Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61E949CCBDD611EA97CDF72CC4F9AE02.roa
File: 61E949CCBDD611EA97CDF72CC4F9AE02.roa (raw, json)
Hash identifier: uCr7l7/1J2LyRZTI4JrjJf3Z38nT7Ekg3y4v4DPydHs=
Subject key identifier: B7:ED:1E:13:0B:DB:21:C7:7B:D7:F5:2D:6D:C3:8D:01:BD:06:79:DD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6CEE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61E949CCBDD611EA97CDF72CC4F9AE02.roa
Signing time: Wed 10 May 2023 16:26:53 +0000
ROA not before: Wed 10 May 2023 16:26:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137138
IP address blocks: 103.85.118.0/24 maxlen: 24
103.85.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27886 (0x6cee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:26:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc5cd-92d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ef:82:35:85:29:f5:67:66:ad:ed:07:f7:b0:
58:dc:a6:42:a7:2f:07:91:55:7a:f0:48:1b:81:ce:
3c:64:f8:0b:6e:97:33:88:db:5f:aa:e5:c5:b9:1a:
bc:68:32:3b:e4:1a:3e:6f:42:3b:34:73:09:54:a8:
59:09:d9:12:72:19:be:a3:c6:26:65:c7:b3:92:e0:
e8:17:ce:8c:42:86:c2:95:8e:cd:60:5b:10:84:01:
f2:dd:06:dd:3b:09:a9:94:14:49:74:7a:41:38:c8:
6e:9d:d5:7d:1a:72:75:95:39:22:7a:b5:b2:9f:7d:
59:2d:06:ab:7d:1f:c3:cc:ac:9c:da:ef:da:12:56:
98:52:f9:88:ea:88:95:fd:26:9a:9d:71:c1:23:c9:
5b:75:0e:15:a3:e4:0d:e1:fa:dc:95:32:02:b3:12:
f5:7d:43:19:25:29:05:d4:ab:c1:7a:ce:c7:75:bc:
ec:40:73:62:7d:91:20:8c:27:01:eb:a9:7a:3e:9c:
ac:56:56:06:ab:1c:af:c9:46:b7:df:10:fc:43:fe:
7c:9f:d4:db:f3:08:ab:34:e1:53:d3:41:20:aa:87:
6e:a2:2f:32:3c:01:2c:06:7f:64:61:71:3e:15:d8:
aa:fa:bc:3e:88:ad:3a:9b:03:af:7f:9a:dc:07:64:
65:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:ED:1E:13:0B:DB:21:C7:7B:D7:F5:2D:6D:C3:8D:01:BD:06:79:DD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61E949CCBDD611EA97CDF72CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.118.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:17:29:98:52:d6:c2:c9:78:81:3a:17:65:6e:0f:8a:dd:6c:
b9:58:fe:49:7a:86:7a:ac:7c:7e:b5:80:02:6b:26:06:0d:cb:
31:8b:5c:26:39:fa:8d:b0:fb:99:18:55:70:54:54:81:f7:ae:
d5:22:d4:5e:e7:aa:99:e4:3f:92:a9:c6:c8:e5:85:e7:22:48:
66:d1:11:07:82:bd:71:a4:3d:5c:49:82:d6:cf:9f:21:5f:4d:
94:b0:7e:01:10:39:0a:d3:ff:7c:d2:fd:67:3d:47:87:fc:6d:
ea:1d:5e:71:c3:d4:d3:fa:01:ed:0c:95:e6:11:ac:d9:bf:46:
77:0a:09:30:82:89:7a:78:34:b0:64:46:cd:db:33:ae:cd:1d:
53:c1:5a:9e:55:b2:42:f8:5e:dd:24:bc:4a:1c:26:b9:19:a6:
c0:19:b4:06:dd:bd:15:b2:ae:cb:f1:1d:6c:74:f9:14:74:fd:
57:a6:bd:2a:d3:fb:5d:9a:0d:a7:f3:d0:c1:28:5f:d5:3d:a7:
e1:fa:62:86:43:13:56:25:c8:0b:9d:72:c4:e1:4c:fc:46:a4:
0c:a3:9c:15:d0:bb:65:17:ab:d3:23:1f:3d:ff:53:2f:a9:86:
74:cf:95:4d:1e:ff:7e:cc:0f:26:e6:21:fe:b1:af:4c:03:ea:
40:9c:67:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 05:46:53 2023 by rpki-client on console-fra.rpki-client.org