Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/D18398FE7A2A11EFA28D9570C4F9AE02.roa
File: D18398FE7A2A11EFA28D9570C4F9AE02.roa (raw, json)
Hash identifier: x2RdsV9EdTZLxXkaYF4ySYREzFRhr8wGkFMuT+7rONs=
Subject key identifier: CA:E2:89:F0:A2:63:64:8C:41:36:99:97:12:AA:0D:C9:FD:B0:B1:DF
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 27EC
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/D18398FE7A2A11EFA28D9570C4F9AE02.roa
Signing time: Tue 24 Sep 2024 04:36:23 +0000
ROA not before: Tue 24 Sep 2024 04:36:23 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 214760
IP address blocks: 43.250.125.0/24 maxlen: 24
43.250.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 07:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10220 (0x27ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Validity
Not Before: Sep 24 04:36:23 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66f241c7-9d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:76:31:ca:ae:82:a7:d1:75:99:60:1f:dc:71:
bf:f9:9a:aa:a9:79:72:27:e0:26:4f:c6:7b:49:f7:
1e:37:84:bc:cb:4c:20:42:2e:14:79:51:9b:bb:b0:
53:06:c2:e0:9b:e3:4a:cc:e5:ab:5d:4e:fc:34:c6:
a4:ad:b5:51:69:a8:13:41:3c:57:e2:e2:cb:3d:1f:
8b:dd:3b:e7:4d:fc:ba:4c:97:5e:24:52:c5:0b:33:
32:ca:04:ff:dd:45:dc:6e:24:3e:ab:e7:e0:f5:70:
7d:f2:50:1e:1f:17:84:42:ca:41:d5:e7:19:ef:07:
9f:63:7e:d4:4b:88:bc:7f:a6:b5:ab:00:d6:61:31:
8f:7e:3e:b2:a6:bb:17:f9:aa:28:44:15:8f:a2:01:
be:1f:32:56:77:52:0f:39:8b:3f:ed:12:cf:56:2b:
d1:8a:86:4e:60:ea:5f:fc:ae:78:34:ce:2a:3b:1d:
ae:75:fc:8d:6b:4f:69:25:e4:ce:53:75:0a:17:02:
7d:4d:57:ad:2a:34:eb:93:15:57:4d:14:ff:46:4f:
cc:44:a7:fc:3e:3f:e8:6c:0a:da:ce:2d:7c:70:dc:
17:91:81:64:33:3a:f5:ec:a8:2d:5d:03:27:be:53:
a3:d1:22:e9:2c:28:92:1a:d5:40:ed:94:a3:83:e6:
7b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E2:89:F0:A2:63:64:8C:41:36:99:97:12:AA:0D:C9:FD:B0:B1:DF
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/D18398FE7A2A11EFA28D9570C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.125.0-43.250.126.255
Signature Algorithm: sha256WithRSAEncryption
65:1a:1f:d7:f4:b4:70:51:5f:4d:3f:e0:97:9c:2d:93:39:b2:
84:07:64:2f:e5:17:19:e6:d3:13:49:10:13:a3:24:17:2b:c3:
1e:66:7a:a3:d4:4c:73:4a:ab:5c:c8:41:c0:68:d5:21:82:57:
9a:f4:35:7a:c8:e1:ad:e9:43:5c:b7:c3:44:76:0a:49:78:ac:
6d:24:8e:e6:4c:e1:98:7c:88:1e:f4:4c:1a:d6:6f:07:92:aa:
63:cb:f7:16:84:fd:fa:64:9a:28:bd:3b:88:18:d7:1e:d3:51:
b8:b1:f3:1f:ee:75:50:e4:6f:92:93:8b:28:fd:4d:14:d4:3a:
0b:cb:fe:e4:7d:f1:aa:77:26:cd:6a:81:9a:53:9d:e5:eb:3f:
c2:3c:bd:68:dc:94:dd:c5:5d:08:ed:92:07:57:7b:ca:44:86:
9c:40:35:ac:83:bb:db:07:58:e0:d9:14:2b:55:ad:d6:43:72:
3b:28:60:cd:cf:20:36:51:77:30:ed:ac:d1:5e:db:f1:f3:87:
be:4f:56:6a:98:37:2f:c0:1c:f7:41:ed:6a:0e:9f:fc:63:9a:
8f:4a:a0:cf:51:cb:f9:68:bc:4b:9e:db:25:51:79:70:7a:98:
ab:81:67:8b:ad:ba:35:71:5a:de:bb:b2:7a:e3:1b:1a:4d:07:
93:c4:d0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 12:04:17 2024 by rpki-client on console-ams.rpki-client.org