Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B601DBC6B16111EBAB128083C4F9AE02.roa
File: B601DBC6B16111EBAB128083C4F9AE02.roa (raw, json)
Hash identifier: NrV3jEgLWjR/PWV1/PqRzI8MPiGq8nYmzjKgu9uHjPE=
Subject key identifier: 14:72:98:4C:45:14:BE:D7:E6:99:88:AF:4C:61:AE:45:6C:54:06:12
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6BDF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B601DBC6B16111EBAB128083C4F9AE02.roa
Signing time: Wed 10 May 2023 16:21:48 +0000
ROA not before: Wed 10 May 2023 16:21:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135725
IP address blocks: 103.109.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 10:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27615 (0x6bdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:21:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc49b-f7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:7d:cf:3a:bc:41:14:83:a2:25:eb:b1:4a:
08:05:20:52:1f:af:a7:b6:37:59:b0:eb:d1:14:64:
b3:91:7b:a8:28:ff:a3:1b:af:8c:61:47:75:c9:06:
6a:12:01:88:54:da:d4:c2:2c:1c:90:79:fc:c4:36:
49:e1:75:81:01:50:f5:a2:ce:07:4d:ef:21:98:aa:
e6:d3:12:f2:25:64:3d:cd:3b:5c:61:89:b4:8c:00:
73:98:f3:24:92:d8:5d:2e:4c:a7:80:ce:19:56:28:
19:4e:4e:47:3d:6e:66:3f:40:d0:2a:4f:ca:0a:f5:
79:8c:21:39:2f:82:7e:23:8b:4a:8e:c2:a2:0b:5c:
7f:6d:30:f6:d5:88:50:72:70:f1:f8:1a:fd:19:2f:
79:a9:44:5a:14:43:2d:1b:9b:8a:ac:0c:a0:59:1d:
84:31:ad:6d:2c:68:6f:a1:46:97:ed:1f:e5:c0:cb:
e7:86:8c:44:9b:0a:f0:94:f1:ec:9f:10:dc:8b:d9:
c1:61:9f:7f:9e:d6:6f:5d:17:f0:f7:d0:96:e4:20:
9c:a4:4c:72:cf:83:a3:b7:5a:6d:96:75:38:6e:e2:
42:72:68:76:2a:03:2c:2f:24:48:05:2d:3c:87:f0:
05:09:25:bb:44:c9:83:72:f4:ea:5a:44:56:da:f5:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:72:98:4C:45:14:BE:D7:E6:99:88:AF:4C:61:AE:45:6C:54:06:12
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B601DBC6B16111EBAB128083C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.72.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:90:e4:9e:6b:53:53:74:98:8b:51:35:4f:32:50:d3:2a:54:
c6:75:32:87:46:7e:2d:45:f5:9c:b6:60:a1:41:ef:05:87:6a:
88:cf:4c:4d:0b:e4:45:d6:12:de:9a:61:31:b8:17:43:70:6a:
92:27:12:4f:c0:e9:ff:7e:f9:c5:64:bd:ca:bc:f7:e8:13:e3:
9b:b4:75:20:cf:46:f8:89:2f:ef:f2:08:a5:db:63:de:76:20:
35:9b:fb:4e:86:7b:79:0e:d7:01:db:9d:fc:85:8a:c8:63:18:
55:86:cf:29:b4:1c:61:9a:35:0b:8b:75:28:77:3d:db:ae:41:
e2:99:39:e7:bf:c1:99:66:bc:63:96:cd:4f:8b:32:9c:01:21:
f6:56:d5:d5:ce:94:8d:7c:c7:ef:e6:0d:4d:d8:de:69:8c:a5:
14:70:e1:9e:bb:e5:d3:f5:cd:5e:70:41:2f:2d:bd:9c:8c:47:
86:4e:89:9f:3a:14:72:77:b8:22:79:54:29:22:cf:53:38:3c:
93:d9:ff:9a:1c:94:4d:c1:61:de:8d:06:bc:97:34:c3:ee:48:
4b:03:ed:70:f4:bb:4a:7a:0c:0c:45:09:24:47:4e:10:5d:57:
82:21:c6:17:84:0b:01:8b:bc:57:26:b1:cd:59:2d:64:be:cc:
a0:a3:80:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 16:02:58 2024 by rpki-client on console-fra.rpki-client.org