Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D448C8C8F06D11EC8987EB7DC4F9AE02.roa
File: D448C8C8F06D11EC8987EB7DC4F9AE02.roa (raw, json)
Hash identifier: 95kDDBuAT5z4f9SULYrHs7sDumr7q10un9ulqm6kV4M=
Subject key identifier: 2E:CD:7D:6E:2D:81:8F:C1:C2:A9:46:F1:69:6C:0E:C1:BF:98:21:AA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6CCE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D448C8C8F06D11EC8987EB7DC4F9AE02.roa
Signing time: Wed 10 May 2023 16:26:20 +0000
ROA not before: Wed 10 May 2023 16:26:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137095
IP address blocks: 103.104.108.0/24 maxlen: 24
103.113.64.0/22 maxlen: 24
2407:6240::/32 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27854 (0x6cce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:26:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc5ac-929e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:78:07:07:da:f3:d3:a5:d8:8a:79:f7:55:
10:4b:1b:60:ca:24:96:54:c6:86:a6:21:2b:b2:0f:
58:75:ca:15:37:c2:8e:59:ce:8d:31:a6:e3:86:6c:
d9:ce:b3:fe:90:55:32:36:65:3e:4c:91:d5:23:f3:
60:84:6d:b9:02:31:ce:67:69:dd:f1:9b:2b:45:52:
9d:61:5c:1c:c7:cd:32:be:9a:d1:5c:d2:fc:70:2e:
a2:52:7e:b0:c6:8a:98:c6:9a:ec:a0:3d:bc:ab:3c:
37:a6:1e:84:d1:94:8c:2a:81:1d:7a:cf:22:b3:64:
d3:d4:40:25:7c:00:3a:a2:9d:9e:6a:9e:2e:6c:54:
4f:fd:6e:bc:e7:0d:d1:b9:63:4a:76:fb:e8:5e:f8:
f8:88:66:75:e0:c5:b6:92:d1:51:5b:e9:de:cc:41:
03:fa:b0:a2:da:bd:64:76:cc:10:b3:94:7d:52:6a:
c3:55:d7:e3:77:be:d9:46:ab:4a:6d:57:dd:16:41:
d1:16:8b:5f:7b:be:45:31:b2:30:0a:3c:38:12:dc:
42:31:b2:8e:a3:74:ec:3f:81:0f:4f:34:15:ed:5a:
37:64:37:09:ce:ff:fc:ba:77:a0:9c:7d:2e:9f:a8:
db:7e:88:02:ee:3e:e5:0e:88:d7:f7:5e:de:f0:c5:
2b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CD:7D:6E:2D:81:8F:C1:C2:A9:46:F1:69:6C:0E:C1:BF:98:21:AA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D448C8C8F06D11EC8987EB7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.108.0/24
103.113.64.0/22
IPv6:
2407:6240::/32
Signature Algorithm: sha256WithRSAEncryption
93:76:d0:7b:d6:3b:3b:4b:59:f2:56:fa:29:6d:1e:61:0c:e5:
ef:20:a7:62:6f:ce:2d:cc:9d:8d:36:53:b8:bf:ab:44:48:55:
13:b1:b4:59:8a:39:48:ad:91:7b:18:bc:69:de:cb:bb:c7:53:
77:86:a7:09:a7:3d:95:ad:df:b1:e2:82:3b:6e:a8:a5:71:33:
fd:31:b9:fb:2d:11:c3:4e:9d:b1:eb:01:1a:34:6f:2f:62:c5:
83:85:ea:c3:2f:92:26:e9:1a:a9:83:15:1f:ef:e9:92:b3:54:
3f:e6:dd:81:4d:eb:2e:23:ff:c5:d3:08:c5:46:45:97:91:ea:
b9:0a:b5:0b:7e:1e:65:8e:52:a4:76:6e:45:d7:59:c4:fa:a2:
45:9f:68:37:f7:e6:f9:4e:20:d7:fa:fc:5e:33:da:59:8f:5f:
ec:49:57:43:3c:86:35:a3:8e:65:6e:84:7a:03:ad:bd:8f:ff:
aa:f7:27:35:e3:24:36:90:ac:62:e5:f6:a3:3f:bb:17:54:b7:
64:d1:7b:84:bd:1c:c2:6d:b8:39:d0:b8:64:05:10:1e:50:81:
ee:ce:77:21:cb:09:88:b4:d7:7e:54:c5:27:8c:9d:c0:65:d8:
6a:0b:bd:ae:85:01:38:68:36:6b:50:77:a7:ff:82:e1:f2:26:
1b:98:c0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 06:33:49 2023 by rpki-client on console-fra.rpki-client.org