Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7687D48857F011ECB9AEA534C4F9AE02.roa
File: 7687D48857F011ECB9AEA534C4F9AE02.roa (raw, json)
Hash identifier: nCIF+socAel9y0z8f0ngUXeyqsf7Ym6Sjr8kKMi1e3g=
Subject key identifier: 8A:BD:1C:06:FD:A6:6B:24:68:66:46:92:A9:7D:9B:64:18:89:8C:44
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6FF9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7687D48857F011ECB9AEA534C4F9AE02.roa
Signing time: Wed 10 May 2023 16:41:22 +0000
ROA not before: Wed 10 May 2023 16:41:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147247
IP address blocks: 103.176.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 11:51:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28665 (0x6ff9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:41:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc932-b222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:55:e4:b3:fa:3f:20:78:29:a9:9d:3a:f4:35:
a3:b8:45:b5:e0:c8:35:32:92:c8:bc:eb:ae:a5:79:
aa:09:d4:6c:34:4b:74:6f:19:b8:8e:8d:da:2e:db:
50:f3:c8:99:29:90:7c:43:29:cb:12:76:5c:4b:bc:
e1:da:1c:12:4b:5d:7a:ed:5e:e8:2b:43:f9:46:35:
a9:99:b8:0c:43:9a:b7:01:34:df:c5:fc:dc:2b:10:
01:c0:84:e5:f3:a6:76:af:87:46:6f:c6:5b:b0:a6:
34:cc:50:e9:4e:df:46:e5:c7:3b:34:ab:4d:5e:51:
32:c5:33:1b:b1:ff:5c:d8:38:5f:aa:52:83:33:b9:
5c:35:41:71:9a:cc:47:84:d7:53:4f:08:4b:60:ab:
1f:c8:d1:51:66:cc:92:e1:d2:ac:1c:2c:7d:92:d6:
be:91:1d:05:a6:e7:a2:ac:97:d7:76:ec:44:b9:5c:
48:b7:01:ec:d0:21:e1:48:fd:ec:e0:2f:1a:d5:76:
5e:cf:c5:6b:7b:41:ef:8d:d0:39:b7:00:64:01:8c:
6b:d3:13:8d:5c:f5:d2:6c:65:ae:4c:4a:87:20:28:
c9:af:50:40:b5:c6:19:a7:8a:a7:8e:25:a3:4e:d9:
47:53:0c:c8:c5:8b:75:0c:2b:3d:3c:43:01:c2:c7:
1c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BD:1C:06:FD:A6:6B:24:68:66:46:92:A9:7D:9B:64:18:89:8C:44
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7687D48857F011ECB9AEA534C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.71.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b0:72:e5:ab:2c:7a:ba:e9:c0:9a:37:c8:31:76:52:d8:7c:
dd:26:d5:3a:be:a0:63:d3:9a:0c:4d:21:d8:b4:55:fe:27:53:
e7:82:30:63:93:e3:3b:0b:33:6d:05:60:ed:bd:48:9d:33:ec:
b5:3b:60:25:8b:3f:11:17:c4:b3:c1:ae:27:7c:55:74:73:36:
5d:b5:bc:b6:7a:4a:44:83:19:e3:1e:55:9c:6d:45:d6:71:df:
fa:60:e4:b2:19:58:8a:e9:a9:2a:3c:33:64:34:e0:5d:3d:53:
30:4d:d4:bf:3b:b6:83:27:7e:84:e1:9c:ff:8f:db:e1:1b:85:
96:93:a2:f2:05:65:d5:89:a7:ba:a5:67:b1:8a:6f:5f:96:b8:
9a:15:ae:92:2a:a5:fe:2c:2d:73:00:74:b1:30:79:c5:2c:34:
d5:8b:a8:de:92:6a:50:df:49:6a:8d:40:8a:dd:50:a5:2f:e6:
ef:d4:b8:61:e3:e1:73:3f:6f:99:8b:a8:38:79:30:e5:21:00:
29:5e:1a:93:87:31:0f:10:70:26:26:4e:47:8a:d7:c5:1c:f1:
2b:29:eb:42:a5:41:20:fb:b1:41:04:04:59:68:0a:b0:29:15:
ea:c0:88:d4:09:88:5a:b2:b5:29:81:e5:db:fc:dc:b5:8d:a5:
43:4b:18:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 15:05:11 2024 by rpki-client on console-ams.rpki-client.org