Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1641E480CFD311EEB5E46181C4F9AE02.roa
File: 1641E480CFD311EEB5E46181C4F9AE02.roa (raw, json)
Hash identifier: mmmWRHUDO1NFFryax+V7eP8Ja1SIBUBjCR+6cH4I0tQ=
Subject key identifier: 76:7C:A4:6F:F4:3B:B3:7F:FD:4E:6F:D2:9D:A5:56:2D:96:8E:5C:0A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8341
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1641E480CFD311EEB5E46181C4F9AE02.roa
Signing time: Tue 20 Feb 2024 09:33:21 +0000
ROA not before: Tue 20 Feb 2024 09:33:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 103.54.236.0/24 maxlen: 24
103.71.98.0/24 maxlen: 24
103.166.180.0/24 maxlen: 24
103.167.152.0/23 maxlen: 24
103.233.120.0/24 maxlen: 24
203.78.131.0/24 maxlen: 24
2001:df6:9580::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 01 Mar 2024 03:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33601 (0x8341)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 20 09:33:21 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65d471e1-b2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ca:19:c4:99:88:fe:f7:4a:8b:26:c7:e1:d4:
d1:52:35:7b:39:fc:60:ac:1d:4e:0f:4b:21:d5:dc:
54:93:24:cb:55:b4:e5:01:fa:b1:a9:2e:ea:4b:35:
85:53:b2:fe:37:cf:79:2d:fc:26:ff:ac:83:08:e5:
fd:49:84:72:39:39:78:6e:c9:3a:40:8b:b4:e5:68:
78:36:74:a6:f0:b0:86:d4:27:9c:96:c1:e4:b8:f4:
a1:38:3b:e9:d7:98:b1:84:15:fa:df:b9:c0:2b:7c:
93:04:96:83:2a:5c:69:04:2a:6f:30:20:35:42:75:
ce:0c:e8:ba:de:fb:8b:07:e9:87:35:9d:eb:76:f9:
58:15:9f:57:98:2c:44:c2:2f:aa:70:90:17:87:0c:
51:e1:e4:d4:fb:db:1a:56:49:0c:63:41:96:35:74:
90:2b:dc:4d:21:cf:8d:9c:69:b9:74:bf:02:07:17:
fa:84:7e:85:d5:ae:06:de:45:e6:6d:7a:d9:29:b4:
4f:78:b5:11:54:b0:c8:13:e9:6f:9d:33:4f:81:e9:
5d:14:17:46:7f:12:2a:18:a0:5f:59:c2:35:7f:f3:
c7:ac:9f:f0:25:75:7b:8b:19:d0:f6:87:7b:51:9e:
18:5f:69:d9:ac:11:de:5e:c2:9d:df:bd:b2:9c:0f:
97:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7C:A4:6F:F4:3B:B3:7F:FD:4E:6F:D2:9D:A5:56:2D:96:8E:5C:0A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1641E480CFD311EEB5E46181C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.236.0/24
103.71.98.0/24
103.166.180.0/24
103.167.152.0/23
103.233.120.0/24
203.78.131.0/24
IPv6:
2001:df6:9580::/48
Signature Algorithm: sha256WithRSAEncryption
25:5f:ec:1a:c0:ff:ad:03:80:de:66:54:8c:d5:c2:23:de:06:
76:8f:99:21:dd:5e:91:f1:2c:8d:3e:22:c7:b4:31:ea:5a:e0:
e7:c9:08:aa:1a:56:6b:14:0e:37:f4:68:4d:68:91:68:7a:ec:
40:d2:d5:00:01:c7:ed:06:99:6c:b0:77:7d:48:05:43:95:63:
d5:c6:0e:6f:ff:d4:eb:0c:fe:08:f6:a3:c2:b7:39:d7:a0:f8:
4b:cc:c2:df:33:d8:ef:4d:38:82:18:55:38:5f:02:18:e8:76:
7f:fa:c0:69:c2:0a:5a:1d:4a:34:89:c7:a2:37:3a:4d:bf:cd:
99:f4:8f:f7:75:9a:7c:bd:96:03:3c:1a:8f:e3:e7:52:5f:58:
d0:2a:af:5d:00:65:10:33:9b:d5:6c:c6:6c:7e:3d:88:43:e5:
dd:6d:47:5b:7b:00:c8:0f:4b:2c:94:59:d1:e0:22:f0:e7:68:
3b:00:f4:5d:60:f8:d6:f6:6c:81:db:4e:8f:e7:cc:ee:6c:ed:
55:26:b7:a0:18:e4:6f:b0:64:b8:87:59:ce:47:4a:be:af:08:
f6:f0:4a:07:ab:31:de:c7:84:58:db:ab:f0:e9:23:79:1b:ee:
ce:26:1d:84:32:96:b2:9a:f5:04:8a:23:3a:29:53:83:84:dc:
b0:41:dc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 04:51:04 2024 by rpki-client on console-ams.rpki-client.org