Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B7860AB427E411EB90C18433C4F9AE02.roa
File: B7860AB427E411EB90C18433C4F9AE02.roa (raw, json)
Hash identifier: j2yzeqg6QaxtRXV3egW9N+6P2Amp4Bl3m7WqMoJak7Y=
Subject key identifier: D9:CF:48:7D:84:57:B9:9E:99:DA:7B:AD:CC:60:9C:77:6D:AE:0E:C3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 799E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B7860AB427E411EB90C18433C4F9AE02.roa
Signing time: Mon 04 Sep 2023 12:29:26 +0000
ROA not before: Mon 04 Sep 2023 12:29:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135208
IP address blocks: 43.250.254.0/23 maxlen: 24
103.88.57.0/24 maxlen: 24
103.119.199.0/24 maxlen: 24
103.131.60.0/24 maxlen: 24
103.148.170.0/23 maxlen: 24
103.163.15.0/24 maxlen: 24
103.168.72.0/23 maxlen: 24
103.170.70.0/23 maxlen: 24
103.204.94.0/23 maxlen: 24
103.205.244.0/23 maxlen: 24
103.206.48.0/23 maxlen: 24
2400:a620::/32 maxlen: 32
2400:a620::/48 maxlen: 48
2400:a620:1::/48 maxlen: 48
2400:a620:2::/48 maxlen: 48
2400:a620:3::/48 maxlen: 48
2400:a620:4::/48 maxlen: 48
2400:a620:5::/48 maxlen: 48
2400:a620:6::/48 maxlen: 48
2400:a620:7::/48 maxlen: 48
2400:a620:8::/48 maxlen: 48
2400:a620:9::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31134 (0x799e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 4 12:29:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64f5cda5-73ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:11:b4:d7:15:fb:4c:52:76:06:95:47:1b:
34:20:3a:86:83:47:c3:97:32:69:73:55:69:e0:d3:
7f:54:93:3b:b9:34:63:f5:bf:1a:73:63:e3:90:af:
90:ba:2d:e5:d3:6f:0c:cc:43:3b:2a:c3:1f:0b:96:
9e:35:9b:03:f7:d6:cc:47:a0:f3:d4:05:5e:9c:cf:
1a:ae:71:ca:31:75:1d:3e:ae:1c:4b:0c:54:58:c7:
bd:8f:83:0b:de:da:12:f8:31:fb:7a:64:68:4c:f3:
ff:83:19:db:70:48:e4:8c:b4:14:45:f5:d1:ca:50:
bc:25:7c:84:d7:c7:bc:a6:b1:c2:30:4f:ff:9f:87:
d1:74:b3:49:f1:7a:37:5a:53:0b:7b:96:0a:19:4c:
48:c5:eb:20:e4:9c:35:2c:c6:16:49:34:7e:51:f0:
35:7a:0a:d8:8d:89:be:52:41:1e:56:b7:9c:ac:6b:
cd:76:85:d4:e5:ea:84:0f:6d:c5:4d:1f:7b:53:55:
15:02:9b:47:46:26:b5:27:96:60:18:50:02:cd:8b:
84:a4:64:8a:cb:eb:07:8b:78:aa:85:9c:53:9c:4f:
3e:9b:a6:79:23:bb:54:ba:b6:86:23:19:4d:42:30:
04:1f:f3:92:02:c1:a4:b2:cc:26:9f:32:0a:e4:52:
18:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CF:48:7D:84:57:B9:9E:99:DA:7B:AD:CC:60:9C:77:6D:AE:0E:C3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B7860AB427E411EB90C18433C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.254.0/23
103.88.57.0/24
103.119.199.0/24
103.131.60.0/24
103.148.170.0/23
103.163.15.0/24
103.168.72.0/23
103.170.70.0/23
103.204.94.0/23
103.205.244.0/23
103.206.48.0/23
IPv6:
2400:a620::/32
Signature Algorithm: sha256WithRSAEncryption
ac:4d:09:31:a2:4b:ff:90:b7:52:4c:92:d1:4c:15:51:51:b5:
bb:0e:49:2d:f0:e4:31:a7:3b:d6:de:a4:c2:0a:11:f9:fe:62:
cc:9c:25:43:fb:96:7d:e3:7f:09:a5:1a:f4:08:64:c0:fb:61:
72:3d:c5:10:38:18:96:59:c3:f9:ab:46:37:c1:a6:3c:b1:5a:
08:13:20:da:19:c0:41:e9:a0:b7:52:36:c1:56:55:83:c1:b9:
fa:15:a8:0c:49:ec:52:d1:39:dc:36:27:2a:26:dc:dd:c4:4e:
c3:a0:6e:df:7a:00:61:ee:36:5e:f7:5e:29:9d:c4:90:ad:ad:
72:a2:d6:ec:5d:1b:c6:5e:ef:f7:c9:9f:8a:da:96:03:30:f7:
e0:41:42:cb:18:19:20:c6:76:35:f9:e3:2b:f3:1b:c8:f1:99:
31:7b:08:13:eb:2a:ac:69:e7:12:e8:b3:1e:95:38:1d:48:b6:
17:59:0e:20:a5:18:f3:ca:c6:db:8c:3b:fc:b4:aa:cb:d8:9f:
7f:8b:94:38:69:4b:7b:41:bd:55:44:4e:f8:54:ec:76:47:ba:
2b:05:83:28:72:85:a5:4c:13:69:af:09:32:27:4f:92:33:57:
be:c6:73:b9:d6:39:a5:92:06:97:15:24:cc:54:dd:87:8d:27:
a4:e8:9b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 06:08:42 2023 by rpki-client on console-ams.rpki-client.org