Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/F2E99868797611EF9014556FC4F9AE02.roa
File: F2E99868797611EF9014556FC4F9AE02.roa (raw, json)
Hash identifier: wBqAwSZp48GFhq6Q4+rz73xiqwRk4Obl9lI6jhIAWiU=
Subject key identifier: D5:B1:83:53:0F:62:7B:C5:51:C9:2F:24:74:16:0D:96:78:FD:C9:7C
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 27D9
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/F2E99868797611EF9014556FC4F9AE02.roa
Signing time: Mon 23 Sep 2024 06:42:06 +0000
ROA not before: Mon 23 Sep 2024 06:42:06 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 141718
IP address blocks: 43.250.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 03:36:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10201 (0x27d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Validity
Not Before: Sep 23 06:42:06 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66f10dbe-2ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:28:fd:73:71:cd:80:d7:1e:93:ca:eb:39:
bb:76:07:bc:c6:af:71:4e:b4:fd:92:f9:56:a0:f9:
fe:b5:99:10:bf:2b:bb:cb:a7:0a:60:c1:6f:b3:40:
52:81:f3:b9:2f:c6:b2:5d:75:5f:aa:f4:fb:f7:51:
96:07:b7:6a:0f:de:40:bd:70:ee:2c:0a:94:f5:1b:
90:c4:d8:be:70:26:97:7a:1f:d9:ec:c2:cb:ac:44:
3d:94:2a:42:0a:d2:d7:4c:62:e4:80:fc:61:9e:5b:
0f:2d:c2:d7:58:72:a8:c6:49:80:43:17:51:ff:25:
7a:4d:4e:9d:7a:4b:a9:fa:2e:b6:8e:05:67:7d:93:
97:45:f0:dc:b5:3c:85:8f:38:0e:fe:92:14:80:c7:
7c:00:e3:9b:65:da:8d:aa:e0:c1:56:12:c0:e1:19:
96:0b:c6:dc:a5:22:16:29:e7:bb:b1:4b:08:93:a1:
70:91:f0:c1:2b:59:69:bf:87:4b:65:46:34:58:83:
d3:eb:61:1f:4b:87:1e:76:3d:64:f9:b7:50:a0:ef:
04:cb:fc:a9:18:5d:83:fd:0c:f1:d8:12:8a:62:98:
3d:ff:ba:38:53:79:66:4f:fd:cb:48:84:95:52:79:
ff:49:2d:89:c2:46:e6:42:40:b1:d2:02:a8:fb:be:
09:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B1:83:53:0F:62:7B:C5:51:C9:2F:24:74:16:0D:96:78:FD:C9:7C
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/F2E99868797611EF9014556FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.124.0/24
Signature Algorithm: sha256WithRSAEncryption
43:23:61:a3:60:4c:2c:19:9d:26:49:11:ce:c0:37:70:e3:40:
75:e4:f3:0d:9f:66:26:5d:a5:8e:59:d9:d7:22:83:b5:33:4f:
7a:f9:36:94:48:1c:60:59:55:82:54:fb:f6:06:fa:39:ad:ba:
05:0b:cb:b5:55:8e:35:1c:09:e2:be:4e:5b:dd:c6:e9:d9:39:
b4:03:22:83:3e:02:f1:44:b2:61:c5:50:9a:3c:c8:6b:7d:38:
5b:d2:17:c3:bc:94:d6:97:9f:b8:35:69:1d:f1:11:62:72:f2:
31:f3:43:3b:0d:41:1e:ff:89:8f:53:bd:f8:36:cf:a9:07:cf:
38:10:41:95:14:43:f4:47:92:be:98:ce:80:8f:ff:3b:ed:b7:
c4:a1:9c:36:ef:92:2d:03:52:04:45:17:dc:04:84:08:f4:54:
7e:17:0d:e4:ff:5a:51:0a:ff:72:1d:f9:25:28:dc:2f:6f:47:
d8:2a:07:21:cc:eb:a9:2b:24:d5:b8:09:78:84:99:ff:71:b0:
b1:e8:a7:d2:8c:82:cc:ad:9b:2f:5b:b7:97:88:b0:d2:85:5c:
08:93:1f:03:1b:f9:c4:9a:f1:ff:85:3d:07:24:b4:75:25:32:
74:eb:bf:51:64:28:d0:66:3c:af:56:52:88:3f:0b:24:a2:36:
5f:61:27:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 04:39:27 2024 by rpki-client on console-fra.rpki-client.org