Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/9654C12428AC11EFADD7C877C4F9AE02.roa
File: 9654C12428AC11EFADD7C877C4F9AE02.roa (raw, json)
Hash identifier: jywERSdCa0LVDLfhbKqB61azsUyqVpT8zprrSbhN06Q=
Subject key identifier: 57:DB:2D:28:D9:24:6E:D7:FA:46:84:B7:CB:8A:50:AC:55:3D:F3:95
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 2782
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/9654C12428AC11EFADD7C877C4F9AE02.roa
Signing time: Wed 12 Jun 2024 11:11:59 +0000
ROA not before: Wed 12 Jun 2024 11:11:59 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 133177
IP address blocks: 43.250.124.0/24 maxlen: 24
43.250.125.0/24 maxlen: 24
43.250.126.0/24 maxlen: 24
43.250.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 13:17:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10114 (0x2782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Validity
Not Before: Jun 12 11:11:59 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6669827f-64a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:c8:fb:ea:81:e2:0e:5b:80:96:77:a0:55:
ec:61:1c:a1:af:04:78:0c:52:77:5d:52:8b:a5:f4:
6d:94:ce:97:a7:b0:8d:52:f0:a4:9f:b9:c6:71:b0:
63:dc:ac:3e:a8:45:96:cb:1b:ad:cd:a6:88:ad:40:
76:38:05:51:06:84:29:31:6f:09:99:55:b7:49:50:
d4:89:85:17:b4:fd:2b:db:8b:f9:6a:d4:30:02:db:
02:63:88:07:af:48:e3:44:9e:f4:1a:bf:af:59:47:
ce:20:c4:e5:ec:b5:50:b0:4a:57:38:f4:5f:98:8f:
be:8d:3c:80:ca:9d:d2:c8:d5:fe:7a:3b:d5:32:9a:
e7:77:ee:32:7d:f9:2e:3c:74:f3:c0:42:28:7a:37:
11:8b:1b:f0:df:5b:86:69:35:4c:bc:2a:bc:bc:68:
ca:2f:97:25:24:2f:c8:97:cd:fd:2b:7d:28:7a:37:
5a:1b:9a:10:25:dc:5b:44:c6:ec:13:1d:63:4c:c4:
e3:06:91:a9:bc:da:3e:21:72:f8:58:91:66:4d:84:
90:24:c7:6e:96:4f:f1:e0:e2:34:77:a9:25:24:9c:
ce:9d:3b:ea:8b:b1:58:4e:21:e1:a5:f2:dd:93:7a:
84:cd:63:f9:9c:4d:3e:f5:d2:d8:00:ef:e7:a9:5c:
3a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DB:2D:28:D9:24:6E:D7:FA:46:84:B7:CB:8A:50:AC:55:3D:F3:95
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/9654C12428AC11EFADD7C877C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.124.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:2c:09:8d:30:63:eb:9c:f1:df:41:e2:bf:05:45:f5:2e:8a:
5a:43:d7:e7:b4:09:a5:e1:33:a8:21:f3:c3:9e:a4:01:bd:59:
d1:8a:93:56:d9:9c:a6:bb:11:84:12:c3:a5:3b:e4:2c:e8:1f:
e8:8c:6a:c5:20:ee:c6:4f:bd:d5:67:68:16:a7:27:d8:bc:ff:
a1:41:ed:c6:65:66:c3:0f:ca:e8:f2:c0:1b:d9:02:bc:61:51:
d5:f9:e2:c1:cf:4c:c8:d1:ee:da:01:a5:3e:24:5a:0a:ae:d9:
1f:16:5d:2f:d1:29:cd:2f:43:ca:ef:4f:1d:d0:cc:94:b4:7c:
9c:6b:31:d3:cd:92:1d:ad:d5:8e:58:de:3f:30:c8:18:34:a9:
81:98:84:16:53:c6:15:a0:e5:ef:7a:09:9d:a9:3b:02:89:18:
b8:87:9c:b8:98:19:d2:ef:8d:1d:75:56:2f:45:a8:dc:dd:9c:
b1:89:4d:b9:9f:c2:87:8c:fb:fa:6a:06:9e:d9:e3:e3:b7:27:
84:28:bc:f5:33:93:77:8a:6d:de:5f:1f:cd:33:24:98:af:a7:
20:99:70:87:a0:21:c2:c4:5e:65:fc:e1:a9:9f:68:4a:b5:ee:
e8:b2:ad:b5:ee:79:bd:b7:ae:f0:3b:04:08:88:6a:0e:d7:7b:
f3:e8:0e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 15:05:08 2024 by rpki-client on console-fra.rpki-client.org