Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A29FFCA043911EE8434502FC4F9AE02.roa
File: 7A29FFCA043911EE8434502FC4F9AE02.roa (raw, json)
Hash identifier: EWDrBQoEjFpl7VNmjlS+WgXc8bkPpo+wXuCah09l7g8=
Subject key identifier: B8:12:55:C6:60:19:CE:28:1E:72:0F:6C:32:4D:FA:11:B0:85:9D:13
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 735B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A29FFCA043911EE8434502FC4F9AE02.roa
Signing time: Tue 06 Jun 2023 07:12:20 +0000
ROA not before: Tue 06 Jun 2023 07:12:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141875
IP address blocks: 103.165.88.0/24 maxlen: 24
103.165.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29531 (0x735b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 6 07:12:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=647edc54-80a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:87:a0:dd:b7:bc:01:8f:2a:48:37:ca:47:56:
de:4f:f6:7b:5b:72:15:57:3b:bd:f9:25:ee:34:6f:
a7:65:b6:dc:5a:79:d3:08:0a:6a:25:6b:42:d3:50:
92:3d:2a:14:ba:6c:cf:5c:b0:16:01:6e:2d:27:e9:
ce:67:c2:a7:bd:fb:b7:9b:d0:6d:54:87:0c:7b:75:
03:8e:27:56:3c:89:23:08:93:48:46:8d:c2:40:e6:
c3:8f:3b:0b:dd:30:ac:9b:b9:5b:1d:d3:6c:d2:58:
b6:7b:e9:c5:84:8c:22:a9:6c:62:b3:01:2a:7d:43:
f3:75:5e:9c:14:e0:38:3d:83:f4:de:11:2b:70:bb:
8d:7e:7f:cd:57:6a:db:be:a5:86:53:ab:ff:67:9b:
74:dd:42:67:d4:85:63:2d:07:cc:96:e3:55:b8:7b:
5a:30:a5:67:52:5d:b9:4b:4c:8e:29:84:66:bf:b8:
b2:f8:d3:66:15:8c:48:71:75:3d:27:60:ef:52:5d:
f3:6b:b5:1b:09:bd:8c:09:5f:b9:67:25:c8:e4:a0:
54:51:bd:ec:fe:86:f7:77:2c:f5:c2:e3:dc:76:93:
82:c8:4e:67:f6:3e:b9:7c:3e:ff:f1:e9:3b:c3:33:
db:dd:a0:c2:65:0f:9c:9d:95:7e:50:b6:ed:ea:10:
88:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:12:55:C6:60:19:CE:28:1E:72:0F:6C:32:4D:FA:11:B0:85:9D:13
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A29FFCA043911EE8434502FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.165.88.0/23
Signature Algorithm: sha256WithRSAEncryption
60:81:b8:fc:8c:28:d1:2b:9f:80:09:3e:e0:7a:23:92:4a:59:
81:b5:3e:e3:e3:f9:67:4a:90:7f:b3:1a:3d:6f:b8:5e:62:8a:
ae:cc:67:a8:86:47:65:41:1e:95:fd:29:b9:8b:01:94:4b:c3:
be:ca:69:5b:8d:0e:eb:63:8b:55:de:56:30:0e:68:b8:ce:bd:
d6:4c:fc:83:93:83:d2:ff:bd:95:6b:2d:a3:e6:36:98:ca:38:
ee:19:7e:9a:3f:04:96:b1:76:73:1b:26:c7:11:23:df:46:e9:
a7:05:a2:f7:73:b6:9c:f7:23:9a:53:6c:ee:0e:32:88:97:3e:
42:31:4f:c2:e4:b7:b8:a2:74:d5:63:f5:ad:ac:26:3a:3e:5a:
1a:ed:d7:cf:36:7a:0b:19:cd:25:2e:63:90:d5:e0:fa:cf:87:
4c:fe:49:da:b6:58:44:20:d1:29:8e:82:45:60:bc:37:0c:7d:
76:9c:a0:33:2f:1b:bd:f3:c9:4a:54:84:6e:c0:50:84:00:1c:
1e:e5:d0:64:71:ad:79:63:d6:cf:46:8b:37:0c:d7:25:4f:5f:
5a:91:d3:de:60:19:cd:9a:5f:b9:1b:eb:59:ef:a2:74:69:8f:
59:9f:2b:55:c2:33:b7:39:02:7a:97:67:14:e8:8e:b1:42:7b:
ff:9e:f2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 06:28:18 2023 by rpki-client on console-fra.rpki-client.org