Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA30DEEEA86E11EDABA1FA2AC4F9AE02.roa
File: BA30DEEEA86E11EDABA1FA2AC4F9AE02.roa (raw, json)
Hash identifier: 7vMFQVzBJM3ycJs79mkda72pAcrPyDQpYwD0a1QuX/U=
Subject key identifier: 32:52:7F:32:6D:5D:95:37:9A:0A:72:4D:35:AD:22:9D:C7:19:35:54
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 70D4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA30DEEEA86E11EDABA1FA2AC4F9AE02.roa
Signing time: Wed 10 May 2023 16:45:23 +0000
ROA not before: Wed 10 May 2023 16:45:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150061
IP address blocks: 103.191.202.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 12:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28884 (0x70d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:45:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bca23-01f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:1a:0b:dc:88:57:61:31:71:f3:6c:50:46:
96:5e:58:98:68:8b:12:cd:19:06:a5:2a:d5:95:ac:
d5:54:98:92:70:73:a1:97:d8:b0:af:90:e5:51:7e:
76:72:9d:84:64:30:33:e8:b8:2e:e7:51:0b:47:31:
8d:53:26:7a:b1:71:44:45:82:2d:e9:48:d6:5b:38:
a2:92:5f:c3:18:4c:38:d0:34:94:ec:ea:d9:2a:e7:
23:86:a4:2a:53:74:84:b3:a9:5e:88:de:cd:a1:a5:
f7:ef:b7:14:ed:44:78:05:62:2f:2a:e8:29:d4:f3:
ff:cb:16:1a:fe:00:eb:8e:e0:ec:e3:54:1d:eb:b4:
3e:c8:67:7e:5c:18:b8:bf:6d:27:8c:09:a0:50:fc:
16:e8:ad:4b:3a:dc:74:40:0b:96:3a:cb:4e:b4:54:
b3:8b:bf:a9:95:38:81:9f:fa:c7:a0:1c:ac:fe:51:
f3:a3:17:1c:ab:7c:9c:72:33:30:5d:14:17:09:d0:
f1:db:54:4d:18:0a:7a:ab:19:75:1a:f8:da:da:d5:
7e:1a:e0:db:9a:38:30:50:f9:6c:fd:82:b5:89:ad:
af:5f:9b:69:1e:d5:32:03:47:ec:6b:ba:1a:69:a5:
11:4d:a1:5f:f0:e8:9b:c5:e4:19:b3:00:b5:72:21:
63:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:52:7F:32:6D:5D:95:37:9A:0A:72:4D:35:AD:22:9D:C7:19:35:54
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA30DEEEA86E11EDABA1FA2AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.191.202.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:59:d5:48:ba:03:b2:53:7b:5f:27:94:9b:7f:5e:3c:22:26:
53:32:8f:5d:38:ad:88:c6:a6:5e:48:a7:4b:98:95:d9:4e:d9:
51:d9:8f:d0:48:79:9b:3f:58:ae:51:5d:43:bd:17:b8:94:6d:
52:76:6a:cd:22:64:29:1f:99:c4:86:b1:c7:d5:23:75:33:f1:
fb:45:f9:fe:db:0b:ce:d2:89:87:15:36:ae:d9:80:6e:90:eb:
d4:96:28:19:03:7d:fb:70:65:7b:1c:07:73:ea:5d:23:db:6c:
db:87:64:83:9f:5a:30:f9:76:9e:d7:14:13:e0:32:1c:b3:6d:
ae:21:1f:d1:34:6a:9b:22:40:0e:04:8b:ff:db:a9:d1:f7:fc:
2d:fb:10:26:2d:65:04:ab:68:98:8d:0c:7a:78:96:90:05:d3:
24:91:83:29:37:6d:a8:ba:db:48:58:05:64:5a:48:95:a7:b2:
c6:87:8a:1e:7f:23:90:50:c9:6e:50:d0:46:4d:db:b6:89:6c:
28:85:00:2b:6d:d5:c4:f5:d4:da:3f:b3:4c:b4:6b:d3:42:c2:
cd:e7:5e:c2:56:c3:68:9a:54:2f:33:77:26:0c:ce:6f:36:7f:
ef:31:51:67:15:52:5a:95:21:21:ab:fb:30:a5:67:6b:3a:d1:
81:2c:2e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 15:04:14 2024 by rpki-client on console-ams.rpki-client.org