Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99112F40260711EE9F824279C4F9AE02.roa
File: 99112F40260711EE9F824279C4F9AE02.roa (raw, json)
Hash identifier: CHxufLRbsxmw9EZmEsXYQlzDDPRZeiRF1bKQrfXDtAM=
Subject key identifier: CB:67:92:C1:D9:10:72:6D:47:66:01:FA:52:19:8B:EB:62:E3:B3:F7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 79D1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99112F40260711EE9F824279C4F9AE02.roa
Signing time: Wed 06 Sep 2023 11:15:16 +0000
ROA not before: Wed 06 Sep 2023 11:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137651
IP address blocks: 103.124.10.0/23 maxlen: 23
103.124.10.0/24 maxlen: 24
103.124.11.0/24 maxlen: 24
103.148.1.0/24 maxlen: 24
103.152.114.0/24 maxlen: 24
103.176.70.0/24 maxlen: 24
2001:df3:f080::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31185 (0x79d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 6 11:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64f85f44-7e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:d2:2d:ed:c2:1e:be:04:14:f9:85:d8:67:
21:7f:5c:77:b3:fe:fc:ae:37:d4:51:25:33:8d:06:
b7:e0:f1:a7:e9:32:e5:f3:cc:d9:76:5b:af:88:28:
69:83:ea:ab:dd:8e:da:49:66:0b:89:0b:00:14:86:
1f:14:a6:41:05:7a:08:4d:c5:fc:6e:96:14:f2:a8:
70:e3:5a:b2:7c:b3:59:52:ff:80:33:d6:20:67:fa:
f3:87:94:91:ee:28:fb:7b:92:b9:d6:46:e6:88:a2:
4b:3c:19:2f:68:3b:8c:c0:67:4d:99:e0:c8:72:ea:
cd:94:3c:08:d6:aa:9d:4a:eb:a5:35:6b:2f:24:9d:
31:b2:5d:63:46:9b:ad:e8:3d:ab:f0:94:3c:81:0a:
18:39:7a:ef:93:cb:0d:35:76:8a:52:c3:a7:8c:da:
da:64:24:32:7e:f0:0c:78:d2:63:2e:a3:d8:3d:a4:
52:53:00:6a:f1:52:6d:fb:d8:b4:33:6e:82:67:e4:
5a:75:22:8e:8c:3c:b5:d6:df:11:ca:d2:cd:02:4a:
6a:43:73:96:a1:2e:7b:dd:84:6b:af:37:1c:2c:c0:
7a:12:46:57:d4:65:40:ec:4a:23:65:53:4e:5d:75:
1d:31:77:78:f9:0f:e6:63:8c:f8:41:4f:1c:b2:90:
e7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:67:92:C1:D9:10:72:6D:47:66:01:FA:52:19:8B:EB:62:E3:B3:F7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99112F40260711EE9F824279C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.10.0/23
103.148.1.0/24
103.152.114.0/24
103.176.70.0/24
IPv6:
2001:df3:f080::/48
Signature Algorithm: sha256WithRSAEncryption
4d:4d:e2:d0:7d:95:a7:fc:c1:66:e1:52:66:a0:4a:87:4a:0a:
1e:f5:37:f2:1f:1d:31:57:06:a4:a3:ea:6b:35:c2:85:d9:d4:
97:61:bf:b5:7a:68:7f:14:b7:db:e4:a3:83:1a:3e:ef:db:57:
1b:c1:75:eb:5a:3d:b9:87:aa:61:44:ff:e3:08:2f:98:c5:bc:
ac:10:9c:0b:58:25:5b:fe:4f:11:81:e1:4f:ff:ec:dc:94:06:
a2:92:cd:9a:bc:06:c6:11:80:30:7b:6d:51:2d:6b:19:2e:c6:
26:cf:eb:94:77:be:fc:ab:0f:4e:7f:b0:59:a4:dc:37:b3:a1:
5f:70:2d:fb:c3:0c:6c:d8:e5:eb:94:f4:fe:d6:2c:ea:f0:69:
b2:96:79:4c:21:d8:61:23:18:5e:79:70:1e:bc:fe:01:ee:d5:
b8:24:f3:22:65:4e:86:ee:c5:97:92:09:34:09:4a:c5:cd:31:
6b:27:5d:a5:1d:2c:0c:07:22:6d:9e:e3:e1:c1:34:a1:5f:5d:
10:c3:73:02:68:25:4c:94:82:fe:be:00:8b:b0:75:c9:34:69:
fa:19:ca:7b:33:87:eb:78:21:ea:a0:0e:36:f6:7b:8e:eb:d7:
fb:76:29:4a:a1:d6:47:9f:0c:48:9f:ef:0a:98:bf:2a:0f:a8:
88:c9:6c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 07:33:31 2023 by rpki-client on console-fra.rpki-client.org