Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C03D54E876811EEA558E043C4F9AE02.roa
File: 1C03D54E876811EEA558E043C4F9AE02.roa (raw, json)
Hash identifier: WVDMvUh7cgZuN9nTEkoyM2h2eA5eWInituYv08JMUS8=
Subject key identifier: E4:65:2B:01:F2:12:CC:EE:7E:15:07:1B:FA:7D:8F:DA:75:F8:EA:DB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7E07
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C03D54E876811EEA558E043C4F9AE02.roa
Signing time: Mon 20 Nov 2023 05:46:11 +0000
ROA not before: Mon 20 Nov 2023 05:46:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141803
IP address blocks: 103.170.84.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32263 (0x7e07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 20 05:46:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=655af2a3-cf43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:d5:40:7b:5b:25:97:61:26:e3:8b:73:bb:
67:55:02:c6:09:04:2c:10:fb:31:41:8e:24:69:4c:
bc:a0:a4:41:d0:65:6d:3e:76:60:70:36:d7:64:25:
5a:f3:b5:47:4c:d3:20:80:4b:25:4d:0d:f7:7e:4f:
d9:b4:99:95:c8:1f:d8:f3:2d:21:35:24:c4:6b:f4:
bf:8e:a0:fa:91:0d:2d:e1:fa:f8:53:44:97:69:72:
69:dc:da:d6:81:ce:0b:c2:13:f4:fc:78:96:17:d2:
8e:b0:47:7d:4d:a5:dc:b1:52:27:e8:bc:19:d5:b8:
c3:95:dc:92:e6:ae:84:3b:cf:d2:2b:47:e8:83:6d:
c7:93:4d:43:a4:69:8f:36:91:e7:f1:aa:1e:0d:d6:
b0:ba:6c:65:6d:fc:03:7b:2a:7e:fc:9c:51:e8:35:
6d:fc:eb:a4:17:3f:ea:ab:54:a5:27:c3:c0:87:7b:
ea:62:67:51:e8:77:6c:0b:f2:7f:df:7e:3f:cc:a8:
99:56:6f:99:1b:97:23:bf:f2:0b:1b:58:e8:0d:d3:
d5:99:eb:e5:0b:0e:63:ef:da:24:56:b6:88:e4:6c:
ff:ad:f0:a5:61:2b:55:6c:c0:c9:68:0c:c0:54:e7:
31:01:96:8c:61:33:b1:ac:51:98:ee:03:0c:56:1c:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:65:2B:01:F2:12:CC:EE:7E:15:07:1B:FA:7D:8F:DA:75:F8:EA:DB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C03D54E876811EEA558E043C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.84.0/23
Signature Algorithm: sha256WithRSAEncryption
15:b6:f9:66:07:88:27:53:76:db:b7:c3:3d:63:81:0e:29:ba:
78:36:e2:70:4b:58:c0:b9:6f:ce:75:2b:65:0a:32:5c:89:dc:
37:42:02:c2:d1:00:29:b9:72:a4:9b:ee:18:90:32:0a:b3:43:
6c:1c:06:4c:5a:e5:19:4a:f5:89:87:71:b4:8c:d9:15:68:ae:
82:5d:3c:e1:c8:9c:e0:ad:26:a0:e5:fb:34:45:e9:4e:37:0f:
2a:3f:c8:bc:a2:60:40:e0:b4:52:0c:14:c7:db:45:e5:37:a9:
27:2e:5f:fc:9b:e9:d3:e7:99:fe:b8:03:3f:ea:d8:20:27:6f:
3d:d8:bf:61:15:38:47:c9:0d:6f:61:6f:01:75:80:a7:08:da:
96:d0:9b:e2:32:a0:6c:ca:07:ae:53:7b:8d:c1:e0:0e:4e:fd:
16:82:4d:8b:09:25:38:ea:83:30:31:31:38:1f:87:d2:d9:64:
d3:5d:73:52:36:ff:62:c9:9c:d6:83:57:66:47:63:69:24:2a:
a6:e1:c0:38:f8:1d:28:c4:51:84:1d:70:5c:8d:fa:c7:1e:43:
39:75:06:48:f8:9c:72:65:6e:e4:cc:2b:8a:b2:37:bb:5e:63:
53:ab:dd:89:8a:92:b1:48:3e:e8:12:ea:15:ae:7b:e7:f4:23:
57:32:ac:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 07:00:58 2023 by rpki-client on console-fra.rpki-client.org