Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/984A9454597611EFBF43DC86C4F9AE02.roa
File: 984A9454597611EFBF43DC86C4F9AE02.roa (raw, json)
Hash identifier: Ir6Ua/QbNOSqRtXa1UAZJryzc7j3q20FgEWPn5gqtIk=
Subject key identifier: B9:0C:9F:CE:C8:73:D6:B0:50:2C:7E:CF:C0:EB:D0:0B:6B:FA:EF:1E
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 27A9
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/984A9454597611EFBF43DC86C4F9AE02.roa
Signing time: Tue 13 Aug 2024 13:18:57 +0000
ROA not before: Tue 13 Aug 2024 13:18:57 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 20473
IP address blocks: 43.250.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 07:09:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10153 (0x27a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Validity
Not Before: Aug 13 13:18:57 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66bb5d41-9f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:bb:0a:d7:d0:41:54:9e:04:6a:c6:f4:26:
5d:13:5b:79:b5:b7:1b:e9:9e:49:8d:74:e7:d0:cb:
6e:7a:fe:ab:ed:bf:3a:81:2e:06:31:7a:a9:36:30:
38:0b:dc:4c:5b:03:c3:01:cb:03:05:1a:ae:2d:ca:
e1:b8:3c:e4:2a:cc:bb:dc:59:3a:ea:ae:eb:1c:9b:
45:a8:76:a4:a4:28:13:ca:4c:2b:20:88:4b:1c:e4:
0d:93:1a:5a:db:f6:fa:0a:28:d0:c8:e9:ba:6c:b0:
58:a1:58:93:42:10:62:97:af:6a:63:86:98:23:cd:
72:c0:74:86:70:15:89:6a:f6:9b:62:99:99:0f:20:
d8:c5:26:68:fd:2e:40:e4:57:ff:f0:9e:e4:5c:1c:
b8:24:47:a6:43:cc:57:47:e3:c8:57:cc:c1:25:96:
2d:f1:79:f9:16:35:7f:08:75:1e:a7:91:51:3f:c9:
8a:4a:14:18:f5:e4:90:2a:95:e5:5f:75:00:5f:a9:
72:86:97:8a:b6:bb:59:2a:e6:f4:d6:23:e0:b6:13:
a9:b5:8c:5f:68:a2:41:54:76:7e:1c:bb:c1:83:cf:
9d:5d:6e:9c:a8:f6:04:2b:41:6f:a9:ba:e4:12:d8:
b1:7e:9c:05:02:31:f7:b5:af:a8:4b:81:47:e8:75:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0C:9F:CE:C8:73:D6:B0:50:2C:7E:CF:C0:EB:D0:0B:6B:FA:EF:1E
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/984A9454597611EFBF43DC86C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.125.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f1:28:43:fd:2d:ab:14:71:e4:54:ed:97:8e:85:ec:d3:ff:
6e:3c:66:a1:fd:6e:fa:2e:a5:47:35:4f:59:a2:f3:21:bb:35:
d7:c4:fd:ab:f9:8d:79:c3:26:d6:26:9d:e5:64:65:f7:61:86:
41:3d:09:ea:1f:d6:65:8e:0d:a2:10:13:e0:50:3b:f9:9b:c6:
63:3e:44:a9:a4:c2:ac:ac:ae:1c:5b:de:1b:5e:1e:e4:99:e4:
3b:f8:74:99:f9:5f:78:67:19:44:a2:ef:7c:15:88:99:fc:0b:
36:b3:01:28:8b:ad:43:82:4e:1b:9a:0e:8c:a0:e9:d1:9f:27:
65:85:fc:03:0b:79:63:7f:2c:92:57:0f:ef:ec:52:9c:50:6d:
6d:b1:8a:2c:04:a0:e5:1b:60:11:71:8a:6a:0c:e4:81:00:5c:
14:74:3d:a6:d0:6b:a7:d9:89:01:8b:70:3c:25:1b:dd:87:5b:
c3:66:87:6c:d0:c8:fb:49:2f:17:35:a9:c0:41:73:c9:c2:67:
db:f2:66:ec:c0:0c:6d:ed:25:a4:4a:27:32:c4:44:1f:3a:74:
7e:8a:29:0b:9f:71:cc:a2:f4:6d:72:8a:70:14:2b:7b:ae:c6:
a8:8d:d8:ee:12:ab:b9:bd:ea:6a:43:09:06:65:e8:a5:eb:cf:
1a:b1:da:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 09:26:05 2024 by rpki-client on console-fra.rpki-client.org