Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/024120F2C31011ED8DD20D6BC4F9AE02.roa
File: 024120F2C31011ED8DD20D6BC4F9AE02.roa (raw, json)
Hash identifier: hfWP+5gozR3Vt/XXFwfz0rvzHRovMelL06DXGlvN1IE=
Subject key identifier: 96:68:0D:DB:14:69:1D:31:0A:65:60:63:4A:8F:E5:D3:8E:F9:4E:1D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 76C8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/024120F2C31011ED8DD20D6BC4F9AE02.roa
Signing time: Wed 02 Aug 2023 13:20:10 +0000
ROA not before: Wed 02 Aug 2023 13:20:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136367
IP address blocks: 103.179.96.0/24 maxlen: 24
103.179.97.0/24 maxlen: 24
103.179.224.0/23 maxlen: 24
103.180.174.0/24 maxlen: 24
103.180.175.0/24 maxlen: 24
103.180.237.0/24 maxlen: 24
103.181.110.0/24 maxlen: 24
103.181.111.0/24 maxlen: 24
103.189.82.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30408 (0x76c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 2 13:20:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64ca580a-237e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:17:2e:b2:53:6e:22:ce:46:43:a0:2d:aa:
0f:af:58:b6:6c:d3:35:d6:37:70:5f:58:06:b0:e6:
64:c6:98:b4:fd:25:d5:88:c3:57:5b:b1:01:b6:83:
87:57:fd:36:1f:09:75:62:82:11:8e:88:ac:3a:12:
56:ff:83:c6:92:aa:d2:65:d5:da:87:67:b3:67:8f:
bd:76:af:b5:3e:d2:7a:95:8d:35:27:fa:54:a7:6b:
76:3f:9e:43:c1:90:f6:d9:47:19:21:6c:c3:68:55:
d4:29:38:86:4a:90:4b:56:94:b7:a9:a1:93:73:cb:
f2:05:39:b9:57:72:9d:22:46:91:47:26:9f:0a:32:
b2:b1:03:9c:c5:d1:43:d1:af:fc:f6:e6:01:24:a7:
67:c5:dc:a2:59:3a:99:d4:20:43:c8:bd:8d:0b:63:
7c:d2:42:10:c9:00:48:9b:a4:02:30:15:04:6f:2c:
34:8f:02:b1:04:51:1a:bf:06:da:d6:22:fc:d7:1a:
82:81:27:f4:1a:2b:25:4e:ee:ea:07:34:f2:f4:60:
bb:10:a6:b2:91:da:d2:42:f9:3c:68:a3:c7:71:19:
5a:aa:0b:be:66:f5:11:68:8b:4f:d5:6b:77:9b:dc:
cf:95:d1:c9:9a:6f:d6:ba:a4:6f:a7:87:e5:b0:9c:
18:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:68:0D:DB:14:69:1D:31:0A:65:60:63:4A:8F:E5:D3:8E:F9:4E:1D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/024120F2C31011ED8DD20D6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.96.0/23
103.179.224.0/23
103.180.174.0/23
103.180.237.0/24
103.181.110.0/23
103.189.82.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:43:ef:d4:58:28:13:d9:e9:9f:1a:33:38:24:e4:e1:a5:97:
df:90:18:f3:82:c8:b5:ad:78:0b:dd:c5:57:18:42:ee:35:eb:
d5:71:4f:42:ca:c5:f3:46:f2:44:55:1e:ac:78:08:cb:e4:ec:
93:be:0d:91:02:59:73:62:d8:57:72:07:b6:dc:2e:26:2c:00:
09:38:e0:87:c0:dc:35:bc:ba:ac:2a:4b:7c:51:da:b7:70:e9:
4e:2f:27:63:85:07:d4:84:52:98:f6:f0:35:43:96:79:56:4e:
cc:d5:a3:1f:99:8b:fd:89:28:ae:72:ab:d7:1c:cf:00:e4:72:
9a:d9:6a:04:2f:dd:77:c5:2f:fe:39:10:76:ae:b6:78:28:cf:
2b:1c:9a:aa:cd:15:ce:5b:6f:14:64:ef:7d:6e:d5:6e:93:fc:
fc:8c:c8:f0:19:fe:a4:0b:21:96:3f:0c:ab:db:fe:e4:36:34:
1c:2d:e6:e2:7e:6f:ac:b8:ca:b9:84:01:40:d1:93:a6:d1:1b:
95:66:5f:6b:d9:60:ee:d6:8d:7c:d0:87:83:0e:c3:28:39:20:
f4:05:8e:13:ba:da:28:9a:7b:5e:d0:9b:bd:df:39:e8:d0:7a:
05:0b:97:00:72:fd:84:fb:42:ed:fb:21:8c:32:69:b2:39:86:
d0:67:0b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 08:58:36 2023 by rpki-client on console-ams.rpki-client.org