Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/982060B2B17B11EC92E57138C4F9AE02.roa
File: 982060B2B17B11EC92E57138C4F9AE02.roa (raw, json)
Hash identifier: c6kXBxCf7vjSmpIuH/VKV+xUheE8rxlVpLoeKiLK1kk=
Subject key identifier: 42:9C:B4:41:C3:4E:E9:97:00:A7:AB:1B:6B:B9:90:80:73:7A:C2:80
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 729D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/982060B2B17B11EC92E57138C4F9AE02.roa
Signing time: Tue 23 May 2023 11:52:15 +0000
ROA not before: Tue 23 May 2023 11:52:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141514
IP address blocks: 103.160.126.0/23 maxlen: 24
103.170.214.0/23 maxlen: 24
103.173.240.0/23 maxlen: 24
103.175.134.0/24 maxlen: 24
103.175.135.0/24 maxlen: 24
103.175.190.0/23 maxlen: 24
103.177.82.0/23 maxlen: 24
103.177.112.0/23 maxlen: 24
103.177.204.0/23 maxlen: 24
103.178.122.0/23 maxlen: 24
103.178.126.0/23 maxlen: 24
103.181.112.0/24 maxlen: 24
103.181.113.0/24 maxlen: 24
103.183.204.0/23 maxlen: 24
103.183.228.0/23 maxlen: 24
103.184.104.0/23 maxlen: 24
103.184.154.0/23 maxlen: 24
103.185.234.0/23 maxlen: 24
103.186.54.0/23 maxlen: 24
103.187.228.0/23 maxlen: 24
2400:7f60::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29341 (0x729d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 23 11:52:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=646ca8ef-3976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:49:cf:6f:60:3a:ec:34:8a:50:e8:e8:4f:
98:e3:61:38:aa:e0:7b:aa:27:87:7d:ea:5a:b0:82:
4f:e9:52:b0:ee:81:13:8b:ee:c4:6a:e5:42:3a:0e:
90:d4:bd:f5:19:60:e7:74:ac:2f:43:e4:b6:1d:71:
19:57:57:ba:2f:e6:8e:b0:f9:b1:54:f8:00:be:b1:
c6:95:50:82:1d:68:36:79:1b:7d:dd:94:2a:56:5c:
4e:ca:12:8c:77:3c:6d:c3:1d:ab:68:2c:8a:71:16:
c5:f6:49:ce:18:66:0d:d7:e5:73:2a:94:63:3f:3f:
a4:b7:c2:cb:29:bf:01:77:0d:7f:53:74:8e:9e:85:
b7:69:38:77:1b:60:b2:21:8a:c1:e4:7a:c8:c6:c4:
0d:3a:24:c7:84:32:53:08:e7:f3:e6:28:29:d9:80:
bc:a5:2b:cb:5a:2c:01:9d:4c:52:fd:4f:b6:09:f3:
cd:1a:05:43:cc:e2:f5:a1:98:46:16:ee:d7:81:26:
3b:61:99:f7:04:5b:66:6d:d4:cd:86:e1:6e:62:af:
db:45:43:79:76:82:79:d4:5b:32:da:85:dc:6e:dc:
15:d9:72:b0:5c:05:c6:5d:13:10:ae:22:49:e5:73:
2f:19:6c:32:38:3f:f0:15:df:c3:b1:e0:d6:b6:85:
bb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9C:B4:41:C3:4E:E9:97:00:A7:AB:1B:6B:B9:90:80:73:7A:C2:80
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/982060B2B17B11EC92E57138C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.126.0/23
103.170.214.0/23
103.173.240.0/23
103.175.134.0/23
103.175.190.0/23
103.177.82.0/23
103.177.112.0/23
103.177.204.0/23
103.178.122.0/23
103.178.126.0/23
103.181.112.0/23
103.183.204.0/23
103.183.228.0/23
103.184.104.0/23
103.184.154.0/23
103.185.234.0/23
103.186.54.0/23
103.187.228.0/23
IPv6:
2400:7f60::/32
Signature Algorithm: sha256WithRSAEncryption
90:1c:a1:4c:b8:b6:a9:33:06:86:37:3c:05:75:27:1c:35:5b:
ca:34:23:94:20:59:f5:fc:72:59:28:56:8c:91:ee:28:b8:db:
76:37:53:d7:9a:e6:97:b0:a8:e6:42:08:f2:e7:a6:15:3f:28:
4c:82:85:59:01:e1:0d:ae:b0:5b:ea:a0:3b:8e:9f:48:6a:fc:
25:3f:99:06:55:38:89:51:f7:05:f8:f9:e7:e0:bb:9d:08:7e:
ce:96:f2:a6:d1:06:c6:e8:4e:a1:ee:df:c3:f9:32:da:43:fd:
72:15:89:7e:01:e4:fd:bb:f3:93:8c:14:65:02:bd:12:1f:fd:
d2:97:08:78:f6:c0:9f:5f:19:b3:91:04:7b:50:b9:b5:53:a6:
8f:67:69:ee:c9:96:25:bb:14:e3:44:40:bf:51:e5:89:96:ac:
9a:49:76:e2:0e:cf:c3:a1:7e:5a:a2:b9:7c:2a:f2:cb:c5:db:
0c:92:d0:36:8b:b1:24:2e:bf:c4:29:e0:76:12:93:b7:dc:15:
b1:9a:72:0d:ce:ba:ae:76:0b:f9:92:dc:d9:97:8a:7b:43:7d:
e2:4f:0b:a3:5c:b6:f5:0a:91:ce:df:7d:c8:f2:41:e8:72:54:
2a:04:c1:45:2b:23:76:28:76:ed:17:bb:7a:90:b9:9c:1f:d1:
e4:4d:aa:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-fra.rpki-client.org