Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C30552A2453611ED80ACF941C4F9AE02.roa
File: C30552A2453611ED80ACF941C4F9AE02.roa (raw, json)
Hash identifier: 76x/Zp7g3qt+kZpHb8OrTxlzGD+OA1nW4BwGETSaVTg=
Subject key identifier: 2B:21:0A:55:5D:D5:0D:79:84:E4:67:97:74:EB:D2:CE:9D:01:B5:72
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 70BD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C30552A2453611ED80ACF941C4F9AE02.roa
Signing time: Wed 10 May 2023 16:44:57 +0000
ROA not before: Wed 10 May 2023 16:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150036
IP address blocks: 103.180.172.0/23 maxlen: 24
103.180.214.0/23 maxlen: 24
103.181.4.0/23 maxlen: 24
103.181.64.0/23 maxlen: 24
103.181.154.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28861 (0x70bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bca09-e4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:86:f7:ea:73:b6:55:09:ea:f9:37:bd:85:fc:
7b:9c:91:de:b3:ae:50:3e:22:15:f2:84:ce:16:e1:
e9:09:4a:19:2f:74:71:79:f3:15:66:31:aa:78:6e:
6c:2e:69:d2:c6:05:90:06:b0:71:9d:b1:d7:69:97:
42:e7:c6:22:3a:a9:83:f3:37:36:eb:05:e1:1e:9c:
ca:46:90:1e:6a:1c:9b:ac:7e:91:73:12:03:6a:72:
48:af:9f:d5:dd:c1:7d:2e:72:82:f4:eb:e3:db:f3:
c5:47:49:18:bf:85:64:95:60:a9:b9:36:56:6b:6b:
11:c1:69:d0:54:9c:e5:bd:d3:19:19:9c:89:ce:fe:
4e:06:64:1c:a4:68:de:78:3f:8a:2f:3a:8f:9d:86:
fb:d6:d8:b9:3b:aa:3d:c1:0e:ae:8e:22:3b:94:92:
1d:75:d3:ad:fc:b6:ec:21:50:89:45:bc:3e:3e:77:
3f:54:4f:e0:b1:e8:b3:22:dc:3a:9c:ad:09:89:72:
34:ed:1d:cb:a9:ec:36:ff:fb:c6:71:43:af:7c:3b:
51:eb:68:cc:d2:b6:5c:0a:b0:50:cc:58:1d:74:83:
6c:ff:6c:b7:a5:ed:83:f7:38:50:4b:5d:21:bb:24:
31:5f:76:c7:77:c2:10:91:3a:5d:d4:a4:a2:3d:33:
9a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:21:0A:55:5D:D5:0D:79:84:E4:67:97:74:EB:D2:CE:9D:01:B5:72
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C30552A2453611ED80ACF941C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.172.0/23
103.180.214.0/23
103.181.4.0/23
103.181.64.0/23
103.181.154.0/23
Signature Algorithm: sha256WithRSAEncryption
52:25:0d:4a:1f:a2:82:77:f7:1b:82:0c:9a:b3:b6:1a:36:a5:
b1:dd:1e:e2:d3:c0:02:cd:00:68:28:22:9d:24:ec:70:49:5f:
fb:df:18:94:3f:04:9b:81:86:c9:ab:53:14:85:b4:7e:1a:d5:
0c:39:cf:d5:a4:b5:b0:41:cd:4a:9f:ef:71:4a:0e:94:98:db:
4e:1f:90:a1:aa:a9:5a:ea:dd:1e:3d:4c:52:af:b6:60:24:12:
cc:60:34:4d:3b:83:b7:a3:ff:51:eb:27:9a:41:94:02:ed:e9:
7f:b3:25:8c:8f:37:56:00:0c:5c:06:e2:50:57:ce:7a:71:78:
dd:d7:a0:44:30:1d:4d:a1:77:f1:08:f2:0a:ff:56:b0:e6:92:
84:d0:8f:ef:78:a2:53:38:a8:97:9e:6e:df:7b:e7:e3:84:68:
d3:63:bd:7c:cd:99:e2:98:39:b9:24:f7:26:da:5a:13:be:9e:
2c:a8:d0:f2:14:57:ab:ee:68:6c:65:4b:4b:f0:8f:20:9d:7b:
85:08:01:03:72:94:b5:a8:68:b1:6d:06:bc:3e:b1:cf:97:72:
74:e8:1f:eb:d9:f9:f3:08:51:53:95:75:84:dc:ad:9c:33:f9:
18:b2:9e:98:88:e3:ec:07:c7:c1:4e:83:3f:77:81:d8:4e:5b:
ee:2d:0f:db
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICcL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTY0NDU3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViY2EwOS1lNGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlIb36nO2VQnq+Te9hfx7nJHes65QPiIV8oTOFuHpCUoZL3RxefMVZjGqeG5s
LmnSxgWQBrBxnbHXaZdC58YiOqmD8zc26wXhHpzKRpAeahybrH6RcxIDanJIr5/V
3cF9LnKC9Ovj2/PFR0kYv4VklWCpuTZWa2sRwWnQVJzlvdMZGZyJzv5OBmQcpGje
eD+KLzqPnYb71ti5O6o9wQ6ujiI7lJIdddOt/LbsIVCJRbw+Pnc/VE/gseizItw6
nK0JiXI07R3Lqew2//vGcUOvfDtR62jM0rZcCrBQzFgddINs/2y3pe2D9zhQS10h
uyQxX3bHd8IQkTpd1KSiPTOabQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFCshClVd
1Q15hORnl3Tr0s6dAbVyMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzMwNTUyQTI0
NTM2MTFFRDgwQUNGOTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E
KDAmMCQEAgABMB4DBAFntKwDBAFntNYDBAFntQQDBAFntUADBAFntZowDQYJKoZI
hvcNAQELBQADggEBAFIlDUofooJ39xuCDJqztho2pbHdHuLTwALNAGgoIp0k7HBJ
X/vfGJQ/BJuBhsmrUxSFtH4a1Qw5z9WktbBBzUqf73FKDpSY204fkKGqqVrq3R49
TFKvtmAkEsxgNE07g7ej/1HrJ5pBlALt6X+zJYyPN1YADFwG4lBXznpxeN3XoEQw
HU2hd/EI8gr/VrDmkoTQj+94olM4qJeebt975+OEaNNjvXzNmeKYObkk9ybaWhO+
niyo0PIUV6vuaGxlS0vwjyCde4UIAQNylLWoaLFtBrw+sc+XcnToH+vZ+fMIUVOV
dYTcrZwz+RiynpiI4+wHx8FOgz93gdhOW+4tD9s=
-----END CERTIFICATE-----
Generated at Wed Nov 15 08:30:14 2023 by rpki-client on console-fra.rpki-client.org