Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A88FB86DC0211EC879DE280C4F9AE02.roa
File: 5A88FB86DC0211EC879DE280C4F9AE02.roa (raw, json)
Hash identifier: jxzZUuAipaF2jZ3pAkzCJOYLF8JoHaqre4JFLk/hL9g=
Subject key identifier: F5:40:DD:B3:B1:B3:96:EB:C9:46:18:75:86:1F:D3:D5:CB:18:DC:E3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7A0B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A88FB86DC0211EC879DE280C4F9AE02.roa
Signing time: Tue 12 Sep 2023 06:59:43 +0000
ROA not before: Tue 12 Sep 2023 06:59:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133963
IP address blocks: 103.170.148.0/23 maxlen: 24
103.184.72.0/24 maxlen: 24
103.184.73.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31243 (0x7a0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 12 06:59:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65000c5f-89ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:b0:b6:b8:53:ec:34:73:1c:d9:b1:f9:dc:
2d:96:14:f2:a9:6a:88:dc:d1:54:59:1f:22:c0:a1:
cb:49:a7:99:bd:9d:37:61:69:7c:06:80:b0:31:93:
25:50:0d:2d:9f:9a:5f:02:ea:16:8f:e8:27:b0:28:
74:0d:c6:33:25:78:50:1e:43:e2:0f:e0:73:0b:9d:
9a:53:0f:ab:79:82:a7:4d:b9:f0:5a:17:6b:37:b6:
7c:07:cd:82:63:7e:e1:6b:18:a3:fe:94:83:a6:ea:
79:74:57:69:42:69:0e:d8:35:a9:8e:38:c9:9c:8d:
24:76:5c:ad:c2:cb:13:c6:36:2e:19:21:b6:69:56:
6d:5c:5f:80:31:4a:c1:86:50:ed:35:c8:d6:26:a6:
38:56:54:cb:80:06:a9:53:72:cc:40:2e:9d:e5:f9:
dd:46:54:a8:19:3a:21:6b:2e:bd:44:69:dc:40:06:
b4:0c:86:27:cf:2b:31:78:94:1a:12:4a:fc:b1:f4:
1b:b0:87:7e:ee:bf:31:74:9f:15:a1:ff:8d:3b:51:
b3:06:15:c3:64:90:d2:35:9a:4c:be:ce:97:f9:62:
e0:cd:85:b6:5b:15:d3:4f:af:07:3c:6c:4d:74:2f:
89:fa:07:46:1a:e2:b0:8f:72:9c:5e:af:f8:a0:e7:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:40:DD:B3:B1:B3:96:EB:C9:46:18:75:86:1F:D3:D5:CB:18:DC:E3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A88FB86DC0211EC879DE280C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.148.0/23
103.184.72.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:4c:d7:66:2e:10:31:d8:23:c5:e2:06:42:69:31:e4:2e:7e:
2a:1d:d3:8e:4e:af:4a:d6:36:98:e9:b2:39:bb:6f:95:37:27:
00:90:d3:bd:72:a8:11:ac:d6:51:06:03:1d:f9:48:00:d6:90:
a5:60:36:39:d8:ea:41:2d:a8:82:0b:9a:91:cd:b6:e7:d1:29:
95:7f:9e:54:34:be:da:63:65:ec:d3:b6:ce:b3:f1:ba:95:64:
84:3b:04:51:6c:e0:de:c5:6c:e5:31:1d:8f:8f:a3:55:55:bb:
77:ae:e0:3d:c2:d8:13:7d:f8:dc:1e:b3:bf:41:f8:f3:94:1a:
f9:f8:43:6d:36:81:a1:37:19:61:6f:b0:94:ff:18:af:91:c2:
ad:dc:1e:c6:aa:21:67:60:e9:37:45:95:99:dd:e2:71:f7:da:
6d:48:e1:8f:d7:61:36:dd:d2:a0:11:e4:cb:64:30:5d:c9:f6:
28:8e:b9:25:93:73:88:07:53:95:14:aa:95:18:da:16:54:27:
bd:d6:40:3a:f6:37:62:4a:c1:81:e9:1e:83:8a:cc:14:0c:95:
53:b8:1e:a0:5d:9b:23:ad:ea:9f:20:93:e8:46:3b:c3:88:47:
e4:9a:05:db:ec:3c:13:a3:d6:b5:63:50:bf:26:32:58:ee:f3:
76:bc:10:20
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICegswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwOTEyMDY1OTQzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTAwMGM1Zi04OWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2p2wtrhT7DRzHNmx+dwtlhTyqWqI3NFUWR8iwKHLSaeZvZ03YWl8BoCwMZMl
UA0tn5pfAuoWj+gnsCh0DcYzJXhQHkPiD+BzC52aUw+reYKnTbnwWhdrN7Z8B82C
Y37haxij/pSDpup5dFdpQmkO2DWpjjjJnI0kdlytwssTxjYuGSG2aVZtXF+AMUrB
hlDtNcjWJqY4VlTLgAapU3LMQC6d5fndRlSoGTohay69RGncQAa0DIYnzysxeJQa
Ekr8sfQbsId+7r8xdJ8Vof+NO1GzBhXDZJDSNZpMvs6X+WLgzYW2WxXTT68HPGxN
dC+J+gdGGuKwj3KcXq/4oOd4awIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPVA3bOx
s5bryUYYdYYf09XLGNzjMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNUE4OEZCODZE
QzAyMTFFQzg3OURFMjgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAFnqpQDBAFnuEgwDQYJKoZIhvcNAQELBQADggEBAEpM12Yu
EDHYI8XiBkJpMeQufiod045Or0rWNpjpsjm7b5U3JwCQ071yqBGs1lEGAx35SADW
kKVgNjnY6kEtqIILmpHNtufRKZV/nlQ0vtpjZezTts6z8bqVZIQ7BFFs4N7FbOUx
HY+Po1VVu3eu4D3C2BN9+Nwes79B+POUGvn4Q202gaE3GWFvsJT/GK+Rwq3cHsaq
IWdg6TdFlZnd4nH32m1I4Y/XYTbd0qAR5MtkMF3J9iiOuSWTc4gHU5UUqpUY2hZU
J73WQDr2N2JKwYHpHoOKzBQMlVO4HqBdmyOt6p8gk+hGO8OIR+SaBdvsPBOj1rVj
UL8mMlju83a8ECA=
-----END CERTIFICATE-----
Generated at Tue Sep 19 05:43:24 2023 by rpki-client on console-fra.rpki-client.org