Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/F0A6C2D0A55311EE9D25B829C4F9AE02.roa
File: F0A6C2D0A55311EE9D25B829C4F9AE02.roa (raw, json)
Hash identifier: v1oTBwLg9gGcvspoFHv4mbktoQvrnIyFHsJH3NIYtt0=
Subject key identifier: 21:B8:AF:11:1B:0C:8A:6A:32:D0:60:35:8C:32:10:CF:B0:FA:AD:0C
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 02B8
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/F0A6C2D0A55311EE9D25B829C4F9AE02.roa
Signing time: Mon 13 May 2024 04:08:46 +0000
ROA not before: Mon 13 May 2024 04:08:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22781
IP address blocks: 43.243.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 23:56:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696 (0x2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2
Validity
Not Before: May 13 04:08:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6641924e-cc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:44:0d:b7:42:5f:bb:1e:4a:be:fb:93:53:
41:92:36:a9:32:19:cc:81:d9:e7:69:1f:0f:cf:75:
c0:28:27:42:d6:bb:03:59:46:91:40:ad:82:fe:3f:
67:29:2b:f1:54:e6:e9:e6:a2:38:55:80:a6:a2:09:
7f:cd:bd:58:c9:9f:bc:eb:a7:96:b7:ab:6a:5f:8c:
24:81:1e:87:35:59:83:5e:af:43:f5:6b:01:da:11:
07:2b:81:28:60:a1:86:57:66:ee:3b:39:34:16:43:
93:1c:06:3b:db:8c:0b:58:c3:b8:08:88:4a:47:10:
34:15:d6:32:b8:de:50:21:96:06:5f:72:92:fa:4f:
f1:69:a5:de:16:bb:a9:37:64:75:5a:5e:ca:2c:2e:
4c:55:40:92:50:44:08:0b:13:19:c4:53:99:d2:b3:
92:1d:2c:fb:62:02:ac:ea:89:06:04:df:86:88:fa:
03:d4:0e:9e:e0:db:5f:89:3c:c0:d3:5d:4d:dd:da:
c9:5f:be:a6:09:33:a7:f5:ee:48:dc:9f:e2:65:e6:
5a:70:35:a1:d3:94:c3:96:b0:4e:8f:f5:b8:2e:03:
c1:bc:9a:25:ff:5d:2a:4e:4d:79:d6:99:86:16:b2:
4d:7f:f9:ca:a3:39:92:12:36:37:bd:76:c8:60:38:
97:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B8:AF:11:1B:0C:8A:6A:32:D0:60:35:8C:32:10:CF:B0:FA:AD:0C
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/F0A6C2D0A55311EE9D25B829C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.194.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:68:d2:21:64:a2:f8:bb:dd:51:23:8b:92:74:55:cb:6b:51:
cb:24:f3:2a:ba:62:62:47:d8:7e:03:b0:73:a6:d4:eb:7c:32:
5b:64:17:f1:f4:06:58:53:5a:9c:d1:ae:06:d3:eb:59:ac:1a:
45:b8:d6:39:08:d5:b4:da:dd:48:eb:13:f8:c7:f6:54:fa:1b:
0b:be:de:82:32:ec:55:a0:82:98:ea:65:b5:27:39:07:d7:5a:
c3:65:5f:89:75:cb:d5:06:40:90:f3:24:ee:6f:02:a0:a5:ed:
5e:a1:2f:37:d6:6d:27:c1:96:1e:71:68:7e:2f:97:65:8b:0b:
8e:40:c7:84:fd:f4:9a:1a:57:b9:87:8c:b1:7f:8e:3f:c0:41:
ab:96:9d:66:f2:fb:f1:6c:15:e8:2b:7f:97:e2:7a:79:c3:9a:
6d:b1:85:5e:85:45:a8:14:c8:60:73:b4:23:74:a8:24:08:aa:
62:da:2b:f1:88:d2:d3:2a:27:c9:f8:bd:91:83:e1:7e:6d:3d:
fc:84:d7:8f:99:b0:66:1e:fd:36:60:8b:06:4b:6d:b2:3b:69:
e0:55:83:6d:e2:3d:12:24:e1:0f:83:6f:55:34:7b:a2:7b:e3:
5c:f7:05:5d:a1:8b:ce:ee:dc:6b:b7:33:6b:76:20:95:d9:ce:
50:b0:da:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:11 2025 by rpki-client