Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0AA2FE86205111EC86786E82C4F9AE02.roa
File: 0AA2FE86205111EC86786E82C4F9AE02.roa (raw, json)
Hash identifier: wMucUBJK7bXqi4+gmQKwZ/Uj9uGrC1oH/bHQ+ThmZrw=
Subject key identifier: 96:87:B6:7B:F3:44:AD:0B:53:A6:63:8F:52:7B:39:F1:27:A8:4C:99
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6B42
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0AA2FE86205111EC86786E82C4F9AE02.roa
Signing time: Wed 10 May 2023 16:18:48 +0000
ROA not before: Wed 10 May 2023 16:18:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134855
IP address blocks: 103.181.147.0/24 maxlen: 24
202.160.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27458 (0x6b42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:18:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc3e8-97da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:19:1b:fb:87:f3:9a:1b:5e:86:7f:1d:f3:
93:f5:33:da:23:e9:90:d2:6f:bb:11:77:09:46:dc:
23:53:e7:59:3e:03:6e:53:df:56:60:03:ed:fe:06:
b8:0b:5f:08:f8:cc:e9:c4:99:c3:83:c5:58:6c:3c:
1b:69:20:a1:30:6b:a8:24:92:66:a3:2f:8a:a5:89:
4d:75:9a:54:15:a9:51:99:d7:96:b8:3f:af:c6:5d:
2c:f1:84:c2:c4:e1:c7:48:7c:1f:89:e7:14:c7:00:
03:83:d5:d4:b7:5f:40:4e:fc:ea:92:02:fd:24:27:
59:46:45:34:c2:87:38:84:5a:e5:ba:5d:d5:c5:e9:
ce:8c:69:e4:e4:34:52:f7:14:7d:2e:a4:ca:ef:d7:
b9:42:1e:f7:6b:78:99:dc:e2:19:9d:5c:bf:da:dc:
07:d7:17:59:cd:d8:f4:eb:f4:51:0d:c7:21:a1:04:
79:cf:8a:a6:7d:ad:e1:11:8c:db:5b:e1:f4:c3:95:
80:72:8d:c9:7c:0f:04:5f:17:19:93:68:3c:db:19:
26:fb:91:26:0d:7c:82:eb:9b:2e:3b:00:1c:25:3b:
08:d8:37:12:13:f8:28:ab:00:eb:d7:4e:58:03:15:
e1:ee:dd:16:6b:18:4f:74:ed:42:bb:46:0b:04:85:
a2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:87:B6:7B:F3:44:AD:0B:53:A6:63:8F:52:7B:39:F1:27:A8:4C:99
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0AA2FE86205111EC86786E82C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.147.0/24
202.160.174.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c8:72:8e:e8:13:a1:73:d6:b4:2d:2c:63:21:7f:fe:3e:c2:
35:d2:ce:eb:b4:5c:d7:de:6b:86:13:d4:5c:2b:1f:eb:35:90:
7d:04:65:be:c1:29:2a:8f:12:0a:7d:40:4c:0e:ef:8f:94:dc:
18:72:31:42:66:72:09:35:8f:1c:84:85:72:9b:aa:18:10:5d:
9e:f7:cc:06:16:58:0d:12:d8:86:60:08:a2:7f:bc:da:7e:33:
fb:67:ec:7f:37:cb:27:8d:be:e0:ae:cb:88:c3:26:fe:86:34:
a7:d4:a3:96:1f:ce:21:7c:e4:bc:3c:c4:80:d8:b9:ef:1b:c0:
12:0c:77:b7:92:68:56:24:10:c4:af:ca:91:59:03:61:14:94:
93:64:d5:93:1f:c6:f1:11:ee:ab:e4:ea:4b:0f:ab:24:60:e2:
53:70:4c:0f:ab:e7:fe:98:3b:24:0a:e8:f2:a7:6f:85:6c:70:
37:16:8a:e7:58:39:27:57:50:a9:21:d1:7d:fc:49:47:13:bd:
1c:f3:12:82:75:cc:56:a2:86:e8:4c:e2:41:db:ef:39:c4:36:
b7:5c:3d:89:fc:e1:d4:18:32:6b:d8:8b:a4:dd:66:67:39:f7:
4f:63:d6:33:4e:be:20:4d:7e:fb:0d:0e:bc:a3:e6:02:bf:9b:
10:a4:02:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 10:36:28 2023 by rpki-client on console-ams.rpki-client.org