Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1C1E3AA836911EEA6927A6BC4F9AE02.roa
File: E1C1E3AA836911EEA6927A6BC4F9AE02.roa (raw, json)
Hash identifier: 8QUjfT0I2NjC/KwwGxNjEhpsEpqNMYSyZTiydIDIvfI=
Subject key identifier: 71:9A:AD:3B:48:83:1E:B2:35:31:7E:13:98:8D:66:39:51:94:58:D9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7D98
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1C1E3AA836911EEA6927A6BC4F9AE02.roa
Signing time: Wed 15 Nov 2023 03:48:48 +0000
ROA not before: Wed 15 Nov 2023 03:48:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150102
IP address blocks: 103.212.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32152 (0x7d98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 15 03:48:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65543fa0-1b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:77:d0:88:71:c2:55:bb:64:21:de:d2:27:a3:
5c:2b:ff:89:95:4a:89:95:9c:58:a8:7a:36:cf:28:
3c:52:2a:d9:14:f9:da:46:74:8e:0f:04:72:f3:d9:
c3:53:72:ad:a7:ef:1c:2e:18:33:a8:ac:d2:27:63:
4c:8e:f6:4c:c3:cd:1f:bb:d3:8c:b8:05:46:88:e5:
a7:1d:66:ae:b4:7a:a3:d8:44:f3:a5:36:f4:66:21:
4b:a4:b6:36:b9:4d:22:5f:14:e0:8c:15:32:9f:33:
cb:0f:9e:c8:8b:46:51:23:71:2d:83:94:7d:07:b0:
76:09:1d:a2:29:ee:b8:0c:b9:b3:88:17:4a:b6:7b:
cf:d0:80:21:0e:14:c4:f4:34:96:05:7e:01:8c:c6:
4c:cc:b9:0d:45:06:da:bd:c5:d4:f7:10:12:8c:ab:
60:5c:e0:ee:2f:4b:f8:ea:b4:d4:76:82:6d:f7:bc:
ca:31:ee:0d:e8:c1:1c:11:55:9f:10:b1:fa:a9:04:
9d:fe:7a:b5:40:5b:d3:4b:e8:6c:33:1f:12:f8:1f:
b7:4c:56:7f:a6:07:91:e9:7b:7e:20:11:81:4e:6b:
ee:48:77:32:a3:73:e8:87:1c:38:ca:bb:48:23:5b:
c4:db:b7:fb:ea:e6:4e:15:62:12:db:73:4f:aa:22:
88:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9A:AD:3B:48:83:1E:B2:35:31:7E:13:98:8D:66:39:51:94:58:D9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1C1E3AA836911EEA6927A6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.212.133.0/24
Signature Algorithm: sha256WithRSAEncryption
68:0e:21:0d:e9:2c:46:25:dc:c7:5a:63:04:4e:60:13:42:d0:
ea:34:60:b3:e4:38:2b:67:a2:18:41:65:b6:a6:1b:c0:9b:fe:
d4:c8:e3:3d:11:5d:26:6d:7e:f1:ad:30:13:11:3f:42:02:93:
3e:a0:8e:8d:6e:55:44:e7:a0:ec:68:8d:a9:28:eb:8a:66:93:
b0:c5:56:32:0f:18:12:7e:63:88:7e:30:d5:a9:1e:93:0e:83:
f6:f1:5e:62:5e:34:91:7f:4f:e9:03:55:b6:a4:04:c6:63:ce:
9a:13:c4:e6:10:ed:d9:1c:f8:0a:41:aa:0e:68:ec:72:a9:72:
0b:a1:e6:1c:50:89:5d:d3:4a:5a:b4:25:ff:14:15:9a:f1:20:
c7:08:00:a4:53:4f:0e:5e:bf:40:18:8f:7d:80:27:87:bb:a0:
9c:b2:cf:df:e3:e8:74:50:9e:be:00:a5:22:20:91:01:21:cf:
fc:4f:60:4c:fc:25:f2:c1:43:82:4d:a6:12:e3:9b:18:24:e4:
91:9d:1b:d4:7c:53:37:03:80:26:4b:e3:f6:0a:44:14:6b:a8:
e2:1f:24:22:8a:b6:ae:71:bf:d2:cb:f4:ae:2b:ce:a9:f5:00:
39:4a:83:64:8e:43:40:ac:92:d0:23:70:c8:79:8d:1f:12:8d:
b1:ff:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 06:55:29 2023 by rpki-client on console-fra.rpki-client.org