Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C405A1B60E1011EB98F1E36FC4F9AE02.roa
File: C405A1B60E1011EB98F1E36FC4F9AE02.roa (raw, json)
Hash identifier: uTk1b3v4zMOQA5IUW5rb5+nm9aWPjKIgHD77ACJmnFo=
Subject key identifier: 8D:F7:B6:C4:7B:D0:32:B4:72:55:59:8F:00:F4:A3:AC:0F:42:62:23
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6B73
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C405A1B60E1011EB98F1E36FC4F9AE02.roa
Signing time: Wed 10 May 2023 16:19:44 +0000
ROA not before: Wed 10 May 2023 16:19:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134930
IP address blocks: 103.206.116.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27507 (0x6b73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:19:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc420-9b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:39:1c:63:70:ba:02:0b:ee:7b:93:98:6a:
6f:f7:6e:11:54:7d:b8:b0:67:63:59:ff:84:05:44:
ee:8a:89:d5:5b:e5:67:67:29:ea:23:5f:67:da:59:
7f:5f:7a:85:97:46:b0:a9:3b:28:4a:bc:94:68:27:
bc:17:78:c9:96:e4:8f:f0:4b:ba:4b:6b:19:a9:10:
af:6a:03:de:12:ad:65:e9:31:88:84:c3:e8:24:26:
b7:89:c5:90:3a:57:d8:ab:1b:64:d7:6a:bb:c8:ec:
09:cc:e1:ee:5b:de:95:0f:ee:8e:58:c2:b6:0a:c4:
fc:80:0a:7d:ce:54:71:70:82:da:e8:85:76:74:03:
65:45:17:66:61:82:44:29:2d:9b:2c:af:07:55:2d:
f6:ee:87:64:d3:1c:16:69:ae:5b:87:47:65:d7:b8:
17:6b:ec:7b:c1:28:cd:be:6a:4b:fb:3f:34:12:67:
9c:8c:67:0a:60:3e:fc:51:75:12:25:96:b2:8b:93:
31:c6:54:ef:e6:ad:59:51:43:30:91:eb:89:e4:37:
79:69:c7:42:3c:6e:93:25:15:ea:8d:7d:ab:7a:46:
33:66:47:da:4b:5f:68:c3:d8:42:23:d0:e3:84:b2:
44:a8:a6:f3:0d:35:4c:8d:78:db:d9:45:50:02:11:
3a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F7:B6:C4:7B:D0:32:B4:72:55:59:8F:00:F4:A3:AC:0F:42:62:23
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C405A1B60E1011EB98F1E36FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.206.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:84:3c:03:71:12:56:3c:d4:1d:bd:df:4e:35:b4:68:2d:79:
09:bd:c9:3e:5e:5c:8c:0b:56:db:5c:bd:f0:06:50:cd:90:03:
1f:65:3c:e7:42:99:eb:b0:01:5e:e4:09:67:bc:2c:8a:f3:a4:
c6:43:74:92:12:66:4b:09:be:a8:70:c6:ff:e2:12:db:45:88:
81:aa:84:ca:a1:a2:f2:03:c7:84:24:84:a9:88:5b:34:29:03:
3c:99:61:18:16:08:98:38:4b:02:a2:7f:85:79:77:db:23:d3:
c9:63:2e:f2:a6:73:82:21:65:5a:87:62:2e:32:72:a8:c8:87:
65:a9:62:6a:c6:b9:aa:72:f3:06:56:64:26:9c:0d:71:44:24:
6d:2e:ee:4b:3b:ad:b3:31:92:3b:8a:e1:23:72:3f:cb:e4:42:
0d:94:52:55:ec:51:82:4a:4f:6a:47:90:06:c2:9d:81:3a:05:
93:45:af:e7:95:44:d2:35:8c:af:f5:3c:98:03:d0:76:7d:ea:
98:ce:cb:42:7f:9e:2c:78:07:8e:19:46:70:51:cc:2d:d7:70:
5c:c6:ed:65:0b:72:73:3d:04:2f:36:2d:11:a1:5b:2a:76:58:
0e:49:0c:07:42:87:f9:77:ce:2e:27:17:83:0e:e7:c9:f1:dd:
9d:14:e5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 07:08:46 2023 by rpki-client on console-fra.rpki-client.org