Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B09097304B8511EDAC516A42C4F9AE02.roa
File: B09097304B8511EDAC516A42C4F9AE02.roa (raw, json)
Hash identifier: doXuKFesM8ZPCUPGxQKwZRpnBg/l0V9vZWPDbzY27J0=
Subject key identifier: AB:A1:60:F4:47:09:74:4F:57:41:DA:61:DD:AF:D3:F2:1C:D9:DA:B4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7332
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B09097304B8511EDAC516A42C4F9AE02.roa
Signing time: Fri 02 Jun 2023 09:22:08 +0000
ROA not before: Fri 02 Jun 2023 09:22:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136698
IP address blocks: 103.83.8.0/22 maxlen: 22
103.83.8.0/24 maxlen: 24
103.83.9.0/24 maxlen: 24
103.83.10.0/24 maxlen: 24
103.83.11.0/24 maxlen: 24
103.147.94.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29490 (0x7332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 2 09:22:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6479b4bf-c320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:1b:32:75:38:8d:a5:41:65:4d:f9:ff:8e:
37:5e:5b:80:31:00:ad:a6:e2:bb:39:a2:4d:6b:2b:
f2:82:e7:0a:a4:35:5e:a4:61:4a:e9:78:19:9d:5a:
de:7a:41:4b:57:6c:57:8e:a1:28:66:8a:63:93:d4:
c9:8c:16:ab:fe:94:68:15:a2:df:45:74:e0:fa:e8:
1d:a4:42:71:13:1e:95:b1:39:37:5b:9e:0a:a1:6f:
2f:34:f9:1a:42:e5:7f:b9:7c:8f:4e:c4:7e:76:5f:
66:52:4b:be:d0:98:5f:61:44:6a:68:64:6e:ea:7b:
9d:58:96:e1:47:d4:4f:fc:6e:88:54:ca:81:d3:82:
79:ed:67:37:3a:3a:ae:76:78:4c:6f:f5:e8:f4:60:
ba:76:bf:d7:01:0b:14:ed:9b:ab:09:af:fc:59:fe:
c5:61:87:81:ed:39:f7:f2:42:91:7c:7f:fa:0f:46:
c4:61:58:25:c2:d7:40:7c:46:85:4b:1f:4f:a1:70:
d1:cc:5a:67:93:97:0d:0d:52:a0:63:04:91:9e:73:
31:3c:61:fb:a9:c7:95:6a:1a:10:14:2d:9b:7d:c5:
a7:de:34:38:3d:a1:6b:99:5d:e0:63:ad:37:0f:b9:
7a:d0:70:d4:ad:c5:f2:c3:54:d9:c4:99:e2:5a:35:
4b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A1:60:F4:47:09:74:4F:57:41:DA:61:DD:AF:D3:F2:1C:D9:DA:B4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B09097304B8511EDAC516A42C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.8.0/22
103.147.94.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:e8:cf:98:9e:87:52:96:fd:e6:7c:75:9b:17:dc:a1:08:7f:
f6:f4:f4:83:fc:64:df:d5:84:ad:15:4b:62:f4:12:81:8f:1e:
89:7c:ae:de:92:6c:bc:2f:f4:83:48:93:ef:37:e1:21:9b:d7:
ce:a8:8e:8b:43:cc:15:b1:68:77:bf:02:d5:3b:26:6a:79:27:
86:77:06:e7:a9:2f:1c:fb:a7:3c:c2:da:b8:18:40:10:a2:81:
97:c2:16:a9:b3:c4:96:d2:3d:e0:c9:fd:18:9a:f0:9a:2b:53:
7b:64:23:91:2a:38:dd:07:47:61:01:2d:e2:0e:bd:02:c5:55:
b8:87:0c:36:fe:13:32:60:b9:60:f9:a4:a2:6a:66:ec:15:be:
26:e7:0e:49:7d:f2:7d:62:68:4d:8b:50:e1:32:80:bd:bc:cd:
17:20:40:7b:7e:bb:ab:0b:90:45:6f:13:90:a5:78:50:8d:7c:
08:32:22:3d:22:fe:88:79:06:ac:49:2b:0c:05:55:c3:83:f3:
4d:63:99:2f:55:80:5e:19:eb:7a:ce:70:6a:04:2e:54:4d:0c:
5b:46:25:d6:74:d7:06:68:aa:84:1a:59:04:7c:06:27:3d:8b:
01:ef:d8:e8:71:06:ae:c3:e5:be:7c:5d:6e:29:e4:16:21:36:
f8:b7:44:d2
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICczIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNjAyMDkyMjA4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDc5YjRiZi1jMzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxNgbMnU4jaVBZU35/443XluAMQCtpuK7OaJNayvygucKpDVepGFK6XgZnVre
ekFLV2xXjqEoZopjk9TJjBar/pRoFaLfRXTg+ugdpEJxEx6VsTk3W54KoW8vNPka
QuV/uXyPTsR+dl9mUku+0JhfYURqaGRu6nudWJbhR9RP/G6IVMqB04J57Wc3Ojqu
dnhMb/Xo9GC6dr/XAQsU7ZurCa/8Wf7FYYeB7Tn38kKRfH/6D0bEYVglwtdAfEaF
Sx9PoXDRzFpnk5cNDVKgYwSRnnMxPGH7qceVahoQFC2bfcWn3jQ4PaFrmV3gY603
D7l60HDUrcXyw1TZxJniWjVLfwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKuhYPRH
CXRPV0HaYd2v0/Ic2dq0MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjA5MDk3MzA0
Qjg1MTFFREFDNTE2QTQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnUwgDBAFnk14wDQYJKoZIhvcNAQELBQADggEBAKjoz5ie
h1KW/eZ8dZsX3KEIf/b09IP8ZN/VhK0VS2L0EoGPHol8rt6SbLwv9INIk+834SGb
186ojotDzBWxaHe/AtU7Jmp5J4Z3BuepLxz7pzzC2rgYQBCigZfCFqmzxJbSPeDJ
/Ria8JorU3tkI5EqON0HR2EBLeIOvQLFVbiHDDb+EzJguWD5pKJqZuwVvibnDkl9
8n1iaE2LUOEygL28zRcgQHt+u6sLkEVvE5CleFCNfAgyIj0i/oh5BqxJKwwFVcOD
801jmS9VgF4Z63rOcGoELlRNDFtGJdZ01wZoqoQaWQR8Bic9iwHv2OhxBq7D5b58
XW4p5BYhNvi3RNI=
-----END CERTIFICATE-----
Generated at Wed Nov 1 06:39:30 2023 by rpki-client on console-fra.rpki-client.org