Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7956EA4ECBF811EAACFCA739C4F9AE02.roa
File: 7956EA4ECBF811EAACFCA739C4F9AE02.roa (raw, json)
Hash identifier: 5tYLIy0WZkbPlLv1gw7bQ03B3vwOh3hb2Ii3vp5iEek=
Subject key identifier: 22:10:AF:6B:B6:59:41:5E:7F:A2:FB:B6:FD:D5:24:BB:F9:22:14:E0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6D25
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7956EA4ECBF811EAACFCA739C4F9AE02.roa
Signing time: Wed 10 May 2023 16:27:53 +0000
ROA not before: Wed 10 May 2023 16:27:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137623
IP address blocks: 103.118.180.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27941 (0x6d25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:27:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc609-1c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:44:39:ea:d6:eb:58:db:05:f8:2d:d2:43:
3a:70:b3:20:42:f8:ff:6d:bd:a3:a5:a2:2e:08:7c:
27:de:9d:01:22:3c:f3:d5:c8:ae:85:40:2b:6e:5a:
dc:84:65:ae:8c:93:d4:74:7f:09:24:4f:70:5f:f6:
d7:cb:3b:6c:10:6b:8b:b5:7e:d5:10:85:d1:5e:1c:
4f:ae:30:b8:e3:d3:cb:89:c9:e3:70:9b:d4:e1:5a:
cc:43:9e:2c:8a:f9:32:71:89:cc:f1:70:8d:e9:6f:
6e:70:d8:fc:06:4e:37:34:d7:61:b8:56:fe:eb:fd:
5e:92:de:56:67:94:4e:a4:0e:1f:3a:88:74:35:47:
04:64:29:d5:94:e4:9c:0e:44:42:67:cf:33:64:87:
16:5a:56:d8:63:5a:d1:38:8b:85:3d:02:27:7a:3e:
b1:8f:7e:dc:50:a1:b2:7a:4c:b9:fa:bf:a8:f3:5f:
f5:fe:03:9f:8d:0b:18:7a:0a:2d:ec:64:38:da:dc:
c8:60:7d:1e:19:d8:b8:30:6f:19:d0:36:ae:0c:dd:
e5:36:fa:87:67:05:4c:6c:b8:17:68:3e:b8:e1:d5:
25:19:e9:39:0f:5a:bd:72:4b:28:56:fe:76:1c:bf:
71:7f:f8:b7:06:40:45:d7:cc:61:c5:e8:ce:b3:13:
7d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:10:AF:6B:B6:59:41:5E:7F:A2:FB:B6:FD:D5:24:BB:F9:22:14:E0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7956EA4ECBF811EAACFCA739C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.180.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:ab:2a:77:52:d9:f3:a2:7b:fd:89:8a:f4:93:b3:d1:35:90:
53:b1:8e:13:86:18:cc:17:fc:2a:2b:94:f6:7e:6e:2c:ff:4a:
24:cf:0e:cd:c6:8f:18:a7:8d:04:ad:01:44:2c:f5:71:2c:fd:
cc:fc:2f:2d:b3:a0:11:d6:b0:00:ef:f0:b1:27:0f:71:5f:ab:
fc:d2:84:30:21:82:bc:e2:27:c7:e3:36:3a:30:09:32:82:e0:
d5:9d:40:13:9d:59:e6:39:b7:aa:30:bd:6d:6d:49:e3:cb:1f:
03:54:45:ee:77:0a:b0:a8:41:03:4b:e8:4e:51:cf:f5:1c:f7:
a4:ac:b7:fc:60:13:40:76:02:f5:f6:10:c9:4f:32:05:ae:f8:
fd:2d:41:9e:ad:8a:54:f6:de:34:65:ce:de:1d:15:da:92:2b:
29:fb:68:42:57:b0:5e:1b:49:9e:37:f6:d1:f8:18:81:d9:1a:
b2:8a:5b:95:2e:ce:de:e5:b0:fd:43:5f:32:07:6b:9b:6d:d6:
fe:34:8c:3f:1f:78:f6:8d:67:38:84:73:5f:7d:da:33:53:35:
23:44:94:ce:bb:ab:56:49:f1:8a:08:df:f5:99:34:98:a7:78:
6c:23:bd:22:7d:fa:8a:1a:e0:31:66:26:c7:81:9f:17:d7:ff:
ec:cf:30:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 10:15:35 2023 by rpki-client on console-fra.rpki-client.org