Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92895C08877611EEA3897434C4F9AE02.roa
File: 92895C08877611EEA3897434C4F9AE02.roa (raw, json)
Hash identifier: TfGcZoFC1RXsS88RMYjLNMHADa80ylLEDJ00gjtRPQs=
Subject key identifier: 58:A0:3A:76:A5:A5:78:97:B2:E5:2C:93:D7:09:D2:CF:FD:F9:B0:6E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7E39
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92895C08877611EEA3897434C4F9AE02.roa
Signing time: Mon 20 Nov 2023 07:29:43 +0000
ROA not before: Mon 20 Nov 2023 07:29:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136367
IP address blocks: 103.179.224.0/23 maxlen: 24
103.180.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32313 (0x7e39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 20 07:29:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=655b0ae7-4f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:60:a7:0c:7a:ba:c9:90:e5:e0:3a:31:99:db:
9d:e5:a2:3d:1b:c0:d5:78:8e:4e:dd:38:d8:13:f6:
f2:84:a1:a4:dd:56:7b:ac:25:e8:b0:28:06:6c:c5:
03:d9:b9:e8:28:be:f3:87:5d:73:61:91:f4:45:41:
c4:6d:6f:1c:b9:49:9a:3c:dd:24:f6:7b:aa:cf:5c:
39:63:eb:0d:46:1c:e9:34:d1:ec:6b:2b:9e:bd:79:
32:ad:42:4d:bb:1a:01:07:d8:fd:d8:0d:cd:bf:e4:
87:10:6f:67:7e:f6:89:3e:3b:c3:3c:44:a1:fc:38:
80:87:fb:1f:ae:c6:08:28:0e:0e:48:b3:ff:da:f3:
c4:53:f9:a6:a9:7a:ea:1c:a5:2e:7e:13:c6:8e:ed:
36:78:4d:08:11:db:0d:4d:62:44:b0:82:77:c1:8f:
e7:86:b9:20:ac:ed:9b:ec:85:b7:6e:21:b0:dd:94:
74:06:47:1f:a7:0c:85:1d:5b:d1:0d:77:e1:60:99:
32:02:54:78:18:39:24:2f:78:b0:a6:30:70:4e:fc:
4b:6f:e4:57:23:81:13:21:b0:e6:38:b5:e3:94:ca:
99:ec:f2:6a:b3:03:87:b4:24:40:cb:25:c6:89:4c:
b4:2a:01:3e:b9:a3:25:c1:c6:27:b7:66:d0:fd:e1:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A0:3A:76:A5:A5:78:97:B2:E5:2C:93:D7:09:D2:CF:FD:F9:B0:6E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92895C08877611EEA3897434C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.224.0/23
103.180.237.0/24
Signature Algorithm: sha256WithRSAEncryption
00:61:53:79:62:ea:e8:45:75:c6:1b:e6:03:a9:d7:ea:0a:ea:
3d:43:85:85:c3:d2:57:48:7e:15:31:93:dc:dc:6c:66:97:1f:
90:fd:cc:73:4d:29:07:cb:52:0d:2f:c5:6e:87:79:ce:f2:37:
cd:fd:0f:b5:a9:e6:22:94:ef:4d:de:82:30:58:fb:ff:e8:ee:
83:fb:f2:a8:b3:14:36:1a:66:c2:0a:0c:b3:45:d1:68:b1:c7:
f0:cb:2b:05:e8:bd:3a:a8:39:76:0f:3d:4b:69:80:86:ad:be:
29:ea:97:50:14:23:22:5e:db:91:63:9d:65:f3:d8:ed:a2:1a:
ba:8c:71:bf:85:3b:66:c9:ec:40:a1:d6:18:08:e4:c2:32:ab:
0b:6e:4c:de:82:8c:a5:1c:00:4f:71:df:91:48:f9:95:a6:8b:
aa:d2:1c:40:11:05:39:fd:c8:49:63:89:f5:5a:07:66:92:97:
34:6a:03:1a:6a:2a:e8:dc:1b:9c:24:8b:b8:17:3f:2b:f3:4c:
c1:5f:5e:4b:29:fa:35:3a:e1:10:9f:aa:8a:31:58:f1:7f:e5:
43:ee:44:36:0e:d4:2e:0d:c6:7a:c4:e2:28:f0:bb:10:52:82:
1e:81:a9:76:3b:f1:00:e5:79:b2:b3:55:2e:f0:76:2e:3b:cd:
9f:61:df:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 08:46:23 2023 by rpki-client on console-fra.rpki-client.org