Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/80FC3A6EC6E711EDA2FCBA34C4F9AE02.roa
File: 80FC3A6EC6E711EDA2FCBA34C4F9AE02.roa (raw, json)
Hash identifier: /iBeT8Jr1YP671adbnqduwqkxpAM98CZHxcUrcs7EZI=
Subject key identifier: C8:A6:09:8D:0B:83:C8:11:DE:4B:C6:5B:81:BD:1E:AF:DE:AB:98:AC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6F2A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/80FC3A6EC6E711EDA2FCBA34C4F9AE02.roa
Signing time: Wed 10 May 2023 16:37:30 +0000
ROA not before: Wed 10 May 2023 16:37:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141853
IP address blocks: 103.165.76.0/23 maxlen: 24
103.166.214.0/23 maxlen: 24
103.170.36.0/23 maxlen: 24
103.171.108.0/24 maxlen: 24
103.177.226.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28458 (0x6f2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:37:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc84a-31ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:09:65:af:a3:e5:43:c8:c2:0d:f2:bc:6b:3b:
e0:4f:d0:9c:f0:0e:de:f0:85:99:4e:ec:16:1e:c4:
9d:41:3c:e2:fc:e7:ca:f4:44:a1:85:27:f8:0f:22:
f6:8f:2d:04:29:9c:70:2c:66:cb:f2:38:e1:24:6b:
0f:ec:8f:75:0b:62:07:53:d7:c0:07:4d:b9:77:41:
09:8e:b9:9f:7d:36:d4:86:b4:33:8e:85:40:27:2e:
8a:57:f9:4e:3e:b3:50:a0:b4:5c:3d:52:be:e5:29:
8c:22:7f:20:d3:9d:f4:10:07:b1:4f:97:5c:71:ca:
44:cc:c7:7e:9c:6f:a3:b9:a8:98:57:9b:d8:84:2b:
26:72:93:2e:89:8e:67:aa:02:33:2d:4b:4b:fc:98:
e4:59:7c:01:b2:7d:be:e4:b7:68:92:97:eb:51:ce:
64:99:56:c6:68:e7:f6:a4:4a:f9:c2:fc:79:d5:6f:
8a:a9:54:f4:8c:45:21:fe:82:47:69:17:59:3a:ca:
d2:09:b7:ab:5d:c2:d3:fe:e5:28:3d:5f:1b:00:f4:
3d:01:eb:f2:ea:c2:95:ed:8f:f0:cb:92:03:5a:b7:
c2:42:18:ed:1a:f5:06:eb:a0:22:35:c2:76:3a:c3:
f8:43:99:f0:a8:23:96:77:59:8d:25:28:70:1c:fd:
32:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A6:09:8D:0B:83:C8:11:DE:4B:C6:5B:81:BD:1E:AF:DE:AB:98:AC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/80FC3A6EC6E711EDA2FCBA34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.165.76.0/23
103.166.214.0/23
103.170.36.0/23
103.171.108.0/24
103.177.226.0/23
Signature Algorithm: sha256WithRSAEncryption
74:d0:f6:e3:f5:dd:f3:9f:32:13:e7:f7:d6:1a:18:2a:09:93:
51:51:0c:9f:6e:cd:07:84:af:e2:f4:c4:c0:e5:98:15:38:2f:
e2:66:6a:90:35:61:ec:db:e2:dd:fa:33:53:96:b3:a3:8b:74:
20:dc:9f:67:be:9d:75:29:49:8a:23:e2:ef:11:26:b5:3d:29:
2b:89:97:94:c5:d2:9d:d0:21:5c:58:c6:29:4e:37:5d:fb:2a:
84:72:4d:3a:fa:1b:6f:d5:9a:90:b6:5d:ec:c3:91:51:b9:a7:
4d:f6:da:1c:99:9d:f6:a4:42:99:01:2a:75:4c:c1:27:fa:cf:
93:b1:72:2c:2d:f0:1d:b5:95:3a:78:1d:95:63:22:b3:d0:fd:
b0:b5:c9:c8:12:b6:28:33:d3:ce:18:09:e8:07:ad:15:d1:a4:
9a:8c:b4:8f:a8:f0:7b:ca:90:09:db:77:b4:be:a6:37:8f:90:
37:4c:b0:07:55:ee:36:ec:d9:69:7d:44:87:30:0a:44:e7:e5:
9b:76:8e:dc:6f:ed:22:8e:ea:65:33:3a:62:22:0b:e3:a6:60:
7e:27:5d:3b:40:15:3c:9e:d4:f7:83:6f:dc:be:af:b0:21:66:
91:b2:b6:48:62:6f:12:96:4e:d4:de:ab:27:de:99:d8:4a:fc:
ba:df:25:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 08:58:36 2023 by rpki-client on console-ams.rpki-client.org