Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2C9B7C9418E011EBA2E7A160C4F9AE02.roa
File: 2C9B7C9418E011EBA2E7A160C4F9AE02.roa (raw, json)
Hash identifier: T6/Pm7nWbL9ZTQmcufIYZgRJc7afGOCTn/R26+LZ9OA=
Subject key identifier: 95:D5:6A:C4:FF:D5:2C:89:7B:92:CF:78:AC:39:6D:01:2C:5F:A3:C4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6AAA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2C9B7C9418E011EBA2E7A160C4F9AE02.roa
Signing time: Wed 10 May 2023 16:15:53 +0000
ROA not before: Wed 10 May 2023 16:15:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133691
IP address blocks: 103.49.121.0/24 maxlen: 24
103.213.202.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27306 (0x6aaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:15:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc338-6624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7e:33:3b:9d:3a:53:da:5c:db:82:3d:f2:f6:
ee:27:d6:16:70:f6:a8:4a:6a:56:cc:5a:e4:08:f8:
b9:43:69:41:fc:72:95:75:f8:a1:34:2a:98:c0:1e:
4c:17:05:c5:1a:7f:8e:c8:17:83:71:5a:d9:06:26:
f0:f1:a7:4d:74:00:57:da:ac:17:24:07:71:a2:a1:
24:f7:65:ac:fb:aa:2c:c5:14:1e:3c:22:fb:a4:32:
d3:29:39:71:25:a0:3b:05:71:a2:4d:69:78:63:c9:
1c:31:ed:fe:3a:4e:47:72:cd:f9:64:26:34:6b:64:
14:42:f5:95:50:e4:a0:c9:7e:c7:75:75:3c:f0:a9:
05:ec:55:60:cd:7a:a7:5b:64:0d:75:35:f8:5d:31:
2c:f1:00:ca:8d:33:79:25:92:c1:76:d0:cb:17:e5:
a7:6e:08:52:77:06:6b:df:08:3c:96:0c:b6:11:c7:
6d:01:12:43:de:8c:7a:dd:93:b5:04:2d:b6:4c:9d:
78:42:3b:03:ff:d0:5a:ce:b4:ed:cd:ae:2b:3a:6e:
31:69:e3:a0:52:bc:3c:05:33:a0:1d:22:3b:41:de:
b3:43:f8:48:2a:b3:6f:5f:d4:09:a0:04:12:ff:df:
27:b7:e7:64:a2:d4:f7:61:1b:5d:82:29:d7:72:1c:
b5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D5:6A:C4:FF:D5:2C:89:7B:92:CF:78:AC:39:6D:01:2C:5F:A3:C4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2C9B7C9418E011EBA2E7A160C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.121.0/24
103.213.202.0/23
Signature Algorithm: sha256WithRSAEncryption
52:2e:c2:0b:ae:b4:71:31:59:8c:82:d1:fc:a6:05:30:91:d9:
d0:64:ca:6e:5a:60:09:64:ee:4f:de:37:d6:6d:0a:4a:69:aa:
c6:5c:ee:a6:d5:ac:43:7b:c5:d0:e6:31:73:9a:d2:2b:e8:b7:
bc:89:3c:79:6e:58:48:83:4e:78:fb:24:98:a0:bf:07:d3:6c:
00:65:33:f7:32:e9:c1:c1:6b:cc:ea:b4:29:ac:07:3e:8b:72:
79:12:50:ef:dc:c4:b3:6d:90:f2:ad:d2:18:dc:1e:c7:4e:df:
64:0b:fc:6b:e2:cc:25:bc:97:bc:63:f4:3d:0c:e3:f8:c6:38:
ae:8d:93:8f:5d:2b:1b:96:85:00:09:39:da:9b:57:23:6e:9b:
b9:c0:9b:48:df:a8:48:67:d6:34:fd:12:fb:39:48:7a:ef:b7:
0b:6b:24:b3:a4:58:e5:0e:5f:bc:25:2f:e8:1c:84:1e:c7:fd:
01:4a:10:1d:d9:12:7d:64:9b:61:b1:1b:5a:a1:eb:94:f9:11:
c1:00:1f:96:75:84:91:26:d7:96:5c:da:96:07:f3:4a:70:63:
f5:fd:0d:cb:75:8e:14:8d:31:fe:8d:27:72:fc:8a:f4:0b:da:
c6:80:44:84:0f:fa:ca:c8:63:02:da:13:62:19:41:4c:5a:61:
2d:cc:0f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 06:29:44 2023 by rpki-client on console-ams.rpki-client.org