Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/94D9D552E11911EAA691974EC4F9AE02.roa
File: 94D9D552E11911EAA691974EC4F9AE02.roa (raw, json)
Hash identifier: EWAMOviWH8P1N66u+lGnePz36hqLUzUYTCy2RDCfVWk=
Subject key identifier: F8:D1:0B:E4:FD:D3:EF:88:63:6D:07:5C:DF:11:EA:08:E3:0C:28:4E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8856
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/94D9D552E11911EAA691974EC4F9AE02.roa
Signing time: Thu 30 May 2024 15:54:06 +0000
ROA not before: Thu 30 May 2024 15:54:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132220
IP address blocks: 103.73.148.0/24 maxlen: 24
103.73.149.0/24 maxlen: 24
103.73.151.0/24 maxlen: 24
103.144.120.0/23 maxlen: 24
110.44.8.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 05:56:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34902 (0x8856)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 15:54:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a11e-b122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:e3:b3:af:2d:bd:61:ca:2d:ad:70:30:d8:
10:38:07:07:6d:03:6c:e5:d3:f5:9d:13:79:89:d5:
ef:1f:52:b6:a9:79:d5:82:f4:86:1e:0d:a2:44:7e:
d3:fd:62:a6:20:32:07:bf:cf:f4:cb:fe:48:c1:88:
01:4d:0a:96:5c:52:2c:d2:76:c8:1d:25:2e:a6:02:
eb:2d:77:5e:75:4d:5a:58:14:1d:a1:75:d2:c8:54:
54:db:b2:12:b6:c1:c7:9e:fa:c4:19:21:7e:4d:26:
ce:7a:e7:56:6b:b2:eb:1f:37:7b:21:90:38:c5:49:
78:d6:00:97:c3:60:27:1d:f4:6b:dd:24:4b:5b:c3:
21:22:5d:25:22:2a:f4:f3:3a:90:c8:72:9a:f6:18:
19:6c:43:9a:90:f9:45:4f:67:9d:88:20:5f:53:6f:
e1:23:1a:74:45:79:90:e4:61:64:88:15:a0:c7:d1:
48:3b:49:1a:7f:a2:11:07:7d:b7:e7:91:39:75:39:
02:96:ba:43:40:c8:da:04:33:a7:58:6f:80:0a:ca:
a9:1d:c3:c9:ae:c3:c6:82:22:33:89:80:a9:79:21:
7b:58:38:cb:48:14:4d:21:9a:b9:df:d2:09:58:98:
81:43:f0:c7:54:0d:32:d8:c7:08:09:2f:46:7e:6b:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D1:0B:E4:FD:D3:EF:88:63:6D:07:5C:DF:11:EA:08:E3:0C:28:4E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/94D9D552E11911EAA691974EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.148.0/23
103.73.151.0/24
103.144.120.0/23
110.44.8.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:31:4b:41:47:b0:6a:9f:54:50:c4:b8:47:1a:51:bf:de:0b:
d4:93:4d:ba:e3:c2:37:dd:72:4b:e6:1d:1b:ec:52:e5:ef:a2:
a0:9d:5b:15:1d:fc:8b:a2:fc:86:60:78:16:e5:ad:d1:56:ae:
8b:7e:fd:9a:3a:d4:39:3b:fc:a2:7c:20:8d:2e:bd:3c:90:a2:
de:28:4e:66:2a:a0:0c:d7:0c:a9:36:48:62:4d:9c:b3:5a:09:
41:bb:2f:33:7f:89:89:6d:c6:d3:e1:5e:44:65:83:c3:d0:d8:
44:65:e0:4d:47:a7:78:12:10:2e:8b:ed:10:29:4f:2a:4a:59:
6c:2f:c4:14:43:30:00:9a:f4:a3:93:b5:38:f9:ab:16:e6:46:
90:83:69:b8:aa:87:78:b0:51:9a:b6:72:d3:07:0a:b9:8d:ae:
9e:ff:57:f2:3d:99:ef:24:c0:f3:12:a2:e7:1c:95:b9:9c:6d:
d0:2d:b8:c9:5f:b8:91:69:72:61:b6:06:86:20:78:1b:1c:c4:
b7:3e:6d:67:4a:0b:f6:9c:68:7c:42:a6:7e:a4:24:80:01:3d:
42:57:ee:ce:53:9d:e0:e0:dd:e5:51:ea:47:d1:e4:f6:6a:ae:
f7:df:d2:4c:f4:0b:61:84:bf:2a:f4:6f:f0:6d:ce:c3:4e:b6:
da:a0:0d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:35 2025 by rpki-client