Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB1D0CDA877211EEABDF8975C4F9AE02.roa
File: CB1D0CDA877211EEABDF8975C4F9AE02.roa (raw, json)
Hash identifier: vMoRmGO/XCzym3xLJ9ZTxIvdfdLYoUnfAjaxb8zm2q8=
Subject key identifier: 28:13:EF:59:5B:CC:4F:C2:AD:50:53:94:DD:DC:3F:6F:AC:69:8F:DF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7E2B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB1D0CDA877211EEABDF8975C4F9AE02.roa
Signing time: Mon 20 Nov 2023 07:02:40 +0000
ROA not before: Mon 20 Nov 2023 07:02:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150604
IP address blocks: 103.187.92.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32299 (0x7e2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 20 07:02:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=655b0490-3865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:46:8a:ed:53:6f:ea:76:f3:47:60:28:95:
3d:70:bb:ee:b1:5f:8f:8b:19:12:0a:8b:7e:3a:e9:
e3:32:de:35:dd:84:8e:3c:4f:d9:76:ff:4f:7d:5e:
51:5c:84:24:56:de:e8:c5:55:bd:28:ae:08:76:ee:
43:9f:bc:75:a7:75:d3:a1:36:48:4a:d0:94:c9:53:
8e:c2:37:d5:d6:ea:76:ac:e9:33:8a:e0:a0:a6:d1:
a4:c6:98:d1:a1:4d:cd:38:6e:bd:92:76:03:3d:68:
86:21:7e:9e:1a:f6:62:ad:00:b8:ea:f5:54:21:6b:
e9:54:78:99:39:47:80:aa:55:1b:3c:9b:85:6f:33:
54:bc:04:33:8d:1a:77:05:20:70:ca:fb:62:d4:b0:
87:43:61:40:1c:2a:b0:17:0b:40:c7:b8:70:9b:71:
b2:05:b8:d6:37:9d:ee:7e:22:9c:2a:70:c0:62:51:
92:1a:c7:df:f0:86:38:be:a7:62:94:63:7f:6a:5a:
53:17:e6:42:d3:7b:0f:ce:fa:b8:f0:94:94:9f:26:
b3:5b:a7:7f:50:e6:d1:32:df:6f:db:99:1e:fb:4c:
dc:40:76:b6:99:e6:18:97:3c:4b:64:98:db:45:b8:
19:4a:b2:c9:14:38:91:76:ec:8b:69:9b:8c:fc:86:
60:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:13:EF:59:5B:CC:4F:C2:AD:50:53:94:DD:DC:3F:6F:AC:69:8F:DF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB1D0CDA877211EEABDF8975C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.187.92.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:0f:8e:47:0b:da:c6:43:a8:b1:9a:4f:07:68:01:5f:b5:5f:
40:07:82:d2:cb:1f:9d:05:25:fb:91:87:6f:a1:ca:7d:dd:ca:
1a:4c:74:fd:36:98:ec:fb:4c:a2:39:61:ac:ad:70:ef:31:6c:
34:4b:d2:4f:35:31:da:76:9e:48:4e:e0:24:83:7d:f9:d4:85:
07:b5:94:7e:66:2d:a0:bb:ff:9d:0a:69:21:47:e4:83:b2:93:
14:c6:61:1d:70:2b:af:fa:6d:8c:50:c5:53:d4:68:97:02:1c:
21:bf:c2:6c:a8:4a:e0:12:22:d6:55:eb:7d:72:ae:1f:27:b3:
82:ce:9d:58:12:eb:00:92:6c:80:0d:da:c6:de:06:e0:72:cc:
d0:c9:d4:59:2e:1d:25:67:e2:19:39:fd:b7:b0:ec:90:d5:ea:
c2:12:b7:fe:c0:a4:ab:6e:5e:7a:08:23:ad:f1:46:0b:ab:a4:
ba:f2:09:0a:16:e7:8b:32:75:ea:6f:c8:5a:9d:d4:35:59:36:
d9:57:a5:fc:54:ec:ad:73:fa:7e:15:12:2a:eb:4e:fb:61:0f:
c2:a2:17:d8:9b:81:24:f2:88:26:c3:22:0c:a7:cb:7d:4e:91:
2b:53:e8:f7:c4:df:bd:b8:a0:d6:76:44:a6:96:7b:af:fc:aa:
5f:05:a1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 08:49:03 2023 by rpki-client on console-ams.rpki-client.org