Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A86D4E208E4011ECB9A53B6DC4F9AE02.roa
File: A86D4E208E4011ECB9A53B6DC4F9AE02.roa (raw, json)
Hash identifier: IB73H/+MsPIbOTQPQlXrQfSt7OjqrzvK3FOOYGJssiY=
Subject key identifier: F6:9A:30:88:22:D0:67:3D:71:CE:35:05:D3:AC:8C:08:3A:A0:B4:4F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6A88
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A86D4E208E4011ECB9A53B6DC4F9AE02.roa
Signing time: Wed 10 May 2023 16:15:14 +0000
ROA not before: Wed 10 May 2023 16:15:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133591
IP address blocks: 103.181.6.0/24 maxlen: 24
103.181.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27272 (0x6a88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:15:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc312-cd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:2f:d4:44:1d:7b:ee:2d:ba:f9:4e:9a:7d:
08:07:44:ee:75:14:69:0b:53:e1:a5:3e:8d:1e:e9:
e5:99:92:1b:be:82:57:dc:f8:6f:97:7c:7f:d7:8d:
00:e8:89:26:bb:c0:fc:82:da:6e:8c:d6:b1:ab:fc:
dc:71:9d:3e:b2:91:93:6b:b9:38:c1:21:6e:5f:8d:
6b:42:e5:97:2b:39:6f:80:20:42:49:75:69:5f:fc:
05:46:43:de:8d:e0:11:e7:c4:88:44:cb:b6:20:ca:
3b:b8:67:60:dc:e1:d6:77:f9:68:1d:a0:17:7f:95:
ce:c2:40:07:dc:02:9f:13:7b:a0:1d:0b:8f:ad:0b:
99:b7:76:19:3f:f6:2b:46:17:1a:d3:08:fc:49:ec:
e8:d2:db:09:af:e3:0d:48:bd:38:f1:c6:11:ef:4d:
49:42:74:ef:f3:ac:dd:6b:87:be:d3:3b:ba:df:67:
2b:1f:0a:f3:f8:43:f5:3a:0a:b2:1f:72:7b:bd:b7:
99:d2:6e:3b:5a:02:de:b0:10:4e:75:95:16:f3:67:
07:47:44:63:2d:13:97:e8:f3:c0:fc:19:10:a3:f7:
04:8f:8f:94:69:ae:3e:6b:d2:ec:2b:db:53:43:b5:
1b:a1:31:e5:7d:ea:4b:78:10:5d:19:22:3a:40:25:
29:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9A:30:88:22:D0:67:3D:71:CE:35:05:D3:AC:8C:08:3A:A0:B4:4F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A86D4E208E4011ECB9A53B6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.6.0/23
Signature Algorithm: sha256WithRSAEncryption
14:85:a7:8a:d5:a8:85:f3:a4:01:69:a1:57:7c:76:4a:5b:f5:
de:a3:92:47:7d:32:88:6b:43:c3:72:ab:3d:f9:19:60:51:70:
8c:fe:d4:3f:f0:20:3e:23:76:9a:7a:a9:43:c3:fe:9f:34:79:
de:00:a6:41:ad:c1:9c:15:38:37:9e:e6:25:3d:37:22:e8:4e:
3f:99:ab:03:2c:37:ef:44:f2:21:69:52:87:81:a1:bb:37:78:
ec:b9:39:54:dc:1f:87:9a:83:45:63:a0:28:33:4f:0a:09:31:
6c:5d:ee:b8:23:20:d6:2c:59:39:12:2a:c7:7f:99:f6:6b:07:
41:6d:f8:01:da:41:a0:5f:66:87:e6:2a:64:6f:87:a9:6f:3c:
c0:a5:e2:e0:fc:c4:58:10:6f:73:e5:cf:a3:03:12:c2:34:1a:
74:f1:00:7a:22:69:2e:90:cb:c8:9f:cd:94:1a:24:d7:ce:5a:
d0:67:80:8d:c9:e8:37:c4:f3:a3:24:b3:8a:b8:e1:84:fa:6d:
a3:c8:8f:ad:f1:8a:7b:26:29:07:e0:61:2f:d3:d1:bb:d9:bc:
fe:30:a3:e4:36:3a:67:90:73:6b:6f:89:95:0c:13:46:60:b7:
b7:c0:af:a6:c4:f9:6d:10:97:d4:a5:ef:a3:bf:88:be:53:04:
64:27:78:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 05:58:46 2023 by rpki-client on console-ams.rpki-client.org