Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7EA5F364876611EEB05A0141C4F9AE02.roa
File: 7EA5F364876611EEB05A0141C4F9AE02.roa (raw, json)
Hash identifier: vqzE14UlBaSs/jPMh26ymLEZAA3AGRICjUNTxly74QM=
Subject key identifier: 3F:F9:FA:92:27:CE:07:3A:A3:CC:60:78:61:EE:31:29:34:B9:74:7B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7E01
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7EA5F364876611EEB05A0141C4F9AE02.roa
Signing time: Mon 20 Nov 2023 05:34:38 +0000
ROA not before: Mon 20 Nov 2023 05:34:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141853
IP address blocks: 103.171.108.0/24 maxlen: 24
103.177.226.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32257 (0x7e01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 20 05:34:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=655aefed-8ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:04:5d:e8:75:71:62:90:72:d1:e5:10:00:
fa:78:2c:ed:98:f2:8d:c2:39:ca:ae:41:fc:0b:36:
44:0d:59:82:52:0c:f3:42:2f:2a:3a:66:78:27:5c:
7d:d0:37:43:01:16:6a:21:8c:c2:20:ff:32:77:96:
03:8d:fe:c9:a7:9a:92:e5:fa:ab:6b:7f:61:79:23:
3b:39:06:5b:0d:9d:cf:11:b5:18:b1:3d:49:3c:76:
50:43:fa:a6:93:ce:a7:61:e3:91:5f:20:a9:a1:70:
99:bc:1a:fa:e4:ba:eb:f1:15:ae:4d:d1:f0:ee:97:
0a:17:87:a1:7d:4a:e5:9f:47:a6:aa:23:b1:fb:09:
36:cf:c7:d1:17:46:0c:ff:48:1a:f7:a7:45:88:f1:
61:9f:12:af:0e:74:27:ba:36:45:2d:8d:19:da:0e:
18:05:4d:2f:4b:e1:e5:c5:79:7a:c0:0e:04:60:8b:
21:f2:64:0e:0b:0f:e3:e1:e5:b7:c4:45:5d:d6:92:
84:4e:71:98:61:e3:04:f7:45:2e:5c:9f:24:1d:1b:
89:9e:97:0c:5e:50:71:a2:c3:f6:12:3c:e5:d4:0e:
02:0c:94:6f:26:37:7b:01:19:2c:fc:09:4c:dd:4f:
23:ea:53:c6:f2:83:b7:5d:a8:38:b8:30:81:7a:ee:
0e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F9:FA:92:27:CE:07:3A:A3:CC:60:78:61:EE:31:29:34:B9:74:7B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7EA5F364876611EEB05A0141C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.108.0/24
103.177.226.0/23
Signature Algorithm: sha256WithRSAEncryption
93:76:98:1f:ba:80:0f:f9:92:00:9a:d9:46:5f:75:e4:51:b8:
61:4d:33:1e:13:e8:5f:1f:f3:4a:1a:f9:d8:ac:42:2c:ce:f7:
ca:bc:3e:fb:e3:3b:b4:3b:d9:3c:45:ad:c6:0d:f4:4c:20:8c:
f4:ef:23:a1:ad:8e:ba:9a:99:fa:60:0c:b1:a5:88:82:79:42:
11:03:37:e4:52:9f:18:8c:77:74:81:77:d0:90:14:c5:b3:60:
22:4e:37:c8:24:d1:84:f0:72:ec:c2:1a:04:63:fa:96:72:16:
5b:ba:97:bf:a8:2d:d8:d8:cd:8b:ed:a5:54:f3:27:38:98:2b:
31:01:9a:e8:5a:35:fa:60:39:ce:27:18:51:39:ba:5e:8b:95:
27:bd:b7:31:d2:96:0a:d2:54:0c:93:07:09:c5:fc:7a:d9:d3:
42:d7:18:fd:ba:19:b5:ba:f0:dc:2a:33:0f:a4:9b:f3:8a:48:
c4:88:2c:f6:d5:a6:10:6e:8c:17:35:64:05:17:9f:81:fb:ef:
85:cb:40:50:ee:37:3a:ed:b5:77:51:b9:a4:13:bd:73:4a:13:
ec:f7:e6:fb:39:b8:0d:a3:f7:72:72:5d:e9:24:a5:11:71:7e:
67:82:e1:03:36:cf:db:58:23:9f:f9:de:dc:0d:8a:19:37:ce:
dc:c4:50:98
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICfgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMxMTIwMDUzNDM4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTVhZWZlZC04ZGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArRAEXeh1cWKQctHlEAD6eCztmPKNwjnKrkH8CzZEDVmCUgzzQi8qOmZ4J1x9
0DdDARZqIYzCIP8yd5YDjf7Jp5qS5fqra39heSM7OQZbDZ3PEbUYsT1JPHZQQ/qm
k86nYeORXyCpoXCZvBr65Lrr8RWuTdHw7pcKF4ehfUrln0emqiOx+wk2z8fRF0YM
/0ga96dFiPFhnxKvDnQnujZFLY0Z2g4YBU0vS+HlxXl6wA4EYIsh8mQOCw/j4eW3
xEVd1pKETnGYYeME90UuXJ8kHRuJnpcMXlBxosP2Ejzl1A4CDJRvJjd7ARks/AlM
3U8j6lPG8oO3Xag4uDCBeu4O1QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFD/5+pIn
zgc6o8xgeGHuMSk0uXR7MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvN0VBNUYzNjQ4
NzY2MTFFRUIwNUEwMTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnq2wDBAFnseIwDQYJKoZIhvcNAQELBQADggEBAJN2mB+6
gA/5kgCa2UZfdeRRuGFNMx4T6F8f80oa+disQizO98q8PvvjO7Q72TxFrcYN9Ewg
jPTvI6GtjrqamfpgDLGliIJ5QhEDN+RSnxiMd3SBd9CQFMWzYCJON8gk0YTwcuzC
GgRj+pZyFlu6l7+oLdjYzYvtpVTzJziYKzEBmuhaNfpgOc4nGFE5ul6LlSe9tzHS
lgrSVAyTBwnF/HrZ00LXGP26GbW68NwqMw+km/OKSMSILPbVphBujBc1ZAUXn4H7
74XLQFDuNzrttXdRuaQTvXNKE+z35vs5uA2j93JyXekkpRFxfmeC4QM2z9tYI5/5
3twNihk3ztzEUJg=
-----END CERTIFICATE-----
Generated at Mon Nov 20 07:32:52 2023 by rpki-client on console-ams.rpki-client.org