Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6EFCE8121D1211EBBB2D2347C4F9AE02.roa
File: 6EFCE8121D1211EBBB2D2347C4F9AE02.roa (raw, json)
Hash identifier: USfhc/OhVwR4MrwAJxQ+7pn9NAZuEJdVi1koK/lzMPQ=
Subject key identifier: BE:7A:85:BA:0E:F2:2B:A6:78:6A:E8:2B:6A:85:E1:64:97:58:1C:79
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6ADB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6EFCE8121D1211EBBB2D2347C4F9AE02.roa
Signing time: Wed 10 May 2023 16:16:49 +0000
ROA not before: Wed 10 May 2023 16:16:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133996
IP address blocks: 103.52.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 10:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27355 (0x6adb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:16:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc371-aba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:8c:6e:42:3d:43:19:37:31:48:ff:fb:88:
0c:21:bb:63:35:e7:fe:21:ce:4d:31:b6:3b:3d:33:
d2:05:56:ad:8a:22:5c:15:a5:35:87:a6:d7:f3:08:
e8:e2:63:da:57:ae:4f:dc:db:95:23:1f:c1:6c:57:
3f:64:40:76:f9:b2:bb:e3:3a:82:13:0d:17:3f:38:
d8:d7:8c:fc:c0:fc:91:0a:3d:74:12:e1:c2:4d:96:
ff:8c:8a:fa:6d:a8:a3:56:9b:8d:2d:2e:2e:49:64:
74:d9:b5:1d:46:40:9b:4d:86:4d:80:10:63:ac:c1:
9d:74:38:9c:0d:3c:cc:af:1f:17:7a:19:cb:f7:28:
7b:69:1b:b4:f2:a6:9c:e0:bd:ca:42:c3:64:6d:07:
87:a8:4e:c5:86:ff:a1:2b:36:35:53:64:b1:e9:9d:
c4:87:12:86:be:7a:19:9d:50:3f:c2:b5:89:ee:db:
ac:e0:8d:ad:91:8e:5b:26:ba:34:99:97:c8:30:b9:
4b:a7:2b:9f:f7:12:c7:d3:ab:29:cd:38:48:9e:d0:
c2:4f:59:24:c1:d6:98:89:76:1c:00:92:ae:8d:a4:
5d:97:ab:b8:b9:82:4e:25:16:ad:19:33:0f:d9:37:
0e:d5:e8:58:12:e0:05:b0:a5:7b:b0:29:a3:4b:96:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7A:85:BA:0E:F2:2B:A6:78:6A:E8:2B:6A:85:E1:64:97:58:1C:79
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6EFCE8121D1211EBBB2D2347C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.52.248.0/22
Signature Algorithm: sha256WithRSAEncryption
54:4d:0a:29:04:7e:17:2e:eb:ce:b3:d3:89:49:34:ca:2e:3c:
0f:89:b4:51:52:8c:f5:c1:05:45:70:d6:8d:20:d5:67:a2:d9:
62:22:88:b9:1e:bd:8d:07:6b:f2:7c:84:e0:de:46:2f:b3:25:
a1:23:f0:5d:f7:89:9a:34:e6:fe:cd:41:f1:ed:54:b9:fb:63:
31:fb:44:f7:56:46:1b:eb:d0:8a:3e:1b:7f:14:8e:1c:fb:56:
5c:28:ab:b4:9a:a4:d8:e4:54:06:56:83:e0:98:b2:6c:7a:4c:
d9:95:76:0b:39:62:95:e4:e3:1f:c4:1d:7d:a4:de:96:92:0b:
42:5b:0d:82:30:cc:9a:77:00:aa:9f:d1:be:fc:67:00:fa:2d:
8f:71:f2:4d:72:f7:d3:f1:b1:c5:5e:be:a1:72:e5:98:6e:7d:
55:ec:6f:7a:e9:96:80:f3:ae:57:9d:db:13:b9:a0:3e:78:a6:
91:6a:52:63:23:d5:14:d1:a8:7e:19:02:18:3c:9d:98:b4:11:
63:54:23:ee:24:be:35:74:f0:9f:e3:90:d5:4b:85:be:ba:3d:
bb:75:ab:3a:5c:5f:8b:1b:4c:bd:5b:6e:a7:13:c4:a8:2e:57:
cd:77:f5:cf:df:88:95:ca:83:a2:d2:1f:77:bd:77:08:90:5b:
2f:95:4b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 13:01:14 2024 by rpki-client on console-ams.rpki-client.org