Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/29D7A1CEC94E11EDB5018458C4F9AE02.roa
File: 29D7A1CEC94E11EDB5018458C4F9AE02.roa (raw, json)
Hash identifier: 3BG4AKgcp8pz2h2lM07EKK0+46tNNonRYRHpwRpFeOE=
Subject key identifier: AC:45:93:72:E3:9E:83:72:79:A8:BA:AE:E4:9F:A8:C9:8E:22:E6:12
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 70C8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/29D7A1CEC94E11EDB5018458C4F9AE02.roa
Signing time: Wed 10 May 2023 16:45:11 +0000
ROA not before: Wed 10 May 2023 16:45:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150048
IP address blocks: 103.191.44.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28872 (0x70c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:45:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bca16-cc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:aa:a7:7c:03:c3:58:ed:1e:9b:b7:2d:4e:
28:92:cd:c4:a6:e6:ca:8c:04:68:66:6d:ae:39:1b:
3c:5b:67:6d:cf:32:63:80:40:5e:fd:95:f0:37:00:
8f:fe:f9:be:9e:72:69:12:e2:c4:ab:6b:08:53:27:
f5:80:56:e6:26:03:fc:1f:e7:09:17:77:c3:ac:2d:
cd:57:7c:29:26:02:13:97:cf:b0:32:d5:8d:0c:6d:
37:0a:13:0a:2d:4c:9d:13:bf:b3:60:03:31:e0:f2:
a2:cd:36:ee:c3:cf:b3:d9:d0:29:14:a6:d8:e2:5c:
21:53:16:d4:b4:b7:bd:1c:e7:ec:9b:ac:79:ec:d6:
9b:b6:9e:0e:2c:85:9a:a5:c7:08:89:df:04:8b:5d:
d7:81:45:7f:6b:63:cf:e5:00:c1:a6:76:de:f6:7f:
ee:e5:c5:d6:01:7a:10:de:61:87:0f:c9:d6:2b:68:
2c:c9:4f:57:57:b0:b4:6b:37:da:ee:2d:e6:1b:fc:
e2:e9:75:65:66:c7:3e:f5:51:b7:de:d3:98:01:fc:
a6:80:e9:79:66:21:bd:f4:cb:1d:e2:c0:62:3e:d7:
8a:8b:e5:97:45:8e:24:bc:77:69:88:ca:50:c9:f4:
48:3e:dc:ad:a3:32:37:a6:c7:ad:f8:5b:2d:62:32:
8c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:45:93:72:E3:9E:83:72:79:A8:BA:AE:E4:9F:A8:C9:8E:22:E6:12
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/29D7A1CEC94E11EDB5018458C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.191.44.0/23
Signature Algorithm: sha256WithRSAEncryption
45:b0:8c:70:a7:fa:4a:3f:ab:75:3a:33:48:eb:bb:ee:16:4c:
00:80:b8:52:fc:a9:6b:f0:5d:ac:d6:37:d7:96:1f:89:54:21:
68:2b:d8:dc:fd:77:45:1e:9f:20:96:81:f9:49:63:54:b5:bb:
dc:27:47:c4:2c:c2:6c:5e:6d:58:a2:8c:8b:c3:cf:c4:3c:4f:
b0:fe:10:b8:3b:b8:d4:d4:f7:1f:72:56:8d:62:35:cc:e5:68:
00:16:8f:52:6c:98:b6:88:69:30:7d:6e:6d:d1:8f:71:b9:24:
f5:a1:28:52:6a:85:dc:3f:48:39:be:f9:98:20:12:70:44:5a:
c8:cd:f1:9a:17:67:08:1d:94:f5:5b:f1:28:dd:48:cf:65:db:
81:91:4c:8d:c7:28:28:4d:66:54:57:de:8f:60:b4:4c:9b:d9:
9c:ab:48:d7:3c:b1:34:11:9b:d7:73:9c:26:83:d6:8f:ff:f5:
b7:f7:ee:df:d4:2f:b2:e5:2e:96:05:32:b9:fb:8b:92:0f:76:
35:13:ba:39:2f:9b:93:2e:54:d4:0a:5c:e8:10:c9:33:0d:1f:
89:11:ea:2b:f8:13:12:22:6d:96:90:3f:9f:f5:d5:85:96:39:
08:b6:d3:c3:30:ef:23:dc:94:bb:95:de:e2:2a:de:18:d7:20:
05:30:12:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:51 2023 by rpki-client on console-fra.rpki-client.org