Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01114286362011EBB5441A0CC4F9AE02.roa
File: 01114286362011EBB5441A0CC4F9AE02.roa (raw, json)
Hash identifier: KlkfIU4VMWKnI1LVYujB5ZogDFGhxH9PnqtX4yuYXSg=
Subject key identifier: 67:AC:9C:D7:85:B1:DB:31:3C:10:50:BA:0E:2F:4D:28:33:0A:87:69
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6E73
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01114286362011EBB5441A0CC4F9AE02.roa
Signing time: Wed 10 May 2023 16:34:06 +0000
ROA not before: Wed 10 May 2023 16:34:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141280
IP address blocks: 103.158.212.0/23 maxlen: 24
103.170.156.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28275 (0x6e73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:34:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc77e-1322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b1:a2:fb:66:c2:fb:aa:f1:fb:f4:fd:4c:eb:
a2:8c:13:97:c0:d7:12:b4:1d:a5:c0:77:96:93:41:
43:fb:a1:14:d7:ee:8a:ad:ce:31:a8:20:d2:3f:2a:
0f:1c:5b:a1:81:c3:c0:9b:fe:74:12:d9:61:d3:1d:
4a:b0:25:bf:2e:ce:2d:b2:ac:ac:49:4d:36:3d:34:
ef:b5:78:ec:48:ec:0d:10:f9:36:fc:1a:98:77:15:
e5:a7:db:bf:9b:9d:5a:56:69:f9:31:8f:8e:f0:dd:
df:66:02:08:32:a7:74:1c:9c:29:84:c6:64:fc:c8:
72:14:5c:cf:86:c4:dd:99:ac:a6:f2:44:01:27:88:
21:6c:10:85:06:5d:eb:8a:d1:25:0d:df:82:5e:61:
ad:b8:f0:79:9a:3b:72:21:ba:35:44:e2:7d:7a:64:
1b:53:99:e8:0d:56:7d:63:b4:de:c2:fb:64:0d:2a:
ff:08:45:51:1f:0a:7b:90:16:cc:15:f5:ca:4f:9c:
98:fa:4d:12:15:f4:8b:28:b6:69:3d:51:a6:de:1f:
83:d0:96:07:62:17:de:b8:d1:79:66:ef:1c:9c:37:
6d:66:c7:15:3a:52:b9:d9:3c:5c:a4:ad:50:c7:d3:
f0:38:a1:d0:83:b8:f0:d0:6e:02:ef:e1:36:85:13:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AC:9C:D7:85:B1:DB:31:3C:10:50:BA:0E:2F:4D:28:33:0A:87:69
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01114286362011EBB5441A0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.212.0/23
103.170.156.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:37:cb:9a:e7:52:d7:d8:05:48:b5:23:a0:c7:d0:9b:0f:c1:
92:09:84:b2:17:b3:6d:db:11:b2:08:48:91:7c:f9:12:55:f1:
cb:a2:c3:77:5e:dd:3d:7b:ef:5b:ed:7b:ae:73:49:68:71:24:
8d:f8:b5:d6:11:16:21:e2:30:ea:e9:56:85:9d:22:1f:53:7e:
33:af:c3:87:cb:21:50:f4:3a:6f:b5:5b:4c:38:a2:53:76:f8:
bf:fe:b5:a9:f2:07:74:10:c3:a3:d0:95:8f:07:54:3c:f8:2c:
48:34:e8:6c:3f:8c:51:69:5a:f4:c0:59:30:f3:56:db:a2:54:
89:58:6b:d7:53:8e:51:1e:4f:56:a1:f0:8a:75:5f:c3:08:dd:
94:16:d2:54:a4:5a:b7:8f:26:bf:dd:48:b3:2a:98:b9:59:8b:
35:7c:ce:e9:1b:67:11:ff:93:23:7e:57:c5:bb:c4:48:33:6b:
34:3a:dc:1b:62:96:03:03:3b:93:f6:3b:6f:5e:e7:65:bd:27:
67:29:62:50:75:40:25:d5:6e:e4:79:f4:6a:14:76:22:95:08:
96:0e:95:40:a1:08:53:21:83:da:8e:a0:7c:ea:b7:bd:2f:3c:
0e:9b:8a:56:96:d9:b8:fb:76:96:0f:f4:11:cd:cb:8a:9c:85:
21:a4:d0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 12:16:56 2023 by rpki-client on console-ams.rpki-client.org