Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42507004DD6011EB9935406BC4F9AE02.roa
File: 42507004DD6011EB9935406BC4F9AE02.roa (raw, json)
Hash identifier: fTgGalFb40bALSZuW4r3ibvBSWlJMl2zXbiEs8UIngQ=
Subject key identifier: C5:4C:04:3E:48:55:91:C1:C6:AC:46:56:3F:56:0F:8D:4B:3C:81:5C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6D84
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42507004DD6011EB9935406BC4F9AE02.roa
Signing time: Wed 10 May 2023 16:29:44 +0000
ROA not before: Wed 10 May 2023 16:29:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138317
IP address blocks: 103.66.236.0/23 maxlen: 24
103.132.196.0/24 maxlen: 24
103.132.197.0/24 maxlen: 24
103.132.198.0/24 maxlen: 24
103.132.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 05:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28036 (0x6d84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:29:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc678-8bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:64:5a:19:aa:39:00:69:7d:63:39:77:b9:98:
fd:6d:9f:4e:7a:8a:60:85:6a:f4:2b:ea:51:d9:cb:
f6:61:3c:e7:cc:eb:d4:72:2a:15:a6:7c:7c:2e:d7:
3b:de:06:40:27:9b:b7:94:28:ea:d8:de:ab:86:be:
4b:b7:5a:10:a4:74:fa:e5:da:e3:92:12:66:41:6b:
8d:da:77:7f:69:60:09:1a:ac:5d:d5:9b:0b:14:15:
d6:93:b5:95:64:e3:e2:6e:50:1a:c5:c4:72:03:0d:
22:bb:61:dc:3c:8c:f3:77:cf:bd:69:b5:aa:db:4f:
44:4a:21:b4:dc:7e:ba:03:67:94:e5:b9:11:3a:7b:
e0:d3:6e:47:13:0a:f5:41:d0:29:31:a1:ac:71:64:
d7:9a:c2:c1:ac:02:54:54:4f:8a:7b:b6:ea:31:25:
e1:9e:48:9d:cd:d8:e8:0b:49:68:ae:0d:3a:56:5d:
32:91:eb:6f:3e:af:9e:13:ae:27:a2:c3:aa:fc:6f:
17:3c:6b:ed:cb:88:13:2f:08:34:66:d3:28:0e:94:
04:17:d1:6e:32:7a:5b:60:59:f3:3c:c0:2a:3b:3c:
e1:20:70:f8:2a:f5:bc:56:38:0d:af:fe:fd:44:56:
09:0f:2d:68:df:9c:36:b1:a3:d5:d0:42:3a:dd:e0:
3f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4C:04:3E:48:55:91:C1:C6:AC:46:56:3F:56:0F:8D:4B:3C:81:5C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42507004DD6011EB9935406BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.66.236.0/23
103.132.196.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:38:1a:bd:a3:ad:77:66:29:53:7f:3a:b9:a3:a3:28:e6:d9:
70:ab:63:34:ad:48:db:3e:36:b4:3c:0a:12:ee:10:5e:ae:04:
7b:d2:fe:c9:b1:37:fd:f9:95:fb:6a:cf:ee:03:fd:47:87:dd:
42:68:81:0c:2a:0c:c5:a8:38:bb:02:7a:c4:2b:a6:7b:33:fe:
7a:bd:e2:27:b7:dc:8d:f3:f5:94:47:9b:47:41:50:2e:3c:23:
ec:a9:34:51:0d:79:06:73:49:7f:a1:b9:b0:ef:71:60:36:41:
41:62:5a:b0:dc:b2:00:b4:0c:97:03:63:a4:83:b5:d0:19:01:
e7:e1:ec:07:b9:df:bf:e9:db:ed:31:80:13:bd:73:0e:37:90:
2d:bd:76:16:7d:d3:90:21:73:22:59:c8:45:18:22:cc:54:25:
86:38:c8:ca:9e:24:e8:ab:e2:53:25:0f:29:c2:cb:88:78:cf:
9f:9a:6a:c6:e2:64:ad:ad:bc:84:47:3e:94:9f:4d:95:5f:ca:
07:c8:34:a1:29:9d:c7:9e:d3:17:0e:5a:b1:55:35:d9:b5:3d:
ea:16:fc:65:bb:6b:58:06:eb:09:8d:ba:6c:88:a6:0c:5d:f6:
ac:f0:c4:66:19:29:de:62:00:fa:d3:52:5f:8b:91:68:5a:ad:
30:5c:a0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 08:57:27 2024 by rpki-client on console-ams.rpki-client.org