Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/880A53FCBEA011EE83E9E80BC4F9AE02.roa
File: 880A53FCBEA011EE83E9E80BC4F9AE02.roa (raw, json)
Hash identifier: ZKdTiBcxkMLzo7YWcwq1Pp2XC1ug2Yjme/WS8maQ5+Q=
Subject key identifier: FD:59:52:A4:B1:44:5D:50:F6:1A:97:77:B3:3E:3F:C1:4C:56:4A:92
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8221
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/880A53FCBEA011EE83E9E80BC4F9AE02.roa
Signing time: Mon 29 Jan 2024 12:18:38 +0000
ROA not before: Mon 29 Jan 2024 12:18:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135778
IP address blocks: 103.82.100.0/22 maxlen: 22
103.82.100.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 20:46:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33313 (0x8221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 29 12:18:38 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65b7979e-1a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:51:d7:97:e3:52:fb:50:89:48:1d:7c:b3:f8:
bd:d5:bd:7a:e2:39:48:26:58:f8:fb:f5:3d:a8:72:
90:f3:74:a7:18:05:6c:25:2a:e7:c4:49:f9:95:93:
71:7e:e1:eb:96:72:c1:1a:27:8b:61:eb:a7:5b:82:
c0:44:d5:d1:d7:9d:4d:46:38:aa:a1:cf:6d:0f:ed:
ec:8b:f3:a0:7d:74:16:91:3b:9b:55:41:ca:c9:86:
a1:a7:46:cf:19:02:28:ed:42:8e:aa:c6:c6:0d:83:
d0:75:e2:1a:25:06:26:c2:60:22:f4:9b:31:ab:12:
91:94:bf:b2:f8:b7:3e:54:09:ce:eb:eb:7b:e5:4d:
fb:ab:97:01:8e:e5:4d:24:2e:3c:b3:8b:3f:a1:10:
47:eb:0e:c7:1a:1b:14:e9:70:a2:aa:68:59:c0:f4:
e8:8a:5a:ba:ba:15:ea:52:af:e7:ed:ca:cc:f4:73:
c1:7b:ac:6f:3f:a1:fe:7c:91:8e:f8:3a:6f:50:cd:
a3:20:65:b1:c5:b2:0d:9b:8b:f7:85:ca:af:5b:55:
15:90:4c:07:ee:b7:1b:d6:37:e0:0a:6f:a6:f7:e6:
03:6c:f3:6f:c2:26:a0:f2:a2:44:fe:f0:b1:89:c5:
88:2c:9f:09:4b:5b:7a:0c:1b:a4:19:6b:15:fc:e2:
44:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:59:52:A4:B1:44:5D:50:F6:1A:97:77:B3:3E:3F:C1:4C:56:4A:92
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/880A53FCBEA011EE83E9E80BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.100.0/22
Signature Algorithm: sha256WithRSAEncryption
99:f6:5a:6a:4e:df:dd:ed:e0:e4:17:0a:76:56:d9:e8:52:2e:
c4:01:63:cd:b7:22:24:e7:5d:df:bf:70:aa:98:29:ee:61:de:
25:3e:a3:80:05:e1:e6:a5:a2:da:00:3d:7a:4a:71:76:fd:36:
71:80:5c:73:92:e5:22:2a:67:57:6d:49:06:06:d5:c7:3a:f7:
d0:ce:e7:52:19:4c:90:fe:59:b0:8d:b0:0d:84:a8:22:97:4c:
8b:1f:e7:b3:17:32:c5:e1:23:01:f8:d2:2d:e7:e4:aa:e7:a2:
c1:05:88:d5:29:4a:e9:32:92:91:f3:72:4a:d4:d8:77:c3:35:
f6:9f:48:b1:f2:3b:4b:63:92:e7:66:00:97:0e:6e:f1:a2:e5:
84:b7:d1:d3:62:24:e7:be:b7:82:b4:e6:26:b7:2f:f7:29:94:
20:29:4d:d0:82:fa:f7:e7:e5:a2:66:31:1a:81:50:1c:a4:fe:
ef:5f:cf:88:f0:19:7e:82:22:04:49:89:9c:8f:47:44:8d:3a:
5d:6c:2e:a2:7e:95:cc:7a:05:0e:60:17:91:15:be:0e:43:fc:
b3:fe:57:99:10:3b:5e:dc:ef:e9:b8:b6:02:e1:0d:b2:28:13:
fe:0e:ee:96:75:85:ce:96:a6:8c:c6:7b:1f:68:6b:70:38:fd:
76:80:61:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 22:41:25 2024 by rpki-client on console-ams.rpki-client.org