Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/CC6C1E70AA9011EC85962A36C4F9AE02.roa
File: CC6C1E70AA9011EC85962A36C4F9AE02.roa (raw, json)
Hash identifier: XKdJOv6RZ633mQKilPuBkyYe7UUWmwtN8QT9q9joGbc=
Subject key identifier: 5D:CA:31:28:1C:46:39:13:F1:E7:48:CD:96:A8:09:4D:C0:A9:84:AA
Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Certificate serial: 1D6D
Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/CC6C1E70AA9011EC85962A36C4F9AE02.roa
Signing time: Thu 28 Sep 2023 16:33:34 +0000
ROA not before: Thu 28 Sep 2023 16:33:34 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 134729
IP address blocks: 43.92.128.0/18 maxlen: 24
43.92.224.0/19 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Dec 2023 02:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7533 (0x1d6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Validity
Not Before: Sep 28 16:33:34 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6515aade-7d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:ab:66:71:4f:c7:26:85:37:f2:39:72:df:
fc:a8:d8:de:96:d1:17:df:e0:72:4c:93:12:42:47:
49:5d:ae:a0:96:e8:ad:3a:53:83:f4:0b:56:6a:5c:
47:94:d7:03:2a:9a:2a:13:27:16:19:09:e1:42:5a:
af:50:53:51:fd:74:ae:3e:93:bb:d7:65:fe:3e:f2:
88:05:76:c6:53:36:d8:5e:bf:c4:1b:5f:ca:94:bc:
84:cd:91:e0:b7:79:6c:a0:b7:47:43:f7:31:57:93:
26:07:ba:2a:50:ba:19:59:05:52:14:9f:f8:15:5a:
0a:d8:13:7a:63:da:24:18:c9:00:25:a9:f5:9c:7c:
ad:c3:d5:34:16:49:45:76:48:21:2d:da:c1:00:6a:
c4:98:b1:5e:ab:29:e0:af:3f:c7:ce:7b:e5:cf:b6:
d2:2a:a2:43:0a:3d:67:6c:e8:58:be:37:08:d9:bc:
83:55:3e:23:c9:29:c2:71:4f:58:90:5a:c9:c2:39:
a1:93:71:25:40:3f:bf:aa:75:fd:90:9a:da:31:75:
a7:38:4d:49:4d:33:7e:b0:ed:7e:65:06:70:2e:c0:
d0:b0:34:33:80:66:5a:b5:18:b9:98:d1:b0:01:06:
1b:56:bb:6a:4d:e0:47:af:98:78:31:1d:a1:b7:a5:
2d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CA:31:28:1C:46:39:13:F1:E7:48:CD:96:A8:09:4D:C0:A9:84:AA
X509v3 Authority Key Identifier:
keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/CC6C1E70AA9011EC85962A36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.92.128.0/18
43.92.224.0/19
Signature Algorithm: sha256WithRSAEncryption
73:86:16:c2:e9:69:bb:81:a4:33:ce:64:d0:7f:b6:8b:ee:91:
d6:fe:32:7e:85:02:5c:ea:d9:5b:46:e1:c4:43:97:39:83:e2:
9a:98:b7:95:55:20:ce:c1:05:d8:ef:e0:14:4a:88:d5:aa:d7:
e2:a1:75:50:a1:df:17:90:77:6a:51:d0:dc:30:02:ae:2c:0e:
a9:46:ec:ad:0d:13:98:16:e4:97:37:04:9d:eb:89:4a:47:8d:
51:8d:86:76:e0:d9:92:5e:e0:c7:76:f9:ac:79:f3:a4:bb:95:
14:a5:14:56:5b:44:64:62:4f:b7:ff:e2:b7:ce:31:d0:f3:1a:
f7:4d:5f:23:b2:ee:3c:65:2e:92:9b:57:12:94:2a:81:59:5e:
4e:6c:1e:75:99:7b:8e:94:a8:bf:05:96:3c:5a:a0:4f:03:a3:
ab:f1:49:3c:ea:27:a7:34:8b:94:fd:6d:e0:78:22:7f:a1:5b:
13:9d:29:19:de:53:a5:4b:d9:e5:b9:6d:85:c9:9c:a8:e1:4a:
e4:0f:af:cf:38:5a:f2:0d:93:9b:b5:36:fb:97:2b:3c:0a:c0:
74:62:3a:e4:cf:31:a9:f2:2a:34:c1:72:7b:dc:a7:69:7b:cc:
82:10:fa:47:e6:7f:91:30:4d:4a:de:96:f9:07:a6:b2:8f:18:
6f:41:0b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:36 2024 by rpki-client on console-ams.rpki-client.org