Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9D85814F45611EB8D61C95EC4F9AE02.roa
File: B9D85814F45611EB8D61C95EC4F9AE02.roa (raw, json)
Hash identifier: JYBMDI7LCzkP6JfTKJcRjPdU2za1RbgbCOXH1ZftIIQ=
Subject key identifier: 4D:1B:D7:45:49:69:E0:FB:0B:72:43:AD:E8:CC:2C:E3:EE:BF:54:CA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6E6C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9D85814F45611EB8D61C95EC4F9AE02.roa
Signing time: Wed 10 May 2023 16:33:58 +0000
ROA not before: Wed 10 May 2023 16:33:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141269
IP address blocks: 103.159.104.0/24 maxlen: 24
103.159.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28268 (0x6e6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:33:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc776-522c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:65:4b:93:56:6a:1d:86:c5:48:0d:58:eb:
d1:db:dc:e9:c7:a9:74:47:2e:a9:e9:32:e1:80:f0:
d2:45:c5:4e:e3:cd:f3:0a:01:f1:fd:1a:82:0e:8e:
2c:ff:3d:22:33:e1:ff:2c:ff:0d:96:7f:46:7e:a2:
79:56:14:c6:84:1e:3a:10:d8:13:69:56:3a:07:e3:
3d:6f:dc:0f:21:cc:7c:55:e2:82:0d:0b:01:fc:af:
68:cd:03:a2:f7:1f:10:6c:5a:5c:e6:ca:a2:69:bc:
0d:2a:3e:65:a2:91:5f:1c:60:82:dc:33:4e:99:34:
27:65:ef:fa:69:0f:dc:5f:df:51:6a:e5:86:1f:e2:
38:3c:2c:b7:7d:a1:fa:a6:e7:0c:ea:fe:5f:ec:6f:
6f:20:0c:86:bd:c7:90:1b:b5:4a:ab:c3:14:b8:44:
e2:09:fa:0f:e8:a3:34:45:0e:82:dc:50:35:6a:f3:
cb:6b:65:52:d3:33:51:65:fe:01:5d:70:15:9c:5f:
38:64:93:a6:2f:ba:ba:c8:fe:7c:11:e9:fc:3a:b4:
19:de:7a:d7:b0:fd:bb:a9:b3:cc:54:b4:a2:b1:2c:
eb:15:c2:ac:b3:24:90:28:f9:d1:ea:7e:ae:0a:dc:
37:dc:27:83:ff:a4:de:21:c1:b3:be:74:82:85:05:
7f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1B:D7:45:49:69:E0:FB:0B:72:43:AD:E8:CC:2C:E3:EE:BF:54:CA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9D85814F45611EB8D61C95EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.104.0/23
Signature Algorithm: sha256WithRSAEncryption
40:43:ef:73:93:eb:07:c9:93:1c:5c:7e:47:b1:59:41:d8:66:
cc:86:b4:0c:ce:7c:27:5f:1e:cd:3f:2b:ad:48:a6:8f:de:d6:
9a:80:28:0e:92:3c:2c:e2:20:00:b8:73:27:f0:dd:a1:68:a1:
58:dc:b2:90:29:ef:08:a1:f5:8d:7d:03:4d:63:0f:6d:b1:69:
6f:e4:6c:11:23:6f:55:b7:be:c6:f4:71:02:4f:c9:40:ba:c4:
da:b0:3a:0b:56:96:06:72:d4:67:65:5e:be:78:4c:d0:fe:f0:
df:e1:aa:b6:15:1d:f4:e5:80:55:1d:8d:41:93:77:ae:5c:87:
41:ce:98:06:2f:8e:63:6e:80:07:c0:c3:7e:7c:9a:95:3e:39:
b9:72:aa:4b:67:7f:2c:58:ef:0f:21:67:ac:7f:d1:51:e7:d6:
61:c7:33:19:71:37:a0:b3:ad:9a:ad:2b:09:a3:11:ec:66:9d:
1a:90:ed:4f:10:40:16:a0:9e:8b:dc:5f:c0:ba:cb:06:2a:d6:
28:72:8a:e5:74:5f:aa:1b:08:7c:bc:d0:f3:24:b3:da:fc:a3:
da:01:ce:3e:88:87:01:fd:8b:e8:08:2c:5a:f3:ed:2e:b9:f8:
26:1d:5d:b5:32:64:1e:f2:72:57:f5:b4:c6:59:04:2e:57:dd:
44:f1:0c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 08:40:58 2023 by rpki-client on console-fra.rpki-client.org