Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DC0E41B49AE611ECA7824718C4F9AE02.roa
File: DC0E41B49AE611ECA7824718C4F9AE02.roa (raw, json)
Hash identifier: VA2UQoj8NXdTusJKraRXCkyjQzF97UrC9QwelVLHbBY=
Subject key identifier: E4:97:12:27:E3:D6:95:CE:3C:DB:43:AB:2F:FF:C8:6C:E0:B5:61:2D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6BFE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DC0E41B49AE611ECA7824718C4F9AE02.roa
Signing time: Wed 10 May 2023 16:22:23 +0000
ROA not before: Wed 10 May 2023 16:22:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135772
IP address blocks: 14.192.52.0/22 maxlen: 24
43.225.0.0/22 maxlen: 24
45.127.232.0/22 maxlen: 24
103.68.216.0/22 maxlen: 24
103.126.32.0/22 maxlen: 24
103.139.60.0/23 maxlen: 24
103.176.126.0/23 maxlen: 24
103.177.178.0/23 maxlen: 24
103.196.220.0/22 maxlen: 24
103.220.158.0/23 maxlen: 24
2001:df6:6b00::/48 maxlen: 48
2403:67c0::/32 maxlen: 36
2407:a8c0::/32 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27646 (0x6bfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:22:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc4bf-1787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:3e:f5:c8:89:6c:a3:54:b4:40:ab:9d:ee:
d6:66:7c:70:f1:26:46:a1:af:a7:14:d5:1d:28:de:
97:e0:2c:ff:dc:a2:4f:d3:d5:71:23:05:5e:b3:cb:
b1:62:01:c0:45:14:47:fe:59:f1:a5:fa:05:87:17:
0f:f6:5d:ac:5f:2a:9e:5a:cb:17:f0:31:da:79:66:
fd:f5:9b:c2:55:62:60:a4:e6:06:37:4b:8c:d8:05:
69:71:26:3b:71:58:6f:d0:83:9c:44:b0:d6:93:6e:
c5:4c:0c:08:4c:0c:1f:9e:19:b9:af:ba:a5:f6:63:
da:91:fa:51:7f:b0:de:c1:64:c9:61:68:ad:07:e9:
30:7c:6a:f4:8b:4e:18:7a:71:27:7e:c0:61:bc:46:
71:63:bd:32:28:58:32:6b:2d:50:a7:43:11:7f:63:
97:48:3c:30:bd:08:1a:b0:b7:cf:95:03:24:8a:74:
7b:94:e3:cd:28:ad:60:d1:dc:c8:78:50:c4:61:50:
5a:d4:48:b1:f3:1a:0a:2d:99:8b:b9:37:89:46:d6:
84:94:51:c6:f3:82:4b:04:81:48:db:d7:fc:32:55:
d8:2a:e2:c7:ff:f8:07:33:e4:4e:15:a1:55:69:e1:
f1:b5:41:ec:bc:0b:c3:2d:46:e7:22:dc:47:0b:96:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:97:12:27:E3:D6:95:CE:3C:DB:43:AB:2F:FF:C8:6C:E0:B5:61:2D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DC0E41B49AE611ECA7824718C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.52.0/22
43.225.0.0/22
45.127.232.0/22
103.68.216.0/22
103.126.32.0/22
103.139.60.0/23
103.176.126.0/23
103.177.178.0/23
103.196.220.0/22
103.220.158.0/23
IPv6:
2001:df6:6b00::/48
2403:67c0::/32
2407:a8c0::/32
Signature Algorithm: sha256WithRSAEncryption
67:f3:f9:86:15:e2:5c:95:e2:70:c1:13:ac:9c:f0:56:bc:5c:
2e:f4:10:b6:52:5a:dd:10:27:21:05:94:1e:d3:e1:b8:2b:07:
c7:3d:3f:42:7e:46:10:9d:94:1f:42:04:7d:9a:03:33:e9:6d:
be:2f:a0:40:a7:23:51:f9:95:33:5a:a5:af:39:21:42:53:5d:
d9:29:9b:2b:7c:95:2a:10:53:7d:df:c9:8c:c9:60:51:01:4b:
d1:b0:ff:e0:ba:08:39:5f:05:7d:2c:48:ec:9e:c4:4d:57:61:
72:a1:c6:3e:e3:21:b9:b0:53:52:ad:14:bd:17:d1:19:0d:31:
8e:16:3a:5f:57:36:2f:9c:d0:a0:ba:8c:22:cb:7c:3e:6d:9c:
d2:bc:2c:08:af:11:4e:30:1b:f2:18:c9:12:45:41:4f:36:8f:
cf:ce:87:a3:8e:4c:62:87:75:72:a4:f2:16:9e:09:fa:99:4b:
45:b6:b4:da:2a:ec:95:7c:6a:7a:b3:33:b1:a7:70:a8:8e:14:
10:0c:fa:2f:69:01:90:ae:5b:2b:2d:c8:53:57:ce:1d:9a:41:
d8:c4:38:f2:b7:1e:67:cd:3d:96:a2:08:0c:f6:60:e6:02:5a:
8e:0c:3e:3a:d8:b1:6c:8d:32:c8:fe:7c:96:62:98:a7:84:5e:
c9:db:69:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 12:01:12 2023 by rpki-client on console-ams.rpki-client.org