Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67AF031EA09111EEB7F46B17C4F9AE02.roa
File: 67AF031EA09111EEB7F46B17C4F9AE02.roa (raw, json)
Hash identifier: r6EVoU7yu7ZvMC4gL6HfbXGcrhlvgCaA22GjtPdh0gs=
Subject key identifier: DD:6D:9A:E2:C4:90:BD:CC:AC:58:08:CC:2A:5B:27:E9:B3:D2:5E:75
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8083
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67AF031EA09111EEB7F46B17C4F9AE02.roa
Signing time: Fri 22 Dec 2023 06:14:47 +0000
ROA not before: Fri 22 Dec 2023 06:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133311
IP address blocks: 103.100.80.0/22 maxlen: 24
103.127.60.0/23 maxlen: 24
103.158.178.0/24 maxlen: 24
103.158.179.0/24 maxlen: 24
103.160.28.0/23 maxlen: 24
103.163.54.0/23 maxlen: 23
103.174.240.0/23 maxlen: 24
103.199.116.0/24 maxlen: 24
103.201.136.0/24 maxlen: 24
103.201.137.0/24 maxlen: 24
103.201.138.0/24 maxlen: 24
2001:df1:95c0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32899 (0x8083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 22 06:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65852956-2362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:d2:61:30:18:14:cb:1e:d7:4b:d2:49:22:
62:71:a7:09:31:62:88:ac:f8:50:a5:8e:91:00:57:
45:7d:87:b1:e2:5a:f1:c5:b3:b4:ca:3b:7d:4b:05:
d4:ec:d3:07:71:58:62:e5:76:6d:bf:58:11:be:f5:
f9:8b:32:74:8a:7d:89:e5:a5:fb:71:fa:e4:ea:a0:
f7:36:90:78:af:c8:87:e4:1b:c3:d0:87:88:27:de:
1d:b3:ee:e3:be:2d:2c:9a:a9:63:df:89:8f:4f:b5:
8d:62:74:3b:a2:83:ef:01:a7:01:1d:48:97:59:2d:
cc:ce:6c:cd:df:88:cb:c7:bc:15:87:f7:a7:89:69:
30:48:30:af:a8:12:22:41:95:c8:35:02:18:ec:fc:
39:00:0a:a3:74:e4:88:30:b1:63:9b:13:95:1f:0a:
d6:39:df:ee:d9:5c:92:f3:8a:1b:4b:67:1d:4c:3d:
aa:74:31:ef:ba:e1:1e:53:d5:24:25:b0:dd:c9:f1:
86:28:de:cc:45:af:d1:e7:c6:f0:b2:03:48:c4:63:
fd:60:c0:ad:8a:92:bb:a1:ac:47:15:0b:6a:23:97:
d4:d1:e4:35:24:d8:97:d6:4b:e7:35:0c:3e:69:d5:
7d:6e:f9:6a:98:d6:ad:4e:fa:80:f7:5d:75:d9:c1:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6D:9A:E2:C4:90:BD:CC:AC:58:08:CC:2A:5B:27:E9:B3:D2:5E:75
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67AF031EA09111EEB7F46B17C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.100.80.0/22
103.127.60.0/23
103.158.178.0/23
103.160.28.0/23
103.163.54.0/23
103.174.240.0/23
103.199.116.0/24
103.201.136.0-103.201.138.255
IPv6:
2001:df1:95c0::/48
Signature Algorithm: sha256WithRSAEncryption
b4:12:b1:7c:e5:56:53:63:92:98:18:42:61:90:b1:ee:6e:a2:
6b:ab:78:cc:31:04:d3:d5:6f:fc:f7:ab:3c:98:3d:51:f9:db:
a1:7d:4c:d5:30:a3:95:c3:fc:0b:17:5e:c3:c2:da:75:91:ed:
a6:33:8e:99:50:41:80:b5:a9:29:fd:03:87:fe:6d:74:d2:35:
65:3f:5c:3e:ff:c5:78:45:e5:ff:29:05:ce:7f:74:c1:f2:43:
e2:d8:94:f5:7e:60:9f:86:89:c3:25:e6:6d:71:b5:f1:98:31:
09:3b:55:7c:81:40:67:3c:80:07:20:2a:c0:4a:af:02:5e:d0:
af:f5:07:e1:cc:bf:2d:c0:f2:d1:39:48:ba:dc:f0:5f:eb:59:
6a:07:69:ec:0f:49:91:93:43:7f:a6:46:47:0e:e5:1a:45:92:
53:ce:e6:79:0d:97:66:a4:6f:76:c8:b4:76:74:97:bf:d6:eb:
2a:3d:b5:7c:ad:a1:d9:f5:86:e7:fc:a9:cd:51:c2:2a:cb:ce:
6e:1e:b3:06:2e:0a:5b:d8:f7:79:e3:42:3c:fe:ad:44:21:e3:
95:51:3c:f6:c6:c9:9d:e5:71:47:5f:7d:f3:0b:dd:a4:62:d6:
e6:f0:cf:64:ed:b2:b2:33:8d:ea:76:17:31:aa:77:0a:d9:74:
e3:ef:cd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 22 07:14:46 2023 by rpki-client on console-fra.rpki-client.org