Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1AE41548AC3611EC92A22836C4F9AE02.roa
File: 1AE41548AC3611EC92A22836C4F9AE02.roa (raw, json)
Hash identifier: ge9vaWpdx3t68G6H2rTHocYr+H1XQpH+jM7eJ+nq9lM=
Subject key identifier: 84:39:DB:2C:A1:B5:2B:DB:4C:04:47:CC:20:2A:28:B6:06:50:8A:C8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6CC4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1AE41548AC3611EC92A22836C4F9AE02.roa
Signing time: Wed 10 May 2023 16:26:09 +0000
ROA not before: Wed 10 May 2023 16:26:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136956
IP address blocks: 103.177.190.0/23 maxlen: 24
103.178.178.0/23 maxlen: 23
103.178.180.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 05:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27844 (0x6cc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:26:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc5a1-b3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:7c:be:de:05:23:53:88:0c:d5:5c:fd:85:
c5:22:f6:60:5d:99:98:bf:1f:69:19:75:df:ce:da:
3b:37:e8:12:ea:96:39:cd:d6:6c:34:fe:00:13:25:
12:e9:cf:4b:44:ec:97:88:0d:e5:a4:e6:02:ea:80:
1a:90:e1:d5:f7:24:d4:eb:72:35:b6:50:0f:0f:e4:
c3:34:f7:cf:af:9d:6e:9e:d3:01:31:c2:81:8f:fa:
a5:a7:42:83:0a:5f:d4:40:13:0c:5c:cb:7d:50:f5:
1b:d6:8c:78:91:53:fe:ee:af:d6:74:ab:4f:44:52:
87:b4:bf:41:ca:e2:3c:eb:19:65:a0:bc:76:2e:8c:
bd:56:44:b7:69:e5:12:56:4f:22:ae:08:b5:ea:4d:
0f:39:15:b1:75:90:5c:d7:61:e6:95:99:49:31:ba:
94:47:0e:07:54:46:7d:88:11:64:79:5a:f7:16:a5:
35:44:b3:ed:37:ec:17:b0:39:21:76:05:94:52:12:
c5:c2:c7:5c:c0:d8:8a:f7:36:9c:39:6e:69:54:4a:
57:21:ff:b4:bc:72:da:0d:7d:94:5c:3c:7e:30:f5:
a5:5e:94:8e:ed:2f:04:a9:35:e1:c7:74:76:dd:1c:
a6:9a:96:b7:f8:a0:b2:ae:e1:7a:35:e6:da:6b:88:
ee:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:39:DB:2C:A1:B5:2B:DB:4C:04:47:CC:20:2A:28:B6:06:50:8A:C8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1AE41548AC3611EC92A22836C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.190.0/23
103.178.178.0-103.178.181.255
Signature Algorithm: sha256WithRSAEncryption
18:e0:70:06:15:26:da:b2:d0:5b:0b:79:e7:3a:ba:9a:20:6b:
d8:e0:f0:cf:20:73:96:af:17:b0:fe:d3:8d:82:db:fa:bf:27:
e5:12:c3:68:bd:e2:0d:7a:49:20:5f:b7:f8:26:82:66:4f:ad:
34:93:a2:7c:4f:c7:04:bf:d7:7a:a3:56:88:06:d4:7a:5e:3d:
7d:77:6a:2e:21:5a:f4:ec:8f:d8:04:c9:04:0c:34:75:b3:7c:
6a:26:12:4b:2a:04:a6:99:82:36:14:b3:f9:cf:05:dd:42:08:
b2:e2:82:f9:56:94:df:23:b5:63:71:7f:0d:be:f1:0e:0a:e5:
e7:aa:25:29:19:4d:8a:b3:66:f6:8b:53:80:78:78:9e:b9:e5:
d1:ae:71:ab:4d:e4:38:3a:1f:fc:b5:35:56:9f:ed:5b:8d:6a:
e8:66:57:29:6f:0a:9e:2f:db:20:69:dc:16:ec:6f:2e:22:d4:
0a:6c:ec:c9:16:ff:61:d3:7d:ef:f2:7c:01:83:48:a4:d3:43:
87:11:b5:69:f0:6c:ec:01:e2:33:75:f0:a6:d6:a9:8d:d4:e8:
6e:1b:ca:8a:16:ae:dc:a3:0d:15:0a:44:90:13:2c:c3:03:57:
0c:c7:ea:cd:4d:c8:f0:4c:28:2a:ef:17:3f:15:44:99:ce:13:
40:3c:3e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 06:47:12 2024 by rpki-client on console-fra.rpki-client.org