Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D92E0234213D11EEB1430859C4F9AE02.roa
File: D92E0234213D11EEB1430859C4F9AE02.roa (raw, json)
Hash identifier: /rTGCVzekgoIe8zx2mCl3n29L6w7BjYqPUOouu79624=
Subject key identifier: 9A:5B:EA:DA:C2:FA:30:88:17:F9:D1:DF:69:2D:43:52:56:A5:D7:C4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 757E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D92E0234213D11EEB1430859C4F9AE02.roa
Signing time: Thu 13 Jul 2023 05:26:41 +0000
ROA not before: Thu 13 Jul 2023 05:26:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150102
IP address blocks: 103.212.133.0/24 maxlen: 24
103.217.81.0/24 maxlen: 24
103.225.180.0/24 maxlen: 24
103.225.181.0/24 maxlen: 24
103.252.42.0/24 maxlen: 24
103.252.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30078 (0x757e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 13 05:26:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64af8b11-124f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:17:f8:01:af:6f:ba:cd:32:d3:b7:d7:e2:36:
18:91:e1:d0:6b:68:6e:7a:21:27:4a:b7:ee:29:29:
21:11:62:63:56:9c:83:28:3f:3f:2b:51:d1:6b:4d:
f3:3c:7b:ec:b2:fb:17:57:ad:2a:76:50:66:ea:c0:
ef:8b:bd:7f:22:fd:24:8a:46:9e:f4:8d:42:a0:d5:
90:66:67:1d:d2:cc:1b:a8:5b:94:20:c5:4e:3d:87:
f3:99:2b:9e:89:ba:f1:2a:7f:11:f3:af:bc:28:73:
37:a3:b3:ef:2e:f8:28:de:a4:33:4d:76:7c:b0:d0:
9f:23:12:b2:e1:b3:9e:7b:a3:56:39:32:99:db:92:
4c:c3:da:45:09:ae:af:cc:10:fe:1c:a4:45:1e:0a:
d3:96:a2:b8:cc:a7:44:7a:34:75:f1:39:6e:48:ac:
cc:9d:08:88:02:45:c9:2a:a2:96:1b:90:07:7d:72:
b6:41:09:07:01:db:e4:e6:d2:1b:7b:4a:d7:b7:d9:
ce:8f:a1:32:ea:24:1f:40:2c:67:c8:c1:28:8c:00:
42:d7:7e:2e:87:51:5b:dc:37:c2:f7:2c:a5:f7:30:
4d:15:8d:18:3f:5d:a1:05:96:e4:c7:89:7a:50:6c:
cc:9c:89:44:b2:78:81:07:f0:bc:60:60:ba:0a:aa:
cf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5B:EA:DA:C2:FA:30:88:17:F9:D1:DF:69:2D:43:52:56:A5:D7:C4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D92E0234213D11EEB1430859C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.212.133.0/24
103.217.81.0/24
103.225.180.0/23
103.252.42.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:6e:d9:29:59:78:32:c6:c1:7f:23:03:36:1f:b4:a0:60:1c:
ce:a8:20:f6:d1:2f:fb:24:73:e1:c9:3c:2c:4a:2e:b5:9b:23:
81:09:e4:a2:f0:44:3a:de:54:ab:16:f3:94:9a:53:be:0c:1d:
3c:61:71:67:79:a4:26:3b:ae:73:09:23:dd:14:24:82:c5:1a:
b2:20:1c:52:92:d6:8e:58:5c:24:cf:ba:39:9f:db:88:78:5b:
05:92:8b:1d:7d:14:9e:26:8c:c8:3a:bc:f4:b5:f3:cb:4c:f0:
c4:a9:a9:e7:87:3d:cd:88:4d:79:eb:71:bc:33:7e:52:89:bd:
49:1c:c7:b8:04:dd:b2:41:83:59:c4:90:90:7f:bd:6b:5d:5d:
a0:79:62:75:8a:14:05:a7:2c:6e:55:0a:e0:37:9a:eb:08:1c:
c4:10:57:f7:0e:b0:1c:9b:3f:31:b0:40:8c:88:cf:ab:91:86:
0c:26:e3:df:0a:fa:99:7b:b4:fe:5d:de:1e:be:ae:35:0b:ae:
19:4f:93:15:ab:57:30:9b:28:16:57:c5:f1:96:82:4e:1f:18:
e2:aa:31:e9:ea:2a:af:63:d4:72:40:2b:2f:74:0a:a8:9a:dc:
af:1d:b9:5b:8a:8c:e7:ae:7c:ae:76:e4:e0:bc:01:16:af:b3:
4d:c6:76:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 15:12:13 2023 by rpki-client on console-ams.rpki-client.org