Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60949EB8C7CF11EDBE683F5EC4F9AE02.roa
File: 60949EB8C7CF11EDBE683F5EC4F9AE02.roa (raw, json)
Hash identifier: Ct5OMAK01KEcXt1DaVTSQh0TdZZltZ9iSrkQAgQZZys=
Subject key identifier: 56:BC:DF:B2:3E:31:1A:4D:26:1C:2B:8F:6E:8B:B0:18:B2:09:A2:47
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6F99
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60949EB8C7CF11EDBE683F5EC4F9AE02.roa
Signing time: Wed 10 May 2023 16:39:33 +0000
ROA not before: Wed 10 May 2023 16:39:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 146858
IP address blocks: 103.172.148.0/24 maxlen: 24
103.172.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 11:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28569 (0x6f99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:39:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc8c4-444f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:a6:c2:dd:49:5f:ba:b0:5b:ae:4a:58:ba:
3a:33:9e:82:53:06:c9:12:64:e5:98:cc:75:db:89:
9e:55:1b:60:e4:4b:fe:3a:8d:2c:5b:d8:5b:01:b2:
53:a9:66:e7:3b:00:40:b5:dc:8b:11:1f:5c:1f:07:
0c:a1:60:53:64:14:05:d0:16:2d:33:4b:64:19:f6:
65:81:7b:1e:d6:5c:85:5f:69:cc:c5:d0:e3:00:7c:
8b:32:b6:aa:a6:9f:d7:32:d3:62:2b:5f:f9:d1:7a:
a8:7c:9d:0f:69:5e:a1:50:fe:ab:91:0e:dc:3e:70:
a3:b8:00:74:fa:34:b9:9c:b1:97:80:1f:a7:8e:1b:
7b:bf:c2:42:25:60:51:4a:b3:22:3f:19:0c:7d:c0:
7c:3f:ec:6e:a4:27:1e:6d:8d:12:06:d6:71:83:0d:
d7:39:d1:9a:4e:1f:47:41:1d:17:61:84:a2:88:e8:
95:ab:46:22:e8:32:2c:b1:ba:e0:d0:ee:64:41:49:
ab:6e:e9:6a:60:94:73:0d:95:27:fe:6d:d0:37:89:
21:56:4d:af:55:69:1c:bb:65:f0:2b:02:b4:50:25:
34:fe:38:52:dc:aa:49:62:96:d0:f6:82:dc:74:16:
7c:b7:e0:f8:12:9e:9f:b6:8d:e3:73:d7:c3:07:ce:
a5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BC:DF:B2:3E:31:1A:4D:26:1C:2B:8F:6E:8B:B0:18:B2:09:A2:47
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60949EB8C7CF11EDBE683F5EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.148.0/23
Signature Algorithm: sha256WithRSAEncryption
16:02:10:97:70:54:f1:f5:30:96:2e:5d:dd:46:40:dd:61:61:
cb:fa:15:fb:7c:62:e0:8d:1a:01:3d:dc:9a:4e:cb:ab:e4:04:
47:a3:e1:4c:2e:44:be:3a:72:b4:cb:08:48:95:68:05:c1:35:
ce:25:2c:09:89:9c:24:e9:39:c6:77:09:d5:bf:0d:f3:ba:6d:
b7:cf:e7:82:0c:3a:cd:3f:e9:5f:d4:d8:b2:8f:a9:fd:14:ea:
4b:dc:1d:93:76:67:f6:b3:48:09:49:0f:9e:de:d2:6c:76:17:
dc:c8:6f:e1:e7:d5:fd:b1:54:ab:cb:ca:df:62:f7:d0:1c:bf:
90:73:2f:63:ab:b3:6f:08:05:1d:ea:5d:aa:86:2e:40:da:b3:
c8:66:0f:54:b4:df:88:4f:eb:a7:c7:07:65:51:1d:01:80:e1:
12:4f:95:87:02:42:8e:65:d8:5f:f0:70:87:3b:bb:db:56:2a:
11:d2:a0:b6:e0:32:fc:14:c7:20:56:29:1d:61:17:c0:2b:72:
c3:32:a5:78:da:22:9b:aa:ec:86:fe:11:63:72:d2:2b:b4:b7:
79:cc:f7:0a:4d:c1:eb:5c:a0:03:0d:eb:ed:f0:6e:ec:56:40:
0f:12:1b:3b:c1:38:4a:0a:b3:ae:2b:b7:78:df:77:0e:4e:9c:
02:65:a9:7b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICb5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTYzOTMzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzhjNC00NDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxYumwt1JX7qwW65KWLo6M56CUwbJEmTlmMx124meVRtg5Ev+Oo0sW9hbAbJT
qWbnOwBAtdyLER9cHwcMoWBTZBQF0BYtM0tkGfZlgXse1lyFX2nMxdDjAHyLMraq
pp/XMtNiK1/50XqofJ0PaV6hUP6rkQ7cPnCjuAB0+jS5nLGXgB+njht7v8JCJWBR
SrMiPxkMfcB8P+xupCcebY0SBtZxgw3XOdGaTh9HQR0XYYSiiOiVq0Yi6DIssbrg
0O5kQUmrbulqYJRzDZUn/m3QN4khVk2vVWkcu2XwKwK0UCU0/jhS3KpJYpbQ9oLc
dBZ8t+D4Ep6fto3jc9fDB86lgwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFa837I+
MRpNJhwrj26LsBiyCaJHMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjA5NDlFQjhD
N0NGMTFFREJFNjgzRjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnrJQwDQYJKoZIhvcNAQELBQADggEBABYCEJdwVPH1MJYu
Xd1GQN1hYcv6Fft8YuCNGgE93JpOy6vkBEej4UwuRL46crTLCEiVaAXBNc4lLAmJ
nCTpOcZ3CdW/DfO6bbfP54IMOs0/6V/U2LKPqf0U6kvcHZN2Z/azSAlJD57e0mx2
F9zIb+Hn1f2xVKvLyt9i99Acv5BzL2Ors28IBR3qXaqGLkDas8hmD1S034hP66fH
B2VRHQGA4RJPlYcCQo5l2F/wcIc7u9tWKhHSoLbgMvwUxyBWKR1hF8ArcsMypXja
Ipuq7Ib+EWNy0iu0t3nM9wpNwetcoAMN6+3wbuxWQA8SGzvBOEoKs64rt3jfdw5O
nAJlqXs=
-----END CERTIFICATE-----
Generated at Tue Mar 19 14:59:04 2024 by rpki-client on console-fra.rpki-client.org