Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42C50AD42FD311EC92C1C751C4F9AE02.roa
File: 42C50AD42FD311EC92C1C751C4F9AE02.roa (raw, json)
Hash identifier: sBz+0DgUpl2lfV9zlMn/TWHsy0FCJhZIigEkMEX3YRI=
Subject key identifier: 05:2E:A1:ED:B0:D7:9A:7B:41:18:0E:BF:8C:A2:AB:28:75:31:B1:82
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6F6D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42C50AD42FD311EC92C1C751C4F9AE02.roa
Signing time: Wed 10 May 2023 16:38:46 +0000
ROA not before: Wed 10 May 2023 16:38:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142492
IP address blocks: 103.168.182.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28525 (0x6f6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:38:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc895-441e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:f1:8d:ea:d3:0e:c4:21:cb:6f:c8:c0:52:
bc:da:e8:c9:4d:5f:80:5e:02:3e:1e:55:5d:5e:c9:
9d:81:16:05:12:39:e7:07:fb:54:6b:c4:52:ef:5a:
bd:7c:35:30:e1:22:62:c7:95:2c:f1:24:83:68:96:
34:6c:00:2a:24:5d:f7:62:2b:5d:84:23:e2:03:36:
3c:38:3f:bc:0c:76:23:e4:21:7a:fd:bd:99:b1:96:
ad:33:41:e3:ca:7f:88:18:7d:90:1f:fe:26:0c:c5:
2b:8f:2f:71:2c:32:69:ae:dd:d9:5a:02:1d:b9:df:
8b:fb:f4:3a:83:10:d8:df:19:d6:c3:10:2d:d6:d1:
ef:34:09:a7:c5:14:c4:29:ff:62:35:c5:b6:1a:57:
bd:ad:b6:d0:94:8b:e7:34:55:25:ed:b4:33:bf:d8:
f3:1c:5e:a2:ac:95:63:fa:5e:e2:b2:69:bf:ed:5e:
11:7d:0a:bd:a6:41:dd:f8:0d:e2:7a:79:0c:a5:bf:
9f:02:55:c1:08:ec:d4:5e:d3:cd:90:a3:92:38:03:
6f:d0:d5:b5:b8:fc:c2:ab:25:c9:9b:1c:2d:49:1a:
41:3f:5c:32:d2:a4:89:0a:65:b2:4c:3b:c4:ce:72:
fb:e4:02:4d:f5:96:80:50:2a:9a:e4:94:89:53:fb:
07:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2E:A1:ED:B0:D7:9A:7B:41:18:0E:BF:8C:A2:AB:28:75:31:B1:82
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42C50AD42FD311EC92C1C751C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.168.182.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:e3:7e:d2:43:3b:93:7a:0e:65:c3:21:51:09:fc:56:db:04:
68:19:68:8a:77:65:d3:cf:ea:31:9f:66:77:5f:1f:f4:d9:03:
59:9c:f0:5e:3b:a9:be:7b:58:13:44:a6:f1:54:91:43:23:93:
ad:46:83:6c:9f:e5:cb:1a:9f:00:db:9f:4e:08:aa:0e:d8:cf:
9d:3c:10:af:4f:5d:00:0e:5b:21:2f:0a:84:03:2f:d5:4c:76:
9d:f1:fd:60:cf:76:9e:d6:fb:48:90:f2:a5:b8:26:78:43:eb:
1d:6e:6e:b2:20:6a:81:59:b0:af:e5:83:1c:e5:ea:8f:81:34:
64:fd:dc:a9:6e:cf:97:13:f3:88:dc:a7:4f:4d:81:05:85:c9:
c4:90:28:44:a1:91:1e:f9:e2:37:de:40:2c:23:a6:d8:f1:a9:
70:1b:c1:e0:9a:41:cb:3b:97:c8:70:9c:5f:2d:31:e1:98:ae:
7d:c7:ff:c0:19:be:d7:8e:4f:8c:26:94:12:ff:e1:c5:73:3d:
da:e9:60:ba:c9:73:c9:46:64:9e:d5:23:47:27:20:bf:cc:ab:
04:c8:dd:a3:20:f1:78:1a:c7:1a:ef:2f:0c:0e:a0:23:b7:29:
f8:9f:51:ec:f7:18:f4:31:3f:89:30:32:2c:ff:e9:36:38:0b:
70:e8:42:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 13:14:45 2023 by rpki-client on console-fra.rpki-client.org