Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0B3B0AE2F6A711EBA535F056C4F9AE02.roa
File: 0B3B0AE2F6A711EBA535F056C4F9AE02.roa (raw, json)
Hash identifier: 9trP0U6btmpJheEngtpVrzI9SJziSLn4tJiii3UP3a0=
Subject key identifier: 40:1A:BA:9B:DB:E2:19:59:18:0B:8B:14:30:A3:2E:51:81:86:BC:69
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 72E8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0B3B0AE2F6A711EBA535F056C4F9AE02.roa
Signing time: Mon 29 May 2023 13:12:08 +0000
ROA not before: Mon 29 May 2023 13:12:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135766
IP address blocks: 103.127.100.0/22 maxlen: 24
103.144.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29416 (0x72e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 29 13:12:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6474a4a7-cf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:5a:57:c2:fa:89:ae:28:e8:59:34:ba:b6:
66:c4:99:e6:c5:ba:76:ed:71:b6:18:1c:08:17:8e:
61:16:61:5f:47:87:73:56:8d:6d:d7:7d:dd:72:15:
e1:f2:ca:82:9f:9e:7a:ab:07:aa:c3:19:f7:32:14:
f4:0d:ae:5a:7a:dd:31:6d:0c:e9:90:09:73:6d:ee:
5b:3f:43:a0:1c:67:1e:26:c7:74:18:2e:3e:5a:45:
47:4b:c2:2b:bb:42:73:0e:9f:c4:e5:1d:75:27:d5:
8a:0f:9f:0d:9a:27:53:11:90:36:84:c3:6d:c6:4e:
15:55:b6:47:1e:55:b6:2c:ee:d6:0f:97:11:a4:3f:
ac:23:ca:a0:7a:71:4a:0d:88:bc:22:b9:16:02:8d:
bc:9e:1d:e7:03:7e:ba:3c:21:82:27:1d:3c:f3:f2:
bb:e9:54:c2:4a:b2:ac:c5:9b:d5:a5:c9:29:00:cc:
71:7c:5e:86:5f:57:8d:20:56:e9:11:ea:bc:82:2b:
43:da:aa:20:79:f3:ab:ed:30:26:44:a7:ce:42:76:
d5:d8:59:73:a9:da:48:da:da:ec:15:13:de:30:78:
a9:c2:cd:f6:e2:d2:c6:59:cc:28:f4:30:39:ce:7f:
0a:65:9d:fa:5e:46:79:46:04:2a:38:7c:fb:51:01:
3f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1A:BA:9B:DB:E2:19:59:18:0B:8B:14:30:A3:2E:51:81:86:BC:69
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0B3B0AE2F6A711EBA535F056C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.100.0/22
103.144.115.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:1f:35:dc:cd:73:e1:f7:e9:2d:eb:23:61:3b:d0:e7:92:d3:
28:3c:53:3c:d1:c6:39:61:0d:ed:2c:7f:e1:a6:b6:4d:91:6f:
33:79:a0:5d:5a:6c:7a:51:9f:68:f0:f3:be:fd:69:2e:8b:0c:
e1:46:82:98:22:be:f7:7a:8d:df:14:bf:df:0c:f1:83:69:77:
d9:ac:a7:4a:5b:e6:d2:18:e4:eb:37:a1:5e:ff:2d:28:b7:47:
56:75:68:eb:32:c8:39:11:fb:87:6d:a8:8b:3f:8e:c4:70:89:
9c:17:08:0c:a8:fa:5d:3c:ee:58:82:b7:72:5f:b2:57:82:10:
af:01:5b:39:56:96:1a:0d:e9:2c:63:47:93:ca:9e:75:6c:14:
c3:37:86:97:88:25:d8:1e:5d:49:56:ca:92:e7:6e:00:58:81:
d0:d2:e3:2f:62:86:0a:16:a7:e5:75:25:eb:c6:ac:f1:b1:9d:
00:60:b3:6f:ec:fb:1b:db:fc:04:e1:5e:ff:5d:11:ef:5c:a5:
28:34:b3:c5:9b:7c:7c:ed:b4:e5:7b:58:49:fe:9e:79:c4:79:
6b:71:da:4b:c2:1d:32:60:1e:b5:93:51:5d:0e:39:b8:13:9a:
c7:8a:33:a3:53:7b:4e:40:66:3b:2b:45:68:7f:b4:52:ce:01:
41:05:0b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 08:44:15 2023 by rpki-client on console-ams.rpki-client.org