Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72255F4E03C011EB83479221C4F9AE02.roa
File: 72255F4E03C011EB83479221C4F9AE02.roa (raw, json)
Hash identifier: fIFmk8W7iqSGk1p5JM37K5X8sz5xAi2l1RrLvaevNSg=
Subject key identifier: 2D:38:AF:0D:AF:CA:56:38:86:C9:C9:E0:B8:C3:0F:1F:AD:10:1A:75
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7ECB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72255F4E03C011EB83479221C4F9AE02.roa
Signing time: Fri 24 Nov 2023 12:14:14 +0000
ROA not before: Fri 24 Nov 2023 12:14:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135740
IP address blocks: 103.148.64.0/24 maxlen: 24
103.148.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32459 (0x7ecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 24 12:14:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65609396-c8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:5f:f9:6a:1d:d3:7d:7c:cd:05:d7:c5:84:
44:92:d7:db:86:68:24:86:5c:e5:d2:87:4c:b4:ef:
9f:1d:d2:0e:3e:75:7a:28:b7:5a:78:86:c3:65:09:
e4:96:45:0d:81:f1:21:0f:cd:75:02:20:23:b9:ef:
2c:b0:ae:a9:45:83:37:5b:6b:ee:d4:4d:2e:3d:01:
36:fd:22:ab:22:09:3e:cb:47:79:40:0e:ce:42:49:
7b:fb:bf:8a:45:ea:c4:f5:0f:5a:df:16:21:13:02:
28:26:43:84:fe:1d:b3:d7:7f:65:2b:30:13:71:1a:
fc:a6:60:b1:fa:21:a8:ad:94:45:8c:04:33:c0:70:
a5:ec:3a:ed:f1:1e:9c:c4:b1:8a:4b:e2:7b:e0:df:
17:bc:ce:ba:0f:35:e7:c4:81:1a:11:c3:eb:d3:91:
80:bb:04:c6:fc:73:7a:06:7e:eb:22:e3:27:58:85:
36:c0:2c:26:c4:3f:8a:e0:17:ce:4c:f7:a9:e3:c9:
3c:f5:a8:d1:e0:b0:ad:82:db:ae:52:59:59:ee:79:
3d:c0:42:16:49:1e:75:37:5e:24:ee:3b:43:15:47:
18:f2:53:ee:f2:ce:35:57:6f:59:be:9b:ee:85:d0:
3d:f0:42:a6:77:94:1b:a3:57:21:bb:24:9d:6b:b8:
1c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:38:AF:0D:AF:CA:56:38:86:C9:C9:E0:B8:C3:0F:1F:AD:10:1A:75
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72255F4E03C011EB83479221C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.64.0/24
103.148.230.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c0:d8:3c:ac:65:8d:7e:e1:be:cd:d4:fc:00:5c:b7:9e:e6:
43:9c:21:09:fe:c8:4c:ae:c2:db:e0:b9:19:d6:08:f5:22:cf:
12:a1:dd:2f:0f:ea:29:d3:1f:f0:ee:94:0f:48:a5:37:ec:eb:
3e:3e:91:2a:f0:89:43:60:5b:f2:ed:93:86:7c:f9:49:0b:63:
74:84:a3:57:41:b4:83:74:de:5b:0c:89:7c:18:e2:66:df:83:
6a:72:b3:45:f4:55:1b:72:d6:02:d3:f8:76:d4:d3:e3:60:53:
f0:7b:1e:1b:1f:a2:e3:66:c1:5b:a8:5b:4f:13:a9:1a:b0:99:
5e:d2:42:2b:c9:47:4d:5b:4b:ce:58:28:ce:2d:a9:d8:7d:62:
73:0a:ac:e4:2c:96:61:70:5a:83:90:b3:40:ca:c4:04:f7:e9:
46:a2:8e:4b:73:47:e3:93:8c:f4:f6:22:d7:b1:5d:f1:0c:7f:
03:2f:9d:9f:28:b0:50:5e:8d:2c:66:4f:df:4e:ec:01:66:63:
02:8b:64:ab:6d:34:12:5a:eb:dd:5e:24:bd:ad:bf:ce:21:86:
48:bd:c6:81:45:d8:17:6c:5c:83:1b:36:22:f3:99:00:eb:4b:
75:b8:3b:b9:a4:80:c0:dd:c0:b4:11:b9:12:79:b7:35:4a:7b:
97:e9:4f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 4 12:24:48 2023 by rpki-client on console-fra.rpki-client.org