Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/803F45A6698311EDAFF8F977C4F9AE02.roa
File: 803F45A6698311EDAFF8F977C4F9AE02.roa (raw, json)
Hash identifier: 3+SCiIBx4Lcpa4MSLtPS96uAnj0zRvXK4M2cBdxQTmE=
Subject key identifier: 53:F6:5C:F0:C4:DD:D1:7B:ED:0B:B6:9C:8E:B0:E8:32:ED:6A:93:2D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6E18
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/803F45A6698311EDAFF8F977C4F9AE02.roa
Signing time: Wed 10 May 2023 16:32:29 +0000
ROA not before: Wed 10 May 2023 16:32:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140125
IP address blocks: 103.168.0.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.179.94.0/23 maxlen: 24
103.181.64.0/23 maxlen: 24
103.181.152.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28184 (0x6e18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:32:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc71d-25d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:02:9c:62:ca:33:16:d7:84:df:8d:27:e5:
87:ea:d7:7b:67:1e:85:4c:b9:d0:c1:ad:1e:e2:5e:
75:67:12:17:dd:ba:54:9c:6e:e1:06:04:7e:ea:6f:
e3:59:b9:62:6a:2c:0c:a3:f6:c9:03:9b:de:fd:64:
dd:39:b2:34:9c:41:8d:e8:66:9f:32:9c:ca:f4:94:
ed:92:af:29:b3:2d:25:0c:ce:5b:e8:5c:62:d1:dc:
c0:39:d0:28:1e:b4:60:0a:71:2d:fd:b7:a2:a5:d2:
20:47:ac:66:72:88:e5:71:30:23:32:5f:48:1d:34:
87:99:e4:3e:25:6b:5e:6c:51:46:61:49:55:6e:19:
d7:e0:94:9e:5d:71:f7:9f:ed:43:a0:87:78:a3:e7:
8e:b2:b1:7c:69:1f:26:4f:13:4b:95:86:33:45:de:
db:77:00:91:03:20:89:14:d1:f1:08:b0:7d:54:a2:
16:eb:f0:05:65:14:b3:97:e3:e6:1d:3e:f0:37:eb:
cc:fc:75:46:3e:11:b1:ee:cd:36:db:c7:08:68:19:
92:76:5f:76:49:f2:2c:f8:8f:e1:a9:de:97:a5:46:
81:4c:e2:36:bd:7a:01:01:5f:1e:33:20:a1:f2:a3:
95:71:b4:ee:75:70:0f:33:87:d7:95:17:e2:41:35:
22:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F6:5C:F0:C4:DD:D1:7B:ED:0B:B6:9C:8E:B0:E8:32:ED:6A:93:2D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/803F45A6698311EDAFF8F977C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.168.0.0/23
103.173.14.0/23
103.179.94.0/23
103.181.64.0/23
103.181.152.0/23
Signature Algorithm: sha256WithRSAEncryption
05:80:47:e6:ab:f6:ea:a7:e3:61:18:0c:b6:0a:31:74:ba:4b:
a9:e0:9f:d8:71:ad:39:ff:e0:b3:7c:89:bf:b5:6d:3a:19:6a:
0f:07:0c:98:d0:d2:f8:e9:a7:54:f7:9d:d2:57:5e:e5:76:e0:
aa:63:09:dd:8b:05:c5:5a:11:41:f3:e5:39:2e:da:68:9b:a8:
9c:9e:7e:9c:d9:f0:ba:d2:e6:5d:f1:42:83:d3:4f:e1:17:30:
04:36:88:3e:3b:e8:dd:22:ab:15:e9:a0:11:78:34:cd:8b:e4:
f2:89:a2:4f:02:29:e1:86:25:38:c7:13:9e:c9:09:3b:93:72:
31:2e:db:7b:33:73:29:c7:dd:83:32:f1:24:ea:6e:16:f5:ea:
43:5d:ad:1d:fa:5a:27:69:8d:c1:4f:1c:e5:64:5f:58:34:d0:
d0:09:0e:78:0b:94:ff:67:f4:97:fd:8a:fb:51:f6:2c:22:66:
03:00:3e:bd:88:90:c0:98:0a:b0:bf:37:8b:65:09:e7:f3:91:
e4:7f:62:86:71:b9:54:c5:13:81:93:77:ae:69:91:76:2c:fc:
b9:f4:f3:0f:03:eb:94:ba:70:b7:9c:2a:53:27:69:c2:08:c1:
f7:e3:1b:c2:c9:02:cb:c0:4b:4e:d0:eb:c3:2d:06:11:65:0d:
54:b6:28:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 12:29:55 2023 by rpki-client on console-fra.rpki-client.org