Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99791766197A11EE9AC48C2BC4F9AE02.roa
File: 99791766197A11EE9AC48C2BC4F9AE02.roa (raw, json)
Hash identifier: 7694K0wi/cdm4C8TDWzAomiuYOTPt6mWXDDIlEs7tPI=
Subject key identifier: 4D:5B:7E:7D:06:C8:DF:18:87:46:4E:EA:D4:CB:61:DD:8D:FB:D9:43
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 74C8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99791766197A11EE9AC48C2BC4F9AE02.roa
Signing time: Mon 03 Jul 2023 08:21:25 +0000
ROA not before: Mon 03 Jul 2023 08:21:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149570
IP address blocks: 103.186.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29896 (0x74c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 3 08:21:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64a28504-8bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:91:5f:51:2b:1e:3b:a7:83:b6:d1:d1:86:
7c:b3:03:cb:9f:ad:9d:17:14:a8:c3:43:40:92:14:
a8:4a:06:83:af:eb:f8:33:f9:e6:10:16:ad:cc:da:
4d:28:72:55:92:03:68:41:65:0a:8b:03:7d:1d:19:
32:81:dd:1e:9b:4c:0f:53:90:ac:ba:68:54:12:36:
25:dd:44:42:bb:49:89:1d:cc:ab:d8:a5:6f:b7:78:
8f:bb:2c:15:c4:cd:24:57:c8:1d:44:e6:51:44:53:
54:4a:e1:3d:11:4a:ce:13:7c:e8:11:e5:b0:72:91:
40:3a:b9:0a:9d:7f:7b:a8:8e:27:8f:89:04:9f:bd:
b4:66:4f:d5:d8:55:6c:72:4e:ec:18:98:c2:16:14:
cc:89:84:f5:d2:03:3c:0b:ed:a0:86:90:8f:9e:fe:
f2:bb:2e:da:7f:d3:50:69:1a:55:60:a2:a0:c6:b7:
e3:dd:1b:ab:89:8e:68:dc:39:78:39:bd:1d:b8:f6:
7b:b1:cb:cb:73:95:b8:6f:ab:d3:52:a0:7d:1e:d0:
f0:ce:e0:1d:ca:c5:69:a1:20:a8:2d:86:ff:00:a7:
88:e0:db:e4:0d:89:87:5c:1e:27:5e:25:7f:ee:4e:
12:9a:2f:1a:4b:68:f2:94:8f:05:5a:4a:78:6b:28:
e5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5B:7E:7D:06:C8:DF:18:87:46:4E:EA:D4:CB:61:DD:8D:FB:D9:43
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99791766197A11EE9AC48C2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.186.188.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:4a:c0:70:c5:9b:8d:7b:c9:6e:09:b0:ae:2f:d6:4e:12:6f:
f5:c1:c7:e0:a6:a8:f7:f0:65:fe:9e:0f:04:7f:a1:df:3d:f3:
e3:fb:35:d8:47:e6:ed:35:26:33:52:d2:a5:52:d7:20:88:68:
0d:e8:4d:63:37:f8:89:60:31:3c:12:a1:62:e5:99:31:ce:35:
98:8e:f7:90:ba:52:c0:13:e9:03:e1:16:8b:21:3a:78:40:e4:
ad:4a:1c:72:9f:12:80:25:bc:30:6c:9c:61:8e:28:2b:1d:65:
b9:0c:ab:4f:3a:b9:4a:19:18:44:fe:fd:d2:f6:d1:d5:55:62:
a7:02:65:8a:f4:77:ad:20:37:4d:71:93:82:b2:31:14:6d:4c:
32:ff:ba:d3:3d:af:2e:0b:39:57:12:46:11:a0:35:49:48:44:
59:e6:86:18:af:14:28:4b:78:2c:75:68:23:f8:5a:74:67:43:
cd:61:a0:bf:bd:50:6d:b0:ea:d9:74:9d:47:35:a7:1c:96:08:
0f:69:84:b9:56:ff:00:2c:99:b2:93:2c:ca:ba:1f:08:63:1e:
fe:d6:a2:f9:22:3e:22:96:e3:69:a6:0c:95:a2:84:b3:4d:43:
7a:ad:6e:f3:b9:6d:d7:4f:04:6a:57:d8:90:0e:02:0b:12:81:
5b:11:59:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 16:39:42 2023 by rpki-client on console-ams.rpki-client.org