Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BB1BEB009D6E11EEAB32FA62C4F9AE02.roa
File: BB1BEB009D6E11EEAB32FA62C4F9AE02.roa (raw, json)
Hash identifier: 7/2biQYN5MiqfvW3nfYVKoy5v44wPlxWbaN93mFuTaU=
Subject key identifier: 21:F3:64:95:63:FF:72:06:A2:82:02:1D:41:68:C9:A3:76:20:7E:A3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8013
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BB1BEB009D6E11EEAB32FA62C4F9AE02.roa
Signing time: Mon 18 Dec 2023 06:29:00 +0000
ROA not before: Mon 18 Dec 2023 06:29:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137651
IP address blocks: 103.124.10.0/24 maxlen: 24
103.124.11.0/24 maxlen: 24
103.148.1.0/24 maxlen: 24
103.152.114.0/24 maxlen: 24
103.176.70.0/24 maxlen: 24
2001:df3:f080::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32787 (0x8013)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 18 06:29:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=657fe6ac-c763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:9c:e8:07:22:25:bb:e8:89:c2:a0:c0:c0:
de:e1:2b:ba:2b:33:e1:eb:ed:de:44:1b:32:13:6f:
05:91:6c:3e:54:83:0d:50:06:ef:8d:03:d9:56:37:
e2:67:ef:f3:90:15:b3:02:ca:ff:06:e7:af:14:a6:
2e:6b:3f:1c:68:8a:e5:68:09:f5:64:bf:df:08:c5:
c0:7e:42:12:f3:81:a5:3d:be:1e:e6:43:3c:4a:3a:
6c:8c:ef:54:c6:c8:33:48:b0:4e:df:48:3e:be:e8:
90:97:92:6e:22:3a:5c:80:43:54:7a:5a:91:2d:0e:
6a:88:27:da:53:83:68:63:42:2f:9e:96:9c:01:f1:
d6:89:45:8e:73:fe:81:e8:c9:02:7f:32:29:6a:02:
5e:26:05:0e:55:52:f9:14:c2:1e:c6:2d:56:59:f2:
ef:0e:a8:3d:40:d9:1c:b5:5c:43:9d:42:1b:ab:d2:
f6:ac:19:cd:63:c7:15:32:f4:2b:f1:f2:e4:2a:83:
d9:51:50:58:f2:fd:06:6d:81:d7:ee:cf:cb:e4:8d:
d4:7b:bc:70:35:bb:fd:af:e4:45:de:7c:b6:30:df:
e9:be:ef:cf:4a:8a:39:57:4e:72:70:9d:b0:76:47:
47:e3:00:77:97:cc:9e:0c:1c:3f:59:c6:35:16:ed:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F3:64:95:63:FF:72:06:A2:82:02:1D:41:68:C9:A3:76:20:7E:A3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BB1BEB009D6E11EEAB32FA62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.10.0/23
103.148.1.0/24
103.152.114.0/24
103.176.70.0/24
IPv6:
2001:df3:f080::/48
Signature Algorithm: sha256WithRSAEncryption
11:f7:37:94:d3:df:d2:44:60:ea:cd:a3:4a:0d:33:ea:24:55:
31:00:a6:23:d4:ba:0f:8d:76:01:63:76:37:32:09:30:19:37:
8c:48:97:bc:16:40:3a:3f:46:2b:76:0a:a7:5f:c4:f9:1a:06:
27:98:bf:05:ff:e6:56:78:04:cf:76:fe:3c:4b:76:42:65:4a:
a3:90:a8:16:fa:cf:dc:82:0c:0c:5b:a7:1e:64:b0:3a:eb:04:
64:fc:7f:b4:ad:79:a8:ec:ed:01:1f:8c:61:47:fd:e6:2e:0e:
dd:b0:2f:8d:b6:cb:e1:fc:45:6c:9d:55:d5:b9:69:5f:35:36:
26:01:6c:46:12:1e:67:90:3d:7b:6d:d6:68:82:6b:26:e5:a0:
bd:ff:f1:4b:f8:ed:cf:32:6c:b9:e6:7e:f1:5e:75:a5:2c:c9:
3f:56:43:83:d0:ac:24:9b:5b:b2:4c:98:b4:b9:a1:25:6f:1a:
92:b4:ae:1a:8a:fa:b6:85:4c:ff:67:2a:01:2b:c7:cb:91:6b:
f9:c2:3a:e8:37:3d:c8:5e:e5:8e:c7:3e:9e:9f:0d:b6:f6:99:
99:c4:a6:41:84:14:d7:59:a9:76:ce:44:9d:17:2e:a0:5a:83:
57:97:c4:45:8f:88:cd:9a:6a:27:f9:1f:98:4d:27:a4:f3:46:
e4:c2:16:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 06:31:11 2023 by rpki-client on console-fra.rpki-client.org