Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4AED668D4FF11EDB14EDF1AC4F9AE02.roa
File: E4AED668D4FF11EDB14EDF1AC4F9AE02.roa (raw, json)
Hash identifier: f0Y0LPZs+bbj0RZ1HCVwg/DS9hhbtrm3flq2DjyGeIc=
Subject key identifier: 44:1F:A6:FC:95:7F:E0:7F:BB:7A:65:93:39:62:8D:BA:05:B7:C7:28
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 749C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4AED668D4FF11EDB14EDF1AC4F9AE02.roa
Signing time: Wed 28 Jun 2023 06:01:46 +0000
ROA not before: Wed 28 Jun 2023 06:01:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150102
IP address blocks: 103.194.118.0/24 maxlen: 24
103.194.119.0/24 maxlen: 24
103.212.132.0/24 maxlen: 24
103.212.133.0/24 maxlen: 24
103.212.134.0/24 maxlen: 24
103.212.135.0/24 maxlen: 24
103.217.81.0/24 maxlen: 24
103.217.82.0/24 maxlen: 24
103.217.83.0/24 maxlen: 24
103.225.180.0/24 maxlen: 24
103.225.181.0/24 maxlen: 24
103.229.208.0/24 maxlen: 24
103.229.210.0/24 maxlen: 24
103.229.211.0/24 maxlen: 24
103.252.42.0/24 maxlen: 24
103.252.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29852 (0x749c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 28 06:01:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=649bccca-e67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3d:56:f5:48:34:e1:f3:b6:f3:79:9c:09:9c:
b6:cc:08:a2:f6:b1:2c:c2:bf:2a:d2:2e:d9:f2:e0:
a9:03:f3:57:f9:46:00:cc:03:85:34:9a:fc:31:20:
16:25:e4:b5:3a:d0:fe:c0:69:68:b4:05:41:6b:2f:
a3:03:92:c2:9b:79:26:7c:2b:ab:99:73:b2:cc:48:
0f:d3:52:e0:72:b5:f5:9e:b0:14:14:c3:03:51:cd:
58:32:a7:93:2f:7d:28:33:37:a5:a3:5d:7f:62:7c:
cb:e4:1c:da:32:00:18:14:0e:98:47:b6:c6:ff:b0:
bb:2c:79:72:7e:12:b0:ad:7f:de:df:8e:0e:73:7e:
56:bf:b3:c9:d3:0f:09:48:36:5c:dc:89:73:ba:13:
fa:c7:57:9f:bb:d5:3b:17:1b:f7:e0:8b:53:8c:d1:
b2:49:f1:ba:a2:9d:50:f7:8e:f4:6b:bc:2c:df:28:
c0:f3:0c:60:46:e7:d1:65:72:a1:e3:71:27:31:8e:
ad:d2:b2:61:4c:2c:cd:9d:c7:0c:f7:61:6e:6e:ce:
ed:06:c3:23:1e:be:7c:fa:ba:fb:47:52:d0:80:cd:
f1:58:c8:17:d2:24:c6:ef:44:ac:b6:d1:dd:ee:66:
fd:4e:83:93:fb:01:d8:56:fd:c9:d2:29:3b:45:95:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1F:A6:FC:95:7F:E0:7F:BB:7A:65:93:39:62:8D:BA:05:B7:C7:28
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4AED668D4FF11EDB14EDF1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.194.118.0/23
103.212.132.0/22
103.217.81.0-103.217.83.255
103.225.180.0/23
103.229.208.0/24
103.229.210.0/23
103.252.42.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:a4:17:f1:b9:4b:56:fd:c2:72:4e:93:55:8c:59:a5:7c:26:
c3:45:8f:18:a1:41:e0:18:ae:88:ab:62:d0:8b:f5:c3:60:57:
88:eb:a6:38:40:0b:6e:eb:24:1d:fa:98:7a:a0:cb:b0:4b:dd:
21:5b:13:f3:d7:10:dc:79:11:4f:28:0c:ee:56:a0:e3:ba:6f:
bc:4e:07:2f:1a:86:f8:8d:77:07:c6:de:75:f8:88:b4:9b:23:
5f:e3:6c:f6:61:a3:1a:0f:fe:d8:01:c5:de:ad:63:c7:3a:01:
7a:a1:ab:11:56:29:1b:ad:85:70:ed:70:09:53:fd:dc:e5:38:
d3:fb:f6:6d:0a:2c:8f:f6:d9:0b:19:56:86:78:af:90:47:5d:
37:4e:ee:13:2c:ff:31:b1:ba:37:ae:c5:99:14:c1:b8:d9:d6:
10:6e:6d:62:6a:fc:91:b9:95:b5:b4:a0:06:a9:f9:18:88:c1:
f6:df:b0:fa:8a:03:7c:7c:84:b6:6f:bf:cb:f3:97:9d:46:8a:
87:3f:c4:db:ae:86:09:d5:ae:66:e2:20:49:6a:85:57:28:c7:
1b:7b:43:0d:fb:9e:66:53:cb:4a:53:2a:b9:8f:a1:b0:e4:e5:
c1:40:6c:9a:19:26:3e:5b:d6:82:db:35:db:9d:1e:17:59:9b:
21:1a:0c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-ams.rpki-client.org