Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/280DDB00BA9811EF9FA4CE61C4F9AE02.roa
File: 280DDB00BA9811EF9FA4CE61C4F9AE02.roa (raw, json)
Hash identifier: YIdoum+Y+eTHduEzPxmDYmNt4engfbssTy/HkgyE/L8=
Subject key identifier: 53:3E:0B:DE:A7:C8:99:B7:62:04:6D:D2:22:E0:8C:01:F5:69:FC:82
Certificate issuer: /CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0
Certificate serial: 3480
Authority key identifier: 86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/280DDB00BA9811EF9FA4CE61C4F9AE02.roa
Signing time: Sun 15 Dec 2024 03:53:34 +0000
ROA not before: Sun 15 Dec 2024 03:53:34 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 151651
IP address blocks: 43.243.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 11:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13440 (0x3480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1EE0, serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0
Validity
Not Before: Dec 15 03:53:34 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=675e52be-322c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:23:a2:c2:77:ad:23:c4:1c:2c:6b:0f:cb:22:
0b:38:58:66:06:36:b0:0c:61:8e:8e:93:4c:8c:b8:
a1:3c:eb:f1:41:73:44:38:39:36:d1:f9:9b:c6:77:
f2:90:e4:4b:03:4a:62:08:99:d5:51:46:db:34:b8:
c7:e5:3e:9a:b3:73:b4:56:fa:62:6f:28:a0:82:96:
ab:7e:3a:c4:d9:17:d9:0a:a8:9a:77:9e:2c:d9:1d:
e4:c9:aa:48:39:6a:7a:41:f9:23:00:c5:76:7c:43:
e3:23:9b:fe:62:3d:57:f7:41:f9:96:08:e5:6d:43:
a0:d0:5c:73:29:67:c5:cd:51:bf:91:ba:d3:0c:16:
2d:23:85:df:7d:89:54:22:f8:4b:52:01:de:47:10:
f7:60:8f:2a:80:80:da:bf:9d:ed:21:74:0a:c1:bd:
1f:4f:3d:9d:84:42:24:38:da:fc:15:5c:1e:6f:dc:
35:ff:74:7d:18:ae:8c:cc:82:1c:87:ee:b3:02:8c:
40:56:59:a8:7e:b7:42:26:54:1e:fd:54:ef:7d:89:
3f:2c:1c:9c:08:91:6c:ed:8d:56:bf:0d:e8:bc:9a:
4d:40:c5:16:c2:99:a5:3c:cf:a6:05:57:79:c1:52:
6f:5b:38:b6:b5:c4:c9:68:90:fb:36:c3:db:53:7e:
ef:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3E:0B:DE:A7:C8:99:B7:62:04:6D:D2:22:E0:8C:01:F5:69:FC:82
X509v3 Authority Key Identifier:
keyid:86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/280DDB00BA9811EF9FA4CE61C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.205.0/24
Signature Algorithm: sha256WithRSAEncryption
41:4a:b2:a6:3a:49:81:97:64:e6:6d:c0:7e:df:a2:f0:16:19:
d8:55:f5:c4:23:df:a2:e4:07:00:7e:41:a9:bc:b4:fc:ef:3d:
df:40:23:81:0e:23:ef:fe:32:44:97:05:e4:39:3e:fd:c5:a2:
2d:19:47:f9:e9:21:26:a4:b8:af:00:e7:bb:95:3a:32:83:ec:
e8:d1:37:55:8a:8e:a9:31:c1:5f:f4:5e:cd:38:a4:2c:5d:d8:
cc:71:2c:1c:a1:a1:e5:b2:8a:3a:66:43:92:6a:c0:f7:eb:fb:
36:48:6b:5c:a7:17:b6:2b:c4:48:f0:47:96:3a:44:17:9d:b1:
81:2b:b0:99:c9:11:67:85:37:da:3b:ab:94:5a:ec:20:d4:bc:
85:79:bf:29:1b:27:a0:4c:3a:67:59:5d:06:0e:6a:e8:5f:08:
56:aa:7a:28:9e:59:0c:f0:e3:f2:85:25:02:0b:88:08:39:f6:
51:b7:22:23:8e:26:63:c3:53:2e:2c:45:44:5d:29:d0:94:14:
ef:75:2c:b2:b5:88:bd:6c:02:17:af:dd:d6:ca:56:bc:f4:16:
fc:cf:94:80:7c:b2:4c:21:de:7c:72:65:4b:df:b9:96:70:06:
be:3d:c1:5d:db:19:d1:17:6d:1c:0b:14:82:28:38:cc:79:67:
0a:05:5e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:09:51 2025 by rpki-client