Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52EA490E8AF811EBBF109F4EC4F9AE02.roa
File: 52EA490E8AF811EBBF109F4EC4F9AE02.roa (raw, json)
Hash identifier: B5r3VRPHNbtxACUw8R7gtftXs2z6FCXNEKPkFQPm/10=
Subject key identifier: C9:D5:55:B0:1F:77:CA:6E:01:C8:CD:AE:4D:AE:AD:F1:99:91:86:4B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7AA8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52EA490E8AF811EBBF109F4EC4F9AE02.roa
Signing time: Mon 25 Sep 2023 05:43:26 +0000
ROA not before: Mon 25 Sep 2023 05:43:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132746
IP address blocks: 103.160.198.0/24 maxlen: 24
103.163.244.0/23 maxlen: 24
103.215.106.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31400 (0x7aa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 25 05:43:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65111dfd-8a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:aa:47:a1:26:d0:af:00:a7:1e:d6:d0:35:
50:3b:6c:bd:95:60:c8:df:62:8f:31:71:e5:6b:9f:
c3:3e:e0:2d:db:07:40:34:fd:13:04:2f:ab:4a:76:
f7:57:cc:56:3a:17:fb:65:56:c4:ac:7f:35:4d:58:
94:75:16:a5:14:fe:95:b2:04:e4:29:67:e0:e9:f3:
02:15:10:dd:1d:65:f0:4f:db:eb:22:5e:e7:04:30:
e3:2c:96:8c:28:5c:3e:b9:6a:4b:ad:39:d5:bf:a3:
45:95:20:99:84:f6:48:0f:3d:4a:15:9a:b2:22:01:
19:e2:38:86:99:8e:9b:1b:00:ae:72:ea:a1:8f:e2:
dc:04:53:e3:22:b0:8a:b6:18:74:48:6a:af:35:75:
89:62:4f:dd:d0:69:e1:ab:95:12:88:b3:51:ba:90:
dc:6a:5a:4d:23:a9:87:7a:35:77:80:92:fc:38:e0:
cf:51:96:a1:c9:2f:fe:8c:17:8b:29:a8:42:db:70:
cc:35:cf:29:04:38:10:16:c9:8a:1c:7b:40:7e:5c:
33:4f:c7:64:12:e0:f8:c2:bc:79:2d:30:1b:70:e0:
f2:9d:b0:09:79:11:98:21:a9:e5:fe:49:66:13:c3:
39:5c:b5:59:1d:1b:78:2c:73:c6:b9:1d:97:16:a8:
23:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D5:55:B0:1F:77:CA:6E:01:C8:CD:AE:4D:AE:AD:F1:99:91:86:4B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52EA490E8AF811EBBF109F4EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.198.0/24
103.163.244.0/23
103.215.106.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:47:94:28:95:a5:0f:8b:9d:f6:f8:1b:6b:f6:c0:67:cb:cd:
5b:ec:7e:dd:d2:11:88:8e:81:c3:31:25:22:54:13:48:6e:56:
53:17:1c:12:c1:38:ff:63:9b:bb:b1:e5:a3:31:c1:d6:4e:00:
ce:c9:2f:b4:ad:b6:15:f0:af:fe:4c:1d:cb:ef:1d:41:96:20:
a1:30:96:67:d5:9d:4c:62:af:b0:73:ff:71:d2:b2:43:14:d4:
fa:51:df:f5:56:3b:c0:f9:b0:59:f0:b3:a3:ab:d4:fc:5d:3c:
9c:69:79:3f:24:a6:83:d1:23:cf:03:ef:b3:6a:90:3d:e7:f3:
f0:b9:46:69:a8:2e:c1:68:7b:81:c4:aa:a7:ed:60:11:3b:da:
ab:63:e4:91:a3:f1:82:b8:ed:39:7c:f7:c6:28:6b:6a:45:47:
61:6e:6b:07:38:bb:c6:5c:b7:3c:bc:bd:ff:e8:a2:2d:64:d4:
3a:01:86:3e:14:40:88:0e:8b:10:b5:a8:09:18:4e:2f:95:eb:
56:7c:f2:d5:dc:e9:78:cc:ae:b6:2a:32:7f:9a:9e:bf:52:6f:
66:c5:aa:a6:86:b3:ff:86:3a:ad:41:6a:44:56:9c:3c:c1:08:
ff:02:2c:65:31:88:ee:1e:bd:46:6f:ee:3e:40:84:8b:d6:23:
b7:77:6d:22
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICeqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwOTI1MDU0MzI2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTExMWRmZC04YTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtdqqR6Em0K8Apx7W0DVQO2y9lWDI32KPMXHla5/DPuAt2wdANP0TBC+rSnb3
V8xWOhf7ZVbErH81TViUdRalFP6VsgTkKWfg6fMCFRDdHWXwT9vrIl7nBDDjLJaM
KFw+uWpLrTnVv6NFlSCZhPZIDz1KFZqyIgEZ4jiGmY6bGwCucuqhj+LcBFPjIrCK
thh0SGqvNXWJYk/d0Gnhq5USiLNRupDcalpNI6mHejV3gJL8OODPUZahyS/+jBeL
KahC23DMNc8pBDgQFsmKHHtAflwzT8dkEuD4wrx5LTAbcODynbAJeRGYIanl/klm
E8M5XLVZHRt4LHPGuR2XFqgjQQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFMnVVbAf
d8puAcjNrk2urfGZkYZLMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTJFQTQ5MEU4
QUY4MTFFQkJGMTA5RjRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBABnoMYDBAFno/QDBAFn12owDQYJKoZIhvcNAQELBQADggEB
ABtHlCiVpQ+Lnfb4G2v2wGfLzVvsft3SEYiOgcMxJSJUE0huVlMXHBLBOP9jm7ux
5aMxwdZOAM7JL7StthXwr/5MHcvvHUGWIKEwlmfVnUxir7Bz/3HSskMU1PpR3/VW
O8D5sFnws6Or1PxdPJxpeT8kpoPRI88D77NqkD3n8/C5RmmoLsFoe4HEqqftYBE7
2qtj5JGj8YK47Tl898Yoa2pFR2Fuawc4u8Zctzy8vf/ooi1k1DoBhj4UQIgOixC1
qAkYTi+V61Z88tXc6XjMrrYqMn+anr9Sb2bFqqaGs/+GOq1BakRWnDzBCP8CLGUx
iO4evUZv7j5AhIvWI7d3bSI=
-----END CERTIFICATE-----
Generated at Tue Oct 3 12:11:05 2023 by rpki-client on console-ams.rpki-client.org