Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B942C75048C211EE8A9A3161C4F9AE02.roa
File: B942C75048C211EE8A9A3161C4F9AE02.roa (raw, json)
Hash identifier: NtWp63AHbiC5zFIKNIZb3VcnAK+vEPkcpeW+A1xDmYs=
Subject key identifier: E2:63:4E:6B:46:41:0C:CC:74:22:B5:B1:7A:AA:C8:E8:81:D4:44:78
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7934
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B942C75048C211EE8A9A3161C4F9AE02.roa
Signing time: Fri 01 Sep 2023 12:26:07 +0000
ROA not before: Fri 01 Sep 2023 12:26:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132930
IP address blocks: 103.179.100.0/23 maxlen: 24
103.180.110.0/24 maxlen: 24
103.180.111.0/24 maxlen: 24
103.180.176.0/24 maxlen: 24
103.180.177.0/24 maxlen: 24
103.181.198.0/23 maxlen: 24
103.183.216.0/24 maxlen: 24
103.183.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31028 (0x7934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 1 12:26:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64f1d85e-0221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:07:a8:3b:7a:72:76:20:b6:18:ae:da:88:57:
47:ec:cf:3b:c6:63:dd:fa:7e:f4:26:88:ff:50:22:
98:a6:be:4f:a9:e0:c5:98:32:89:cd:90:1f:8e:eb:
f0:3a:b0:82:60:26:82:4d:45:f5:a1:e1:1e:14:46:
c9:a5:2c:18:26:14:63:6a:dd:6a:e1:ee:f7:53:cf:
52:ba:13:8d:2e:f9:3f:14:4e:ae:4d:8d:2c:09:e3:
63:14:48:cc:1a:5e:8a:0f:bb:85:53:1d:96:5c:11:
37:8f:55:d6:89:11:48:1c:4a:5a:e1:1e:25:35:64:
04:64:12:61:6c:c7:32:6d:ca:a1:9d:77:12:39:20:
e2:1c:b3:b0:bc:97:95:b9:6e:47:28:d0:6c:cc:ff:
c5:7b:16:13:15:53:8a:9a:4a:4b:00:9d:36:fb:6a:
b9:ed:85:9a:0d:27:bc:b7:fd:b9:5c:a2:d4:6d:48:
b5:b9:a8:4c:e6:dd:6b:a9:bb:d9:2f:c5:6b:45:b0:
3f:89:b6:49:24:6c:18:21:0d:de:eb:ef:8b:9e:80:
6e:32:33:d9:cc:09:be:b0:87:0a:36:d7:0f:7b:30:
4c:2a:6c:2b:da:57:fe:84:ac:46:d9:dc:49:a9:c8:
34:2e:a2:71:47:8a:e1:7b:cf:3a:e3:b8:d2:10:19:
01:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:63:4E:6B:46:41:0C:CC:74:22:B5:B1:7A:AA:C8:E8:81:D4:44:78
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B942C75048C211EE8A9A3161C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.100.0/23
103.180.110.0/23
103.180.176.0/23
103.181.198.0/23
103.183.216.0/23
Signature Algorithm: sha256WithRSAEncryption
96:ed:9e:d9:27:a6:41:aa:ef:b8:7c:8b:db:a0:51:7d:f4:a1:
70:96:f8:6b:30:65:9c:bd:59:70:6d:16:4e:51:a5:f2:f5:5b:
2d:7a:74:58:a2:38:4e:9b:3f:b5:25:47:59:89:cd:78:26:e3:
01:b7:9c:aa:61:c3:78:d6:81:2e:79:67:7f:09:81:99:31:e6:
27:2c:cf:65:dc:91:d1:6f:4e:46:aa:0e:7c:bd:48:05:50:6d:
53:c0:82:b2:57:f3:1b:ac:e2:79:1a:db:9d:53:e4:a8:d5:15:
25:62:50:fe:a2:c0:52:63:24:79:62:9c:25:ea:4d:2a:78:a9:
78:e0:b1:d3:a0:cc:b8:2f:4f:47:cf:87:65:7d:f8:8e:18:b6:
8b:4c:5b:1f:ae:5f:cc:0e:e1:43:20:9b:9e:bc:40:1e:92:b3:
25:d9:14:22:73:68:ff:46:41:d4:d1:93:31:b8:74:b7:a3:67:
7e:7f:46:81:18:00:84:9d:74:79:ca:35:f9:a7:2d:0b:62:61:
01:45:23:7c:8e:64:0a:7d:b1:ac:b6:97:89:38:f4:f2:e4:e2:
75:6e:7a:c3:59:a5:78:47:ae:b0:0f:d3:3f:49:ea:a2:46:cc:
23:c6:48:70:c3:c0:a1:51:f8:7f:e5:a8:e9:f3:bc:3f:8b:0c:
8f:f4:f3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 13:40:11 2023 by rpki-client on console-ams.rpki-client.org