Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B0705EC877C11EEA1BCBE5CC4F9AE02.roa
File: 3B0705EC877C11EEA1BCBE5CC4F9AE02.roa (raw, json)
Hash identifier: VIM9fcIUvZkNGYfxciVGrT+viiPkzqS/1b3phfLiKZ4=
Subject key identifier: 02:B7:FA:CB:5F:EB:6C:61:00:64:7F:6C:9E:61:3F:6C:81:91:DF:23
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7E4D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B0705EC877C11EEA1BCBE5CC4F9AE02.roa
Signing time: Mon 20 Nov 2023 08:10:14 +0000
ROA not before: Mon 20 Nov 2023 08:10:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139482
IP address blocks: 103.97.104.0/22 maxlen: 24
103.110.251.0/24 maxlen: 24
103.114.64.0/24 maxlen: 24
103.140.72.0/24 maxlen: 24
103.140.73.0/24 maxlen: 24
103.142.198.0/24 maxlen: 24
103.165.72.0/24 maxlen: 24
103.165.73.0/24 maxlen: 24
103.173.14.0/24 maxlen: 24
103.173.15.0/24 maxlen: 24
103.177.42.0/23 maxlen: 24
103.177.181.0/24 maxlen: 24
103.179.120.0/24 maxlen: 24
103.179.224.0/24 maxlen: 24
103.181.208.0/24 maxlen: 24
103.181.209.0/24 maxlen: 24
103.190.97.0/24 maxlen: 24
2405:9540::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32333 (0x7e4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 20 08:10:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=655b1465-c2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:12:bb:83:d2:00:0a:2a:a3:6a:8b:bf:f7:
d7:03:56:c7:01:57:a4:a5:76:70:ee:8a:d1:e8:43:
81:8f:9a:15:23:31:c4:01:80:d8:1f:1c:ae:9e:77:
07:88:43:32:d7:f2:37:99:eb:b3:86:3a:28:a1:8a:
54:27:f7:64:60:8e:8e:e3:3b:57:6d:a7:e5:be:52:
ad:f7:18:39:ed:dc:ba:30:9a:ec:13:8f:0f:7b:45:
4a:e5:fa:7f:49:5f:11:b5:12:5c:44:3c:9f:3a:f6:
13:a9:b2:c2:f1:7c:b5:e3:9d:ba:b2:5a:d3:4c:81:
0a:34:bb:a2:81:64:18:60:b9:43:86:e0:21:26:8b:
7a:bc:e2:3a:86:fb:66:52:42:2c:bd:c1:90:02:bb:
a7:e5:ea:eb:37:51:6a:7d:e3:56:48:e0:ca:ac:5d:
c1:25:78:3a:05:b3:e0:d4:b4:a0:86:2e:77:7c:4e:
eb:e7:6f:f5:e6:3d:4b:54:86:33:76:b5:b1:84:1b:
10:b5:c6:fd:ad:37:52:79:14:1a:48:1f:f9:9a:22:
06:3d:20:bf:41:37:5d:b0:d3:8d:6b:49:3e:ed:4e:
5d:39:d2:4b:ab:82:b0:6a:7e:89:ed:13:f0:51:93:
55:d3:05:b0:60:62:a8:35:c2:c8:4b:a9:99:6a:5a:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B7:FA:CB:5F:EB:6C:61:00:64:7F:6C:9E:61:3F:6C:81:91:DF:23
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B0705EC877C11EEA1BCBE5CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.104.0/22
103.110.251.0/24
103.114.64.0/24
103.140.72.0/23
103.142.198.0/24
103.165.72.0/23
103.173.14.0/23
103.177.42.0/23
103.177.181.0/24
103.179.120.0/24
103.179.224.0/24
103.181.208.0/23
103.190.97.0/24
IPv6:
2405:9540::/32
Signature Algorithm: sha256WithRSAEncryption
29:ae:09:03:ee:fc:9b:ef:6c:64:60:28:4f:69:7a:d0:c5:7f:
ca:ca:b0:4c:44:ed:2f:a5:49:ef:6e:ce:90:2d:4a:97:6a:4f:
b0:f4:08:62:69:a6:a2:d3:54:24:47:98:d1:14:42:e3:58:49:
f4:d7:d7:1d:28:be:95:2c:50:4b:34:78:ed:83:91:b2:e6:9a:
d3:b8:17:6f:43:03:c7:1a:e8:18:5b:ff:ec:2f:9e:26:80:85:
da:7f:8d:d6:9a:a6:d6:42:27:fc:ee:63:5e:fd:29:49:6b:94:
21:8c:a6:57:6e:94:7f:6e:c4:d3:c2:89:9c:90:06:d7:3b:a0:
86:e1:01:91:40:4e:3c:f9:57:93:aa:b5:f5:15:67:f6:a6:45:
d5:92:10:14:ac:88:6a:f3:a0:14:88:f5:f3:32:8d:88:5c:2f:
af:43:46:52:22:2a:8a:84:9e:09:2d:fa:45:ec:ca:d0:ae:80:
63:a6:7e:fc:b0:0a:52:d2:8e:f2:ec:2e:7c:e7:4e:37:3e:53:
1f:5c:2a:99:02:c6:83:41:ad:45:66:ec:fb:b2:bf:19:2c:f2:
5e:a5:d1:d8:69:55:9e:3e:dd:f7:9f:c7:7b:42:4c:3b:1a:30:
a8:80:16:a2:38:4b:51:52:31:63:00:82:e3:83:01:90:53:27:
09:96:0d:c2
-----BEGIN CERTIFICATE-----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Generated at Thu Dec 7 06:21:31 2023 by rpki-client on console-fra.rpki-client.org