Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0FAC515A642211ED8EEC813AC4F9AE02.roa
File: 0FAC515A642211ED8EEC813AC4F9AE02.roa (raw, json)
Hash identifier: iZqb+g6CbiiOa3gjLqA9diBiT8Rt29YFDM//JYp7CXQ=
Subject key identifier: F2:FC:A6:EA:0A:E7:D8:BB:48:91:99:16:25:52:B9:FF:69:45:B6:D7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 71E9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0FAC515A642211ED8EEC813AC4F9AE02.roa
Signing time: Thu 11 May 2023 07:22:24 +0000
ROA not before: Thu 11 May 2023 07:22:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135232
IP address blocks: 103.107.17.0/24 maxlen: 24
103.117.172.0/24 maxlen: 24
103.117.175.0/24 maxlen: 24
103.129.112.0/23 maxlen: 24
103.133.244.0/23 maxlen: 24
103.149.20.0/23 maxlen: 24
103.158.214.0/24 maxlen: 24
103.158.215.0/24 maxlen: 24
103.163.166.0/23 maxlen: 24
103.170.190.0/23 maxlen: 24
103.221.208.0/22 maxlen: 24
2405:ebc0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29161 (0x71e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 11 07:22:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645c97af-8a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:98:64:11:6d:09:3c:0c:fb:4e:80:15:5f:b0:
bf:5d:e6:ac:ae:90:1f:74:eb:f8:73:36:46:e7:9b:
f5:e1:f0:83:2f:48:e5:cb:93:bc:dc:a2:cf:73:5f:
27:85:1e:45:36:95:cd:1e:e4:9f:f4:d8:d5:09:dd:
2b:ab:37:4a:26:8f:21:92:df:52:0c:b2:0c:12:2b:
ac:c6:e1:4c:a7:df:c6:bf:72:45:12:d8:3a:89:a9:
a8:7b:44:87:b3:04:f7:67:be:01:fe:41:97:ea:98:
8a:b5:25:28:3d:78:22:0c:85:4e:15:17:a9:f1:7e:
4f:47:db:c0:82:13:27:3a:a5:eb:c1:24:28:95:d3:
11:90:f4:d3:91:84:11:d3:9f:02:1c:99:37:92:86:
97:de:14:a8:cf:80:76:e4:6c:85:4e:db:5b:03:c0:
e3:c1:62:38:b1:74:5f:f1:d1:74:81:1c:74:44:3c:
92:c1:dc:66:de:ef:e5:24:88:12:b3:64:38:cc:45:
9e:86:e6:ae:4a:1b:06:e5:47:b5:d4:76:d7:8a:3e:
88:85:91:3d:ab:57:49:24:3e:cd:00:61:54:c0:08:
37:44:f0:d9:d2:18:0f:e8:25:a8:46:f5:98:77:b5:
50:63:1d:f9:e7:90:07:7b:f1:83:74:ab:16:54:2f:
9d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FC:A6:EA:0A:E7:D8:BB:48:91:99:16:25:52:B9:FF:69:45:B6:D7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0FAC515A642211ED8EEC813AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.107.17.0/24
103.117.172.0/24
103.117.175.0/24
103.129.112.0/23
103.133.244.0/23
103.149.20.0/23
103.158.214.0/23
103.163.166.0/23
103.170.190.0/23
103.221.208.0/22
IPv6:
2405:ebc0::/32
Signature Algorithm: sha256WithRSAEncryption
71:c5:32:08:24:47:89:d1:18:66:33:36:54:26:53:eb:9c:a4:
01:0f:ca:b7:63:69:7f:d3:34:a5:a5:b8:40:ee:54:ad:c4:fe:
b8:83:ae:4e:5b:8b:f3:5e:ff:46:d5:6e:c6:af:24:d5:47:41:
96:8e:74:63:78:16:fb:11:32:28:ad:be:99:ea:74:21:d3:5e:
4d:a7:11:2f:b0:04:18:e1:04:32:b2:10:76:32:60:2a:43:d3:
dc:bf:db:26:f8:af:27:bf:b4:d4:87:1e:84:82:81:54:69:5a:
42:13:de:9b:be:1f:9b:c1:c9:ed:74:4b:86:f9:79:bb:f8:ab:
e2:b2:c3:6c:31:51:d7:57:21:b2:eb:86:f1:7e:c9:32:99:15:
68:49:9d:f0:ee:ce:e3:ac:f6:08:a1:a2:95:fc:bd:ec:e2:fc:
a9:f3:93:99:57:7c:3b:81:ff:cf:8c:1a:7a:2d:52:57:f4:56:
f7:41:3d:6c:22:ab:94:32:f3:76:2e:14:a9:38:ab:a7:1e:d5:
f0:2f:21:c9:34:46:69:fe:7e:c0:1f:e4:aa:33:1d:f9:11:df:
20:4d:a0:7b:33:16:21:f5:eb:5d:bf:27:89:76:aa:0e:a5:84:
86:b2:c6:30:d9:72:23:6a:4e:5c:4f:b1:f2:c8:14:1a:ee:e4:
a1:fc:ee:c9
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgICcekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTExMDcyMjI0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDVjOTdhZi04YTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8JhkEW0JPAz7ToAVX7C/XeasrpAfdOv4czZG55v14fCDL0jly5O83KLPc18n
hR5FNpXNHuSf9NjVCd0rqzdKJo8hkt9SDLIMEiusxuFMp9/Gv3JFEtg6iamoe0SH
swT3Z74B/kGX6piKtSUoPXgiDIVOFRep8X5PR9vAghMnOqXrwSQoldMRkPTTkYQR
058CHJk3koaX3hSoz4B25GyFTttbA8DjwWI4sXRf8dF0gRx0RDySwdxm3u/lJIgS
s2Q4zEWehuauShsG5Ue11HbXij6IhZE9q1dJJD7NAGFUwAg3RPDZ0hgP6CWoRvWY
d7VQYx3555AHe/GDdKsWVC+dCwIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFPL8puoK
59i7SJGZFiVSuf9pRbbXMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMEZBQzUxNUE2
NDIyMTFFRDhFRUM4MTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZAYIKwYBBQUHAQcBAf8E
VTBTMEIEAgABMDwDBABnaxEDBABndawDBABnda8DBAFngXADBAFnhfQDBAFnlRQD
BAFnntYDBAFno6YDBAFnqr4DBAJn3dAwDQQCAAIwBwMFACQF68AwDQYJKoZIhvcN
AQELBQADggEBAHHFMggkR4nRGGYzNlQmU+ucpAEPyrdjaX/TNKWluEDuVK3E/riD
rk5bi/Ne/0bVbsavJNVHQZaOdGN4FvsRMiitvpnqdCHTXk2nES+wBBjhBDKyEHYy
YCpD09y/2yb4rye/tNSHHoSCgVRpWkIT3pu+H5vBye10S4b5ebv4q+Kyw2wxUddX
IbLrhvF+yTKZFWhJnfDuzuOs9gihopX8vezi/Knzk5lXfDuB/8+MGnotUlf0VvdB
PWwiq5Qy83YuFKk4q6ce1fAvIck0Rmn+fsAf5KozHfkR3yBNoHszFiH1612/J4l2
qg6lhIayxjDZciNqTlxPsfLIFBru5KH87sk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-ams.rpki-client.org