Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1D3DBCA4A47811EE9CABB16BC4F9AE02.roa
File: 1D3DBCA4A47811EE9CABB16BC4F9AE02.roa (raw, json)
Hash identifier: s2gRPb9+mmOB8lrmDGeI8GCEHtA2WSuLjPPf0kX37Zw=
Subject key identifier: 5E:9A:7C:B9:16:27:DC:F1:F0:86:2A:CA:A8:A3:2E:1B:23:0B:CB:40
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 80C0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1D3DBCA4A47811EE9CABB16BC4F9AE02.roa
Signing time: Wed 27 Dec 2023 05:27:55 +0000
ROA not before: Wed 27 Dec 2023 05:27:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17747
IP address blocks: 45.249.84.0/22 maxlen: 24
103.75.192.0/22 maxlen: 24
103.84.164.0/24 maxlen: 24
103.115.182.0/23 maxlen: 24
103.171.100.0/23 maxlen: 24
103.172.46.0/24 maxlen: 24
103.172.47.0/24 maxlen: 24
103.184.74.0/23 maxlen: 24
103.217.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 09:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32960 (0x80c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 27 05:27:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=658bb5db-c82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e5:d8:7d:e2:3f:31:9c:1b:4d:f9:35:4a:53:
90:8b:3f:de:ab:0c:9c:16:c1:a1:bc:e0:5e:f4:7f:
c6:dc:03:2b:ee:f4:0c:ff:14:9e:83:56:e6:59:ba:
f1:68:cf:71:dc:e7:2d:59:66:e5:0c:c3:73:7a:44:
b8:12:fb:7e:7d:88:dd:a5:09:6b:7a:f3:73:89:cc:
50:2f:ea:2c:c5:35:16:eb:61:63:94:19:10:c3:78:
6b:91:66:3a:09:e6:c0:1a:16:1e:88:2d:a3:85:c1:
30:14:e2:2c:97:5f:9e:8e:2d:bd:3d:e8:3b:5a:10:
bc:78:cb:c9:9f:43:fc:4e:66:a8:a9:8f:48:c7:f8:
36:41:c4:81:aa:61:48:82:f3:f1:aa:e5:2c:02:0c:
9e:36:e2:d4:d2:ab:f0:8f:6b:88:fd:38:7c:0d:51:
67:66:fe:e8:9b:ed:55:15:cb:a6:3b:c4:80:30:46:
db:70:2e:ce:b4:00:70:d7:fa:64:2d:a0:f5:91:71:
8a:b0:14:00:4f:b9:44:9f:08:df:2a:aa:94:a9:b7:
ae:2b:22:4b:40:bb:ab:1a:6f:ce:b5:1a:61:c5:b3:
53:44:84:79:1e:bc:4b:1b:0e:fc:8f:af:da:44:38:
48:5d:5c:bb:db:f4:08:56:ad:91:3b:82:63:b3:3e:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9A:7C:B9:16:27:DC:F1:F0:86:2A:CA:A8:A3:2E:1B:23:0B:CB:40
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1D3DBCA4A47811EE9CABB16BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.249.84.0/22
103.75.192.0/22
103.84.164.0/24
103.115.182.0/23
103.171.100.0/23
103.172.46.0/23
103.184.74.0/23
103.217.244.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:80:ea:5f:4f:f0:3d:96:58:b2:63:fa:84:de:62:a9:ea:d5:
78:83:fd:9c:31:77:87:0d:a3:2f:f4:32:9f:7f:1d:7c:99:68:
1d:b7:76:3a:82:98:40:ca:e3:8c:b1:23:97:ac:2a:ad:fb:69:
96:00:73:e9:5a:20:c7:6d:f6:30:17:8b:6b:90:ae:9d:7c:75:
5b:2c:a0:28:37:44:d9:9f:d3:ff:76:a0:e2:3c:62:82:83:df:
6c:8f:8d:57:4c:16:e0:7b:aa:82:2e:dd:fb:ff:e2:4c:5e:70:
1b:f2:57:39:be:98:7b:66:7a:f7:ee:61:b8:ed:f3:79:e3:85:
04:7b:b6:6b:d5:84:37:f9:f8:0a:90:fb:49:6c:f6:4d:c4:bc:
7a:4c:dc:04:1f:5e:28:31:67:98:0f:2c:59:67:7c:60:7d:c4:
0b:77:19:94:1c:23:7b:82:94:f3:a4:19:0e:42:45:30:a0:df:
8c:84:0c:14:bf:1a:05:5e:4e:db:38:38:26:58:2a:5a:88:db:
0d:e2:a5:42:c5:de:70:74:07:15:ce:5a:10:9c:a1:03:9f:65:
74:8e:36:ce:b5:3d:f6:63:d9:28:56:09:9c:16:0c:86:1f:36:
2a:8c:cb:32:6f:3d:a6:cf:db:74:41:1e:76:81:d7:f0:89:a7:
48:e4:d3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 13:01:14 2024 by rpki-client on console-ams.rpki-client.org