Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A70939E569611EC83E78F41C4F9AE02.roa
File: 0A70939E569611EC83E78F41C4F9AE02.roa (raw, json)
Hash identifier: IIj7IDes/Mlr8L+E7Ki9zedp1eKa5zaZ0kaMrpBf3q4=
Subject key identifier: 86:5D:75:A1:D6:B0:E9:94:55:30:08:63:EB:A4:93:F7:3B:98:88:F7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6F76
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A70939E569611EC83E78F41C4F9AE02.roa
Signing time: Wed 10 May 2023 16:38:56 +0000
ROA not before: Wed 10 May 2023 16:38:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142502
IP address blocks: 27.0.253.0/24 maxlen: 24
43.246.104.0/24 maxlen: 24
45.249.124.0/22 maxlen: 24
45.249.236.0/22 maxlen: 24
45.251.244.0/22 maxlen: 24
45.251.252.0/22 maxlen: 24
103.66.116.0/22 maxlen: 24
103.66.144.0/24 maxlen: 24
103.68.50.0/24 maxlen: 24
103.68.51.0/24 maxlen: 24
103.70.96.0/20 maxlen: 24
137.59.128.0/20 maxlen: 24
2407:ca40::/32 maxlen: 32
2407:ca40:dead::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28534 (0x6f76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:38:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc8a0-2646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:b1:37:39:48:07:69:1e:d8:35:07:7d:62:
d0:fa:29:c1:02:d6:98:4e:42:42:91:75:09:f2:f2:
00:1c:48:15:73:c8:b7:19:1a:cd:f1:25:0d:23:46:
c2:fc:68:a1:6c:09:29:aa:1a:1b:98:39:9a:db:a7:
6b:48:73:72:d1:f0:53:32:5b:9c:e2:40:f3:27:21:
91:73:9d:69:3e:c8:05:8c:71:d8:82:6b:0d:7a:f8:
81:7d:7b:88:b3:ef:00:cf:b5:46:dd:7e:e8:eb:4a:
a7:a0:80:dc:49:fc:92:e3:13:91:8b:bf:47:b6:19:
39:43:4c:30:66:3e:5a:17:12:40:12:21:3d:79:c5:
1c:9a:fa:99:5d:62:bf:ac:9a:4e:6d:20:08:2b:75:
b1:2b:71:4b:26:43:42:a3:7a:9b:b5:e2:c9:3d:c0:
37:7c:ce:77:35:3d:58:67:5a:0e:26:06:ac:84:0c:
71:1b:4e:1e:44:b6:f2:41:12:3b:ed:43:c7:3e:9e:
8a:73:8e:db:ea:61:a0:c6:29:03:91:f8:83:6d:0c:
72:b1:3e:ae:dc:c0:0a:6d:08:fa:67:a6:af:1d:1a:
4b:f3:74:d5:57:28:51:12:7a:d3:e9:4e:0b:cd:75:
39:ea:cb:52:f1:c3:db:3f:07:85:3e:fd:df:f9:ff:
dc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5D:75:A1:D6:B0:E9:94:55:30:08:63:EB:A4:93:F7:3B:98:88:F7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A70939E569611EC83E78F41C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.253.0/24
43.246.104.0/24
45.249.124.0/22
45.249.236.0/22
45.251.244.0/22
45.251.252.0/22
103.66.116.0/22
103.66.144.0/24
103.68.50.0/23
103.70.96.0/20
137.59.128.0/20
IPv6:
2407:ca40::/32
Signature Algorithm: sha256WithRSAEncryption
b9:14:ef:d0:b8:60:f8:bd:b0:72:a0:52:d8:5b:ff:3d:fe:ad:
dd:87:70:29:4a:8a:ca:a5:c9:c9:91:2f:38:1f:73:20:2d:0a:
b5:d8:9a:00:e8:68:d7:8f:1b:e9:ff:cc:06:d1:25:69:eb:02:
df:72:1d:48:d8:aa:4b:58:a8:cd:db:b4:ab:74:e6:80:a3:e8:
da:55:86:c5:62:7d:de:73:7f:e3:be:8c:09:88:e9:d7:03:29:
29:ea:ea:2e:78:43:54:cd:14:cd:5b:81:06:61:90:6d:ff:a1:
94:98:a7:f7:63:1f:c8:13:8c:a8:40:c9:c7:0a:7f:00:a5:57:
17:59:d5:bc:4f:1c:62:d2:2e:fd:df:c8:31:11:35:27:18:5e:
52:a4:82:59:2a:52:0a:28:25:a4:90:d4:a1:11:5a:ab:63:0a:
e2:99:d3:d3:32:e3:d5:27:06:33:a7:93:a9:27:f1:77:ac:8d:
11:b7:4e:50:35:fb:d0:d0:33:22:4e:33:ea:fd:32:e1:3a:cd:
5d:a5:6a:b5:dc:1c:2e:f5:b7:50:75:12:06:4e:3f:51:3f:23:
32:f2:59:5e:67:39:f8:b3:9a:aa:70:bb:2d:a8:04:48:65:5d:
da:b2:ed:b2:c2:20:e9:5e:4a:41:b6:5b:d1:05:a2:bb:7c:0c:
9c:0b:41:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 12:02:50 2023 by rpki-client on console-ams.rpki-client.org