Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CA13E5C8B6511EDB611CA3CC4F9AE02.roa
File: 5CA13E5C8B6511EDB611CA3CC4F9AE02.roa (raw, json)
Hash identifier: s0mcdhKrunPO1phbvegzbi67HCgsLboGKCPgHhxYNLc=
Subject key identifier: 3F:45:57:B4:C0:08:FF:B6:13:6C:97:EE:26:88:AE:83:EB:00:D6:38
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6B82
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CA13E5C8B6511EDB611CA3CC4F9AE02.roa
Signing time: Wed 10 May 2023 16:20:01 +0000
ROA not before: Wed 10 May 2023 16:20:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135139
IP address blocks: 103.99.148.0/22 maxlen: 24
103.122.61.0/24 maxlen: 24
103.130.88.0/22 maxlen: 24
103.130.204.0/23 maxlen: 24
103.133.220.0/23 maxlen: 24
103.183.240.0/23 maxlen: 24
103.185.84.0/23 maxlen: 24
103.186.150.0/23 maxlen: 24
103.186.230.0/23 maxlen: 24
103.186.232.0/23 maxlen: 24
103.187.62.0/23 maxlen: 24
103.191.138.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27522 (0x6b82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:20:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc430-11f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:df:49:ef:a2:93:72:31:f3:25:83:58:a1:
96:0a:d8:14:70:41:c6:e9:f4:dd:13:f0:4a:b6:67:
c5:a6:65:d4:ab:92:8c:dc:66:3d:96:6c:cb:d7:e1:
ec:8a:19:ec:26:22:60:85:68:0c:52:c6:7b:90:1d:
fa:18:ef:20:e9:14:0b:67:2b:36:56:b8:df:b7:02:
c8:2a:53:03:30:5a:72:65:b8:7e:ad:35:ba:f1:89:
67:72:42:ae:26:9f:ac:f0:f3:e8:3d:ab:67:9f:3a:
fe:83:0b:ff:6e:11:3e:49:89:92:54:57:4c:34:8c:
ca:9d:d0:4c:12:22:3d:51:3b:73:0c:ad:36:2a:f8:
78:50:ef:bf:89:ab:23:31:bf:cc:5b:76:c9:11:23:
cf:31:56:cb:97:53:a9:06:79:4d:29:16:8f:df:24:
eb:08:d9:47:8f:76:0e:6f:eb:2e:08:34:5e:ae:4c:
35:69:94:fb:51:05:3d:e8:33:0a:b7:b4:ab:1a:e2:
12:48:4a:9e:79:8f:50:fa:bf:24:b7:62:cf:81:77:
aa:cf:8c:a0:f4:f4:c4:ac:f7:0d:12:22:5e:62:c7:
1f:c7:0f:0f:41:39:7a:ff:83:fc:1f:c9:ad:dc:f5:
f9:5e:bd:ed:16:d8:23:a0:88:c5:31:7e:3b:d8:b7:
e9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:45:57:B4:C0:08:FF:B6:13:6C:97:EE:26:88:AE:83:EB:00:D6:38
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CA13E5C8B6511EDB611CA3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.148.0/22
103.122.61.0/24
103.130.88.0/22
103.130.204.0/23
103.133.220.0/23
103.183.240.0/23
103.185.84.0/23
103.186.150.0/23
103.186.230.0-103.186.233.255
103.187.62.0/23
103.191.138.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:d2:42:d1:57:3e:0c:76:3d:a2:b2:a6:31:a8:de:bb:ae:9e:
dd:70:33:43:02:17:c1:77:d0:1b:43:c8:09:77:11:c9:1d:b9:
f0:48:62:5a:71:b9:c0:fd:ca:38:90:cf:65:f5:cd:c3:90:3b:
a3:77:d8:b0:9b:df:dd:1d:37:2e:2e:4e:74:c2:d2:d5:4c:84:
8a:47:85:de:3a:33:02:1e:dc:12:23:f1:64:9d:26:bd:a7:e6:
bf:4d:cf:f6:fa:b8:f3:07:5f:85:a0:5f:e5:15:8c:61:0a:3e:
ea:99:48:23:8c:2c:1e:f7:b5:60:37:4f:41:31:28:ca:ac:11:
fe:f7:2d:fb:1b:1f:72:40:43:7c:01:51:c7:7e:96:9b:59:62:
ea:38:6c:34:2d:5b:48:72:f8:9d:ee:65:f1:aa:b3:46:dd:97:
a4:67:8e:10:64:fc:b5:99:bc:40:c4:fc:e8:9a:2b:1e:16:5a:
84:53:d7:e8:12:4b:66:03:9f:96:4f:00:d3:8b:79:b4:20:19:
bc:5b:a9:d2:13:6b:5a:80:a7:a1:20:d0:c2:d6:28:ec:c8:45:
e5:43:93:f4:8c:d7:ea:c0:4f:b4:72:4d:59:3e:e0:c2:f9:24:
6e:62:5e:59:18:d3:15:c8:40:30:27:66:7e:f9:2a:8e:77:42:
b8:fa:cf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-ams.rpki-client.org