Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C4830FA4591011EEACB34D30C4F9AE02.roa
File: C4830FA4591011EEACB34D30C4F9AE02.roa (raw, json)
Hash identifier: HV8s7LcKDZAQ810ll3gNrxLBUBiDbznJNZ9yGoPyTzA=
Subject key identifier: 11:32:41:32:DE:8F:ED:B2:62:BA:DC:58:B2:55:80:48:57:EE:34:E0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7A91
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C4830FA4591011EEACB34D30C4F9AE02.roa
Signing time: Fri 22 Sep 2023 06:25:05 +0000
ROA not before: Fri 22 Sep 2023 06:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135802
IP address blocks: 103.78.204.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31377 (0x7a91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 22 06:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=650d3340-85c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:49:11:5b:0f:c1:db:f6:9f:14:42:53:0e:08:
bc:92:96:28:d7:ed:a8:21:8d:84:55:3f:74:6c:1e:
94:ad:8c:62:7b:d4:fb:f0:f5:df:1e:f4:1a:8f:d7:
bf:42:cc:6b:ad:f2:e1:a6:5d:1b:01:07:4c:fa:64:
a0:ed:51:97:bb:f7:3f:40:b3:5d:64:b4:38:8e:27:
11:27:40:a1:a9:d4:f8:c1:1c:7a:fc:c9:ca:88:4c:
13:6c:f4:e8:37:75:90:42:0a:a6:a0:fd:56:64:c1:
20:9f:e3:10:e7:27:18:8b:d6:5d:8f:ff:e1:d1:cd:
17:ee:78:18:5c:84:37:c7:ec:32:3f:03:95:9d:32:
87:9b:f2:bc:41:e0:5a:3a:77:98:21:1a:19:73:40:
1a:94:90:4d:a8:58:61:e9:57:26:35:4b:fd:54:39:
84:d1:7b:25:8c:47:e0:52:81:a1:a4:22:8a:0f:c5:
55:d3:31:40:b3:1c:bb:80:96:e3:22:8e:c1:99:09:
64:20:1f:df:1d:8a:f5:1c:04:ee:d4:18:75:80:28:
c2:e8:95:d8:be:80:e7:04:b9:ad:6f:d3:e1:83:d0:
99:f9:6c:ea:cc:d8:df:ac:3e:dd:c6:ba:97:da:5b:
00:fd:83:2b:b8:ad:59:09:3a:c8:de:09:18:83:ec:
30:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:32:41:32:DE:8F:ED:B2:62:BA:DC:58:B2:55:80:48:57:EE:34:E0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C4830FA4591011EEACB34D30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.204.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:2d:fe:13:c7:a3:88:6b:15:33:1b:df:db:53:31:2e:a4:f1:
de:90:79:0c:12:08:ea:fa:25:a5:5a:e3:6d:40:3d:1d:d8:3b:
b8:99:e4:ee:83:b7:25:bb:84:f8:c3:38:3f:02:ab:21:2d:3e:
72:dd:a6:cb:0a:4a:92:f7:13:4c:ec:64:cf:59:dc:6d:e2:8d:
9a:88:73:54:bb:db:ca:b7:0b:42:db:73:cc:af:19:8f:44:9f:
55:2d:09:77:d5:68:8c:0e:09:08:9c:c9:aa:f6:bf:d8:69:7a:
85:26:57:67:e7:6b:49:63:9d:81:aa:c3:f0:62:12:f1:dc:0e:
46:95:dd:59:22:6e:3b:a9:42:91:7a:6b:66:d1:99:87:f0:7f:
4d:d1:56:01:49:37:e9:40:10:d3:df:8e:26:fb:15:72:25:4d:
72:5c:d4:64:20:48:2a:0c:29:a9:52:3f:0b:a4:7c:3f:77:5e:
59:9b:84:33:37:b2:cb:71:7b:9c:ef:bd:ef:b3:d3:95:ff:03:
c6:50:31:69:1f:0f:9f:b3:9f:74:03:22:1d:23:58:db:c1:df:
54:60:51:1d:56:af:29:60:e8:4b:a6:20:52:a7:3b:79:48:e0:
5c:3f:6f:6c:d1:bd:65:be:69:47:99:de:61:8b:54:6b:18:66:
c7:0f:be:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 16:21:21 2024 by rpki-client on console-fra.rpki-client.org