Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/B229257AE72511EEB731362CC4F9AE02.roa
File: B229257AE72511EEB731362CC4F9AE02.roa (raw, json)
Hash identifier: WPpkw8gSp2U+YQXbYFDmHhxc7XujQT9XnaUaXlT+A54=
Subject key identifier: 6B:47:27:D3:0E:42:C0:04:1B:26:F8:04:10:42:07:E4:BD:C6:78:CF
Certificate issuer: /CN=A918A132/serialNumber=016569C3CF8E700932F14E482C56AA66BBAF2B61
Certificate serial: 02
Authority key identifier: 01:65:69:C3:CF:8E:70:09:32:F1:4E:48:2C:56:AA:66:BB:AF:2B:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/B229257AE72511EEB731362CC4F9AE02.roa
Signing time: Thu 21 Mar 2024 01:52:38 +0000
ROA not before: Thu 21 Mar 2024 01:52:38 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 13213
IP address blocks: 103.163.132.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Aug 2024 02:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A132/serialNumber=016569C3CF8E700932F14E482C56AA66BBAF2B61
Validity
Not Before: Mar 21 01:52:38 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65fb92e6-7fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:c9:a0:2b:4f:4f:70:f5:f6:25:9e:37:06:
e6:82:f6:6a:19:40:e8:d6:51:98:60:1c:b2:6e:05:
d0:78:e7:b7:ba:7c:2b:bd:12:df:43:21:a1:71:5c:
71:57:ea:fc:b1:83:10:a3:ae:c6:4f:3a:63:6f:b8:
04:45:d7:d2:c5:af:0e:59:6a:24:a6:cc:9e:70:8b:
e2:c5:18:4e:b5:89:77:4c:cc:ea:85:4b:a6:7d:8b:
c8:90:af:d2:dd:02:a7:25:d3:f1:fb:bb:ce:bb:4e:
f4:9a:2f:d9:3b:e6:fb:3d:cd:e8:20:c0:b8:0b:5e:
82:36:95:43:93:93:27:3b:d4:5e:d9:ca:db:c2:4a:
9a:9f:f6:3f:6a:1f:42:77:5b:99:a0:33:02:91:28:
b9:db:95:bc:94:7f:31:73:12:2a:b8:c1:b1:d8:69:
67:54:7a:1a:b7:f9:a8:56:88:bc:dd:93:06:ad:c9:
a4:d3:61:f9:80:12:7a:0d:6a:a2:91:94:80:b0:3a:
b8:20:47:60:84:a9:52:95:1f:92:dc:1c:9c:3f:e0:
e4:d4:49:ae:95:77:d0:30:85:61:1f:9c:cd:9b:21:
b8:8d:07:cd:b8:c6:17:d0:fb:99:57:32:1b:07:9e:
e9:bf:77:7c:7f:0b:0a:44:a1:07:1e:79:dd:5c:05:
6d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:47:27:D3:0E:42:C0:04:1B:26:F8:04:10:42:07:E4:BD:C6:78:CF
X509v3 Authority Key Identifier:
keyid:01:65:69:C3:CF:8E:70:09:32:F1:4E:48:2C:56:AA:66:BB:AF:2B:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/B229257AE72511EEB731362CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.132.0/23
Signature Algorithm: sha256WithRSAEncryption
70:67:72:f1:25:b9:17:8b:78:11:31:28:8e:16:21:c5:5b:94:
18:73:79:c4:f2:46:75:ad:d7:4d:2b:cf:9c:7f:fe:03:91:6d:
e6:94:1c:f8:db:a9:b6:e4:dd:2f:f7:dd:a2:81:22:20:ae:32:
ab:a3:ce:6b:ac:3a:ad:f4:8d:38:2a:73:29:7b:27:0b:48:3c:
97:c6:9f:8e:4c:d9:06:20:e0:b7:ea:77:d0:9d:4d:de:70:b6:
4b:fc:12:c1:72:29:a3:11:1d:40:e5:1e:b8:16:b3:2f:ce:b5:
de:51:5c:85:0c:75:dd:0f:ba:ed:41:12:ae:04:f3:4d:c4:2c:
42:af:a4:a4:46:da:4f:69:de:4a:28:61:e6:c4:b9:a4:c6:08:
dd:c7:15:ae:18:9b:67:d2:94:20:fd:23:be:6b:5e:8e:37:ad:
68:8d:43:40:ef:2d:0d:60:d0:47:3f:b0:b0:bf:03:9b:dc:34:
0d:5c:36:89:6f:8a:8c:8c:b9:4b:f0:f0:c9:63:96:3d:a8:29:
34:ce:fa:99:28:42:95:a2:2c:e0:00:e9:da:6b:ad:c0:02:96:
75:07:1e:2a:d8:c3:4b:0e:cd:cd:43:48:18:27:68:d4:c0:ea:
f4:78:38:06:35:8c:b9:b0:12:ad:0d:2d:a2:aa:d5:98:50:c6:
bb:54:4a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 04:31:31 2024 by rpki-client on console-fra.rpki-client.org