Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4842D852D50811EDA9301840C4F9AE02.roa
File: 4842D852D50811EDA9301840C4F9AE02.roa (raw, json)
Hash identifier: X1T9owOMrkqVSgQ5K/iu17jjRCFMob6doh9EDLVvo3Q=
Subject key identifier: 0E:8B:44:55:65:5A:3A:03:71:94:2A:EF:4E:25:C6:E9:FF:4C:B3:D7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7657
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4842D852D50811EDA9301840C4F9AE02.roa
Signing time: Thu 27 Jul 2023 12:22:25 +0000
ROA not before: Thu 27 Jul 2023 12:22:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150100
IP address blocks: 103.82.48.0/22 maxlen: 24
103.114.64.0/24 maxlen: 24
103.114.65.0/24 maxlen: 24
103.114.66.0/24 maxlen: 24
103.114.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30295 (0x7657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 27 12:22:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64c26180-9e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:02:36:75:73:aa:23:59:c3:e9:45:1c:c1:
b6:6f:6a:7f:e1:f6:e1:54:57:71:7a:88:45:38:5a:
75:23:fd:15:2c:64:32:d3:42:59:a3:2d:a8:3b:19:
3e:95:db:a6:0f:7d:56:a1:85:59:27:13:b2:cc:4d:
58:e6:6e:9d:a0:8f:83:64:16:fe:00:cf:07:ef:36:
ab:91:f6:88:36:d2:5d:c1:cf:3a:69:6a:3c:58:c4:
88:08:47:5e:00:21:c7:35:12:06:5a:6c:23:a4:89:
d6:70:60:10:df:5c:02:f5:ac:e8:af:05:48:52:23:
dd:e6:cb:1e:14:17:44:35:a1:5c:04:24:7d:54:77:
41:44:9f:b3:8d:dd:03:cc:77:ee:e5:aa:48:a6:d0:
d6:1b:d5:e7:21:c4:a6:d6:89:12:a8:c3:85:0d:86:
b8:68:b6:60:e5:34:69:4f:3d:82:30:19:46:ff:08:
86:cc:f1:41:00:7f:5d:69:51:d4:20:d7:43:60:92:
b9:05:54:f8:df:4c:09:16:32:f0:4c:07:1f:36:21:
be:9d:57:94:fe:10:09:c8:03:6c:76:60:8f:6c:f3:
bd:19:85:af:98:b5:f0:81:38:e2:b7:e0:33:f3:ca:
97:9c:67:38:73:30:4d:33:a3:b6:8e:5c:88:99:c7:
0f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8B:44:55:65:5A:3A:03:71:94:2A:EF:4E:25:C6:E9:FF:4C:B3:D7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4842D852D50811EDA9301840C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.48.0/22
103.114.64.0/22
Signature Algorithm: sha256WithRSAEncryption
30:ef:d4:c7:15:e5:d6:70:0f:55:48:d4:09:f1:17:c3:4d:26:
61:bc:84:de:c4:ba:a6:6a:f1:fd:2d:3d:b5:19:9e:f2:b6:22:
70:33:d5:80:6e:4c:02:26:ac:9d:18:f2:95:f7:c9:58:46:03:
b8:f4:23:55:28:20:76:a0:c8:a3:b4:47:57:c0:ed:39:fe:31:
8e:18:41:f6:88:aa:00:1b:b0:5e:41:62:99:86:9f:89:09:9c:
62:91:b9:aa:8a:f9:f1:0f:ba:db:0a:99:91:c4:9b:3d:21:53:
61:a4:e8:8b:e7:fb:c0:4c:b1:ef:11:20:62:46:6a:5f:8f:49:
62:f1:d0:34:19:5b:78:7b:1d:c1:aa:02:b2:1b:67:97:94:cb:
28:03:90:1f:a7:2f:7a:33:fc:f6:dc:71:17:02:0d:b0:0c:1e:
54:93:22:5b:6d:8a:d4:26:94:2b:3c:dd:70:3e:72:cd:9e:f3:
40:fa:e7:c4:d0:5b:36:8a:05:bb:08:85:bc:da:f8:0c:85:3d:
7b:05:e5:ea:01:46:a2:4b:b8:49:33:a6:a8:46:cf:f9:ef:ca:
a1:94:c2:73:68:c6:c6:bb:e8:95:b5:2f:91:33:62:67:30:60:
40:ba:0d:6d:0a:f4:f3:cf:61:fb:dd:0c:64:fc:79:82:64:1e:
d4:93:fc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 12:16:53 2023 by rpki-client on console-ams.rpki-client.org