Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/33018140962F11ED981DD65AC4F9AE02.roa
File: 33018140962F11ED981DD65AC4F9AE02.roa (raw, json)
Hash identifier: 3VQjMvHxLlh38LIBUq7hyMFjUw4wMdpp1H1a4hLC7gs=
Subject key identifier: BE:E3:8B:02:77:DE:58:01:48:F7:00:FF:6B:A6:85:ED:A4:6C:02:59
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7118
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/33018140962F11ED981DD65AC4F9AE02.roa
Signing time: Wed 10 May 2023 16:46:36 +0000
ROA not before: Wed 10 May 2023 16:46:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150605
IP address blocks: 103.66.236.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 05:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28952 (0x7118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:46:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bca6b-e2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:01:b7:07:64:20:5e:24:9f:06:13:16:43:
e0:d3:14:02:5d:4d:a0:87:c9:05:cf:b2:03:a8:52:
d6:cc:91:bf:1e:bd:70:af:95:13:27:f3:e6:11:ee:
db:27:16:c5:03:0e:37:27:98:9e:d8:35:25:82:fe:
7b:27:f6:a2:60:cd:81:d5:62:b0:25:f9:7f:67:5c:
f8:a8:bd:b0:09:bf:02:c4:6d:10:d5:09:43:c5:2d:
8f:e6:78:f2:93:79:06:a0:69:9c:f4:aa:20:68:12:
83:e0:a1:84:22:9a:d5:87:24:4b:3b:8e:12:9b:e5:
05:e4:24:b3:d1:31:2c:0d:be:1e:23:a9:78:e3:59:
7d:3e:1f:cf:a0:1a:dc:21:5c:4f:b9:4f:a6:28:4f:
81:aa:75:21:c2:e1:29:6d:21:33:5a:ac:d1:5b:cc:
6c:5c:aa:c0:51:a6:9e:38:31:0f:3d:21:59:71:6a:
c0:ca:5d:4e:95:67:53:2c:2e:13:5a:be:a3:ff:3e:
8b:1e:b0:a1:16:45:b0:96:67:28:af:87:cb:05:77:
56:1d:fe:2b:b1:85:ec:aa:32:73:14:03:b3:46:c2:
09:39:0d:3a:c7:d8:84:81:6e:3d:b3:f9:e2:18:e0:
82:33:18:61:7a:2f:69:bc:df:53:62:9f:94:f3:ff:
dd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E3:8B:02:77:DE:58:01:48:F7:00:FF:6B:A6:85:ED:A4:6C:02:59
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/33018140962F11ED981DD65AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.66.236.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:12:65:db:5b:da:08:ed:56:b2:c5:ea:3b:4f:b0:c4:bd:37:
21:83:6e:56:7c:23:6e:c5:d4:2f:0b:1c:58:0b:94:b8:bf:75:
52:cb:e0:60:45:8f:4b:30:a1:bf:9f:12:12:aa:b8:a6:42:90:
5d:3d:47:70:01:e4:e7:ec:b0:d2:1d:40:f3:77:82:e1:39:95:
b5:31:f6:9b:bf:af:48:26:2e:57:33:b3:ae:f9:36:2a:25:aa:
3e:95:25:b5:09:f1:62:01:fc:f0:6c:de:90:55:30:2b:0f:52:
35:cb:bf:aa:f3:6a:b1:dc:f5:08:c5:f4:db:aa:97:00:b9:0f:
9e:06:b7:3b:a5:da:ab:3e:2b:3f:0a:a8:ea:f4:5a:51:6e:ff:
e1:7c:ee:1f:91:31:b1:67:bb:31:ab:bf:bd:a0:f6:ee:47:d1:
d6:ea:59:18:fc:30:c4:34:98:07:40:33:36:ee:86:ae:8c:67:
68:0f:a5:f6:3a:d4:d4:5f:7e:89:ba:63:11:28:06:c8:65:a5:
1e:43:96:f6:c0:1a:71:9d:f2:af:60:6a:bc:6c:6c:d9:22:7d:
5e:db:21:fd:83:4f:22:22:92:b9:fe:86:31:e1:b4:1b:3a:09:
b1:39:f5:2a:76:41:f8:77:fb:04:98:81:ac:6c:9c:06:a0:73:
57:ae:44:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 08:44:19 2024 by rpki-client on console-fra.rpki-client.org