Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E61BA7448B211EE89A9A660C4F9AE02.roa
File: 3E61BA7448B211EE89A9A660C4F9AE02.roa (raw, json)
Hash identifier: +eccZ7sqlDulNk6vxDy/OcTHZ9pvnUHAlquFH57nkS8=
Subject key identifier: E9:15:79:6C:52:AB:EB:DD:26:39:05:69:38:A4:57:AB:A7:D9:97:9C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7927
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E61BA7448B211EE89A9A660C4F9AE02.roa
Signing time: Fri 01 Sep 2023 10:28:08 +0000
ROA not before: Fri 01 Sep 2023 10:28:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141803
IP address blocks: 103.167.238.0/23 maxlen: 24
103.170.84.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31015 (0x7927)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 1 10:28:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64f1bcb8-850e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a6:67:11:3c:1f:27:13:f3:ff:23:1b:83:65:
ae:b4:ed:ad:e5:27:e3:0b:a9:29:f9:86:af:d6:cd:
28:b7:1e:89:ab:59:c5:93:f7:a6:3b:be:30:4e:ca:
c9:ad:05:0d:3f:b7:52:01:9f:3b:77:97:e8:a6:be:
31:f1:55:a4:98:13:8b:c8:98:9e:57:d1:17:e9:62:
00:9d:36:de:ea:ce:a4:89:b5:05:7d:6b:58:69:2c:
6b:09:11:44:75:5a:6f:6b:d5:e6:d0:1a:e6:73:ed:
8f:75:36:f2:d9:f0:a7:5a:71:4e:71:ef:c5:83:e6:
f0:db:31:3d:48:5c:26:a4:6b:59:c2:7d:45:2f:eb:
ee:53:bf:80:55:67:41:cd:13:1d:37:0c:9c:e5:98:
3c:bf:97:49:b5:af:6c:56:81:e2:34:79:f0:ca:5a:
ae:6c:f8:83:4c:1d:fd:64:6c:43:69:31:46:58:29:
8d:86:6d:06:03:d1:63:fb:21:dd:95:ee:34:e0:e7:
ba:b1:4f:33:4c:22:14:55:a6:e6:7d:11:a6:b3:98:
c0:a5:d1:e9:05:2e:38:88:c2:27:5c:e0:b8:a3:6d:
af:de:36:08:19:98:bb:bb:d7:f6:d4:d6:c0:df:c1:
2b:90:bf:2f:37:f7:32:85:4d:6f:1d:97:67:24:dd:
ac:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:15:79:6C:52:AB:EB:DD:26:39:05:69:38:A4:57:AB:A7:D9:97:9C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E61BA7448B211EE89A9A660C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.238.0/23
103.170.84.0/23
Signature Algorithm: sha256WithRSAEncryption
06:6a:8a:15:f9:a1:e6:b6:43:07:12:f5:7e:9d:15:7e:f3:f1:
5f:85:95:0a:2a:cb:d0:5b:bd:09:79:72:a8:f4:fa:4d:25:cb:
b2:5a:bb:39:5c:6b:77:30:cf:95:55:93:68:3d:e8:64:5e:7e:
2a:28:a8:8a:18:2d:4a:78:c2:73:e2:27:2c:30:6f:ca:b9:93:
c2:44:62:05:ce:5e:dc:b3:b4:26:df:fa:0e:0b:8d:f3:12:89:
cc:5a:fe:f0:e2:e8:7f:4b:7a:96:89:dc:6c:78:34:8b:68:09:
53:18:85:6a:8b:d5:70:42:1a:88:3f:a7:05:37:cb:da:68:ef:
1c:01:5c:7d:7e:f5:40:96:52:24:04:e1:8f:31:47:8f:47:76:
f1:a4:b8:e1:e9:d0:e7:3f:22:64:2f:1a:75:ad:8e:63:bc:65:
34:e8:8f:2a:f4:df:de:09:83:31:25:b7:e9:69:a4:3e:8c:0b:
ce:65:46:ab:55:56:fc:3a:66:7c:0b:57:9a:91:92:cb:fe:ea:
7c:c9:d6:4c:9f:cd:85:6b:7d:c8:1a:f6:93:70:68:55:f4:15:
7a:5f:0e:d1:bc:8b:9b:99:15:01:4f:66:8c:1d:8b:21:ec:97:
4b:9c:ec:0b:88:64:0b:79:ea:1d:d0:be:13:51:18:da:e5:a1:
eb:f3:ad:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 06:16:35 2023 by rpki-client on console-ams.rpki-client.org