:de:ba:72:b5:79:15:a4:b8:
01:f5:3d:43:dc:65:2a:4a:8a:e2:5c:ad:dc:43:62:
5d:6f:de:9e:06:c2:d2:88:ab:5f:e8:09:73:9f:88:
76:32:ce:25:ec:d8:37:41:d2:21:f1:13:dd:dd:d6:
52:2b:4f:46:80:6c:71:d2:e4:33:8b:a4:57:1d:09:
7a:4b:85:05:f5:ab:05:bd:c0:b2:25:c3:c1:86:6f:
91:0b:f6:5a:59:e2:82:b8:b6:63:0c:0c:0c:c2:d0:
9a:f6:f3:4e:3b:79:81:1f:1e:de:3b:bb:f1:32:76:
b7:25:5d:ec:9f:23:d3:df:06:b7:bd:cf:23:79:36:
84:0a:da:39:8f:f5:ee:c9:63:a9:90:1c:58:fc:b3:
7c:06:6d:b3:4e:dc:2d:e4:7d:69:0b:43:2a:aa:06:
7d:24:50:55:c8:7b:19:28:d0:65:69:c0:ff:b9:99:
29:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:06:F5:0B:1D:E7:87:B5:05:0E:28:18:F3:9B:D4:E0:6C:D3:0F:61
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/BEA4836268BE11EDB8F14C0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.193.0/24
Signature Algorithm: sha256WithRSAEncryption
41:17:47:c4:5e:e2:67:63:4f:42:a6:cd:1e:4b:3a:28:06:d4:
87:9b:d1:98:4c:20:09:94:16:34:f8:f8:ab:9c:c7:20:b0:20:
6f:dd:f1:f1:05:11:cd:d8:bb:04:99:db:16:07:d1:1a:0e:db:
d9:5f:5d:ac:a9:7a:e4:ce:e7:73:65:60:25:39:d1:d7:af:18:
94:4d:f5:94:4e:79:4d:8c:49:96:4a:91:df:2f:21:84:9f:b2:
34:ef:0c:9f:16:b0:52:52:b4:51:9b:5c:ac:9a:d0:51:29:34:
f8:c1:b5:e6:88:e1:4b:f7:4a:da:3c:c4:80:0e:7f:80:d5:ac:
31:51:57:79:96:0f:e1:67:9b:08:b3:9d:18:b2:7d:b4:b0:37:
42:ec:e8:8b:02:0c:a7:a2:02:70:41:31:6f:e3:ab:a0:c2:29:
f8:bd:4f:06:46:eb:56:d1:ce:77:05:a8:97:2e:5b:dd:e4:d0:
8a:f9:62:e7:77:ca:f6:a7:de:28:11:6d:92:5e:7f:7b:34:e1:
71:c2:19:b7:38:47:9b:09:49:a3:7d:75:78:82:54:cb:15:02:
a1:60:55:8b:3e:3a:1d:e8:ae:30:ca:ed:93:e5:09:e2:22:8d:
6f:74:47:e1:ae:6e:11:5d:0c:02:30:ce:bc:aa:11:e1:eb:97:
0c:02:1c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 15:51:08 2023 by rpki-client on console-fra.rpki-client.org