Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62160D40CFC111EDA2CDDC6DC4F9AE02.roa
File: 62160D40CFC111EDA2CDDC6DC4F9AE02.roa (raw, json)
Hash identifier: In1kWMHhifInL7tIgIhGQ9/LjyhuF6wTBc/VwXmj+iE=
Subject key identifier: C5:0A:E2:28:3E:F2:59:C9:B0:C4:8B:6B:93:E5:6C:8C:BF:3D:86:B8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 80D3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62160D40CFC111EDA2CDDC6DC4F9AE02.roa
Signing time: Wed 27 Dec 2023 10:35:37 +0000
ROA not before: Wed 27 Dec 2023 10:35:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141549
IP address blocks: 103.66.76.0/22 maxlen: 22
103.74.136.0/22 maxlen: 24
103.119.178.0/23 maxlen: 24
103.163.112.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32979 (0x80d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 27 10:35:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=658bfdf9-e1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:35:07:fa:3a:10:79:1e:9f:79:a0:c6:8b:
6b:61:63:00:88:bb:66:ab:9e:27:10:fa:5e:c2:09:
3b:88:31:30:28:84:26:d5:8f:ea:f2:ff:19:57:59:
cf:2a:71:99:de:fa:a0:37:d3:3a:9c:e9:c9:70:40:
c2:ef:e5:f8:72:a2:e1:7e:ad:17:83:93:cd:a5:f5:
69:28:67:2f:ca:49:7c:dd:14:37:3d:25:c8:d7:92:
e2:ce:bd:66:34:7d:b3:37:18:e0:07:a7:6d:57:d7:
11:61:bc:58:0c:39:f1:72:6f:e9:3a:b3:9d:2f:7c:
76:29:fe:12:b6:c3:26:79:f2:28:63:92:a4:98:75:
91:6c:ea:52:6d:21:8f:85:87:ea:d7:12:41:8e:2d:
6a:c2:7f:94:f1:c5:7c:db:46:8e:8d:44:93:48:ac:
d6:fe:4e:3d:2f:78:81:d2:88:09:bd:15:da:f9:fa:
f1:f7:84:7e:94:f2:19:e4:18:41:6a:79:69:8c:1f:
47:46:86:3d:47:f2:2a:65:b6:97:ea:1e:63:d6:63:
0b:e7:61:b5:f6:be:74:8b:42:db:14:11:42:4d:05:
52:4b:90:d6:3e:1c:d7:5a:7a:64:07:d5:d2:64:b5:
57:d8:72:99:28:ae:b1:8b:ae:30:c9:bb:0b:17:c9:
58:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0A:E2:28:3E:F2:59:C9:B0:C4:8B:6B:93:E5:6C:8C:BF:3D:86:B8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62160D40CFC111EDA2CDDC6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.66.76.0/22
103.74.136.0/22
103.119.178.0/23
103.163.112.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:5e:3f:f8:c4:84:bd:d2:7c:5b:cf:5a:d1:85:61:7c:98:34:
46:5b:3e:1e:48:ef:ee:f9:01:25:b5:b8:7f:94:07:ef:95:50:
a0:39:cf:0f:5b:b4:55:40:9a:e7:2e:9d:58:33:10:21:b1:2d:
45:41:d1:fb:4c:68:ce:f9:7a:27:49:e4:11:da:4f:ec:96:82:
ca:be:aa:24:bb:2b:c2:b0:85:03:b5:2c:24:31:ab:d1:a5:d0:
16:69:fe:a3:a4:0a:17:a7:02:1c:53:56:91:9a:25:40:4c:2f:
63:26:bb:fa:07:5b:22:c3:60:e1:86:85:5c:73:d8:81:48:95:
4a:37:b3:53:66:d5:c3:4c:65:40:6e:06:6b:94:df:f3:63:8e:
71:3e:da:91:2e:c0:9a:a4:ef:cc:bf:17:00:53:9c:d5:e6:a2:
fa:14:0e:31:4c:47:2d:2f:78:d6:ce:cd:95:6e:b0:04:17:a5:
f5:eb:15:19:5a:53:24:d2:8c:ca:d9:64:19:0a:c0:79:49:df:
fb:bb:19:24:4a:0b:c8:ed:fa:eb:57:21:65:5f:f9:68:86:87:
62:77:11:43:7a:92:f2:e6:54:5e:a7:21:85:cd:9d:55:34:ef:
ec:a7:88:6d:15:1a:8b:e8:79:55:7c:bf:f7:30:a8:18:92:ac:
ed:6b:db:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 14:27:51 2023 by rpki-client on console-fra.rpki-client.org