Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B606A3A6E8DF11EDB2E74080C4F9AE02.roa
File: B606A3A6E8DF11EDB2E74080C4F9AE02.roa (raw, json)
Hash identifier: bFoZdmpOuBPE8ioOD1m5eBHHAbTT48Aj6g1wyGg9M6M=
Subject key identifier: 00:84:BD:F0:35:7B:3E:93:60:F9:3A:18:BA:72:49:1B:5A:BF:4E:FF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7450
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B606A3A6E8DF11EDB2E74080C4F9AE02.roa
Signing time: Wed 21 Jun 2023 12:52:05 +0000
ROA not before: Wed 21 Jun 2023 12:52:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137163
IP address blocks: 45.248.3.0/24 maxlen: 24
103.81.24.0/23 maxlen: 24
103.81.26.0/23 maxlen: 24
103.189.124.0/23 maxlen: 24
2400:eaa0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 10 Jan 2024 11:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29776 (0x7450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 21 12:52:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6492f274-7c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:81:d1:33:28:1c:c8:31:68:b4:e1:ec:ef:87:
31:d0:08:b5:17:a6:d8:c8:69:e5:18:25:a1:c8:a0:
2c:ca:90:f1:a2:0e:c2:2b:72:e1:e5:22:4d:07:7b:
40:69:cb:b4:46:47:28:c0:c5:74:34:e7:9a:e3:2b:
39:49:1b:3b:ae:e1:24:18:6c:35:43:f5:2a:65:32:
78:c3:16:42:aa:f0:f0:d5:dc:51:73:83:72:0d:51:
ed:2b:b0:3c:ec:c7:16:d2:31:f5:67:f9:67:c8:47:
a6:da:82:77:c8:4e:71:58:7a:96:ea:77:0b:32:14:
e9:cb:1c:39:0d:66:c5:59:fa:a0:19:b3:40:7c:d7:
79:2b:72:63:43:9d:31:9a:be:7f:e9:85:dc:f5:a1:
59:03:3b:d6:8f:89:9e:31:bc:7d:4e:8c:5b:71:9a:
f1:97:75:40:20:b0:cc:da:8e:43:98:83:55:a7:f0:
7d:73:5f:a3:e7:28:47:fe:68:49:a7:6c:7b:1f:04:
8b:df:9d:b4:61:ff:97:50:ca:54:6a:8c:ee:c5:76:
36:3f:58:a9:9e:a3:57:3a:f7:94:7b:1d:ac:13:36:
2a:05:7b:9d:a7:17:0f:af:52:bd:ad:6f:ef:2e:f5:
34:ff:78:7d:6b:b0:08:69:52:40:3d:f2:7c:4f:53:
77:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:84:BD:F0:35:7B:3E:93:60:F9:3A:18:BA:72:49:1B:5A:BF:4E:FF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B606A3A6E8DF11EDB2E74080C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.3.0/24
103.81.24.0/22
103.189.124.0/23
IPv6:
2400:eaa0::/32
Signature Algorithm: sha256WithRSAEncryption
28:c8:58:a9:7a:6b:6f:08:1c:62:24:e8:f8:5e:6c:2b:21:7b:
61:b1:17:01:7e:b0:61:d7:1f:4a:3e:46:dc:75:bd:1a:92:b9:
35:59:57:72:7b:8a:97:9b:e7:af:07:0d:74:ee:86:7c:36:78:
7a:33:f3:b3:f5:cd:21:a7:0c:e8:63:3d:0f:a5:65:a1:3f:31:
cc:a5:30:a4:88:9d:1f:b9:2c:7e:50:b5:e1:b2:60:49:11:5e:
a1:02:be:04:18:03:6a:02:b9:dc:cc:9a:38:62:db:4d:d6:94:
5d:c8:ef:a3:60:e1:89:1a:2a:ed:23:4d:45:b7:03:12:14:46:
38:da:74:c3:e1:bc:dc:21:81:7e:67:29:a2:b2:40:40:73:9a:
0b:73:27:61:d6:b3:6c:ce:86:9f:c1:67:d4:98:a0:d2:fa:f2:
83:ae:4b:08:72:91:46:df:56:5f:60:42:de:2b:68:cc:7a:1a:
00:77:ad:a2:c8:cd:47:ec:42:81:e9:27:da:53:a2:9d:3d:d2:
29:ea:7a:36:04:88:2e:ea:80:43:f6:83:bc:3f:9b:09:bb:bb:
7c:6c:a1:fe:35:97:3f:1c:c5:04:39:b7:1e:46:db:53:dd:1c:
07:88:c2:bc:44:22:82:28:87:e7:a0:2b:6b:28:ce:08:be:9b:
d6:3f:df:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 16:13:22 2024 by rpki-client on console-fra.rpki-client.org