Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92EB9A4A877A11EE98B22A56C4F9AE02.roa
File: 92EB9A4A877A11EE98B22A56C4F9AE02.roa (raw, json)
Hash identifier: 3c+TYEMOY0C50h3LWdh8JKXsphUOUIPstYufIr2vywQ=
Subject key identifier: ED:35:E0:5A:65:E2:70:C0:C9:98:83:23:48:17:00:43:96:49:66:FB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7E47
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92EB9A4A877A11EE98B22A56C4F9AE02.roa
Signing time: Mon 20 Nov 2023 07:58:22 +0000
ROA not before: Mon 20 Nov 2023 07:58:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150091
IP address blocks: 103.181.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32327 (0x7e47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 20 07:58:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=655b119d-be70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:19:9b:6e:49:d2:72:e1:52:b5:d3:61:bc:4c:
7f:73:3d:b2:05:35:4f:01:fa:cc:6a:39:ae:10:66:
97:31:46:6d:52:13:5b:26:5c:e7:b6:2b:25:f3:88:
e4:de:12:30:c3:56:7a:ae:ae:3b:16:86:54:75:fe:
9e:a2:45:ed:a5:89:ca:be:5e:3d:6b:14:82:ad:e8:
a1:59:dd:f9:92:81:58:d6:ee:b3:ee:ab:24:82:72:
83:33:9f:93:96:cd:8e:d6:5a:be:82:01:63:93:da:
1f:77:27:a6:99:5e:7d:db:05:5c:e9:91:40:2a:1d:
55:8e:a6:52:b8:12:38:75:de:f8:6f:46:7e:0a:9a:
fd:b6:3e:9b:8d:d1:62:7b:2a:9a:16:f9:cf:f8:34:
be:75:00:02:f6:87:85:c6:23:e2:6b:d5:b7:c5:02:
59:20:af:49:82:fa:01:34:97:fd:90:ea:50:71:8f:
2b:14:66:a4:22:0d:c3:61:bc:a2:1d:95:36:e3:0d:
21:5b:b3:1d:f5:0b:19:8f:1d:5b:94:c8:31:f1:0b:
ae:9a:10:e1:a3:f3:6b:e9:6e:a3:56:58:c4:96:6b:
91:cd:04:7a:c3:78:83:32:4a:6f:0e:9c:aa:14:0b:
b3:e6:fe:0b:d7:72:fb:8f:93:cb:25:33:e4:a1:bf:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:35:E0:5A:65:E2:70:C0:C9:98:83:23:48:17:00:43:96:49:66:FB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92EB9A4A877A11EE98B22A56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.151.0/24
Signature Algorithm: sha256WithRSAEncryption
59:0e:c9:a8:f8:3a:77:98:eb:b1:ca:68:60:b5:2c:97:da:b7:
14:79:e4:bc:8a:ba:52:b6:ef:e1:0d:52:a5:22:74:4a:d4:01:
32:a4:45:4f:de:c3:c9:8d:56:92:78:47:2f:a3:b9:6a:09:b7:
03:1d:fa:6d:97:b5:40:ff:9b:8a:55:fe:f3:b0:4c:a7:16:ad:
b6:3a:dd:08:48:21:00:41:7c:f2:a5:da:e2:62:e9:0d:b0:05:
c2:b2:1f:4c:f5:cc:e3:1b:a2:50:0a:ff:d0:15:f5:ea:1c:34:
d1:7f:34:45:ce:10:0b:67:87:bb:5d:3c:95:14:77:96:46:5e:
b8:65:f1:24:09:c9:b5:09:71:42:68:25:fc:b3:0e:46:c4:79:
50:45:a2:10:fd:7f:fa:52:6b:01:39:04:a4:39:1e:81:76:d2:
45:93:61:e1:da:53:a4:b3:ec:dc:f4:25:29:e3:7d:24:5d:e0:
32:40:ce:06:42:a6:ca:97:b8:93:8a:60:90:b4:45:d7:67:8f:
82:e6:2b:be:b1:25:6a:3a:5c:4c:33:36:e2:bc:fd:d0:39:a1:
64:e1:37:39:81:d7:5a:6e:23:90:6e:04:61:f3:54:81:cb:f3:
e6:45:9b:a4:72:2d:c1:c0:a0:bd:c2:33:29:c2:8d:aa:a3:b6:
b7:a2:4a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 07:42:42 2023 by rpki-client on console-ams.rpki-client.org