Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6B25820932011EDBF466F52C4F9AE02.roa
File: E6B25820932011EDBF466F52C4F9AE02.roa (raw, json)
Hash identifier: cN8plIwBeYMAtqBEmGK5oqVN2v6JAplPJXLgAGW6Dgo=
Subject key identifier: 48:42:95:19:EA:81:C0:67:0D:85:1C:42:D8:8B:5E:CA:FC:E2:99:A0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6C15
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6B25820932011EDBF466F52C4F9AE02.roa
Signing time: Wed 10 May 2023 16:22:48 +0000
ROA not before: Wed 10 May 2023 16:22:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135817
IP address blocks: 43.255.164.0/22 maxlen: 22
43.255.164.0/24 maxlen: 24
43.255.165.0/24 maxlen: 24
43.255.166.0/24 maxlen: 24
43.255.167.0/24 maxlen: 24
103.139.70.0/23 maxlen: 24
103.148.144.0/24 maxlen: 24
103.170.56.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27669 (0x6c15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:22:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc4d8-610c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:dc:89:46:e1:1f:b3:98:fa:29:e9:3d:0c:
5c:34:36:3c:dc:88:07:a3:ec:14:7f:ca:66:27:ad:
a8:ed:57:4e:c0:54:d5:c3:18:b3:e8:a7:f9:71:c4:
e2:6a:31:96:16:e9:eb:c2:70:75:12:87:0b:8c:fb:
96:ef:cb:f7:5b:7d:6b:60:e4:36:92:2a:64:47:32:
74:a9:41:ae:e0:fc:5f:f5:c9:3a:e5:ee:cb:d7:6c:
8e:73:13:37:32:8a:63:3f:02:71:0b:10:51:f0:1c:
09:23:6d:e0:22:c7:d4:bb:35:e5:5e:88:4c:03:f7:
7f:56:ce:51:09:ce:f3:5d:9b:e5:06:cf:ff:d7:60:
89:7a:5d:f5:fc:85:c4:d1:84:9b:61:e6:35:f5:6a:
6f:2b:37:31:5f:1c:92:71:dd:f7:01:3b:3f:5a:4d:
1d:ba:9c:04:e5:ca:c5:2c:7a:53:3b:4e:c3:79:c4:
99:cd:ae:fe:b5:55:00:e7:a2:35:9a:7f:32:df:22:
67:ef:37:2b:78:2a:c8:51:fe:67:e4:90:48:00:24:
c1:d6:b2:54:06:eb:fb:52:16:bc:06:d7:52:09:b4:
0d:dc:69:78:4c:0f:85:91:0b:ce:8f:45:0a:e2:3d:
f6:4d:8e:0c:59:ee:f0:1c:fd:2c:92:b4:6e:cf:ce:
31:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:42:95:19:EA:81:C0:67:0D:85:1C:42:D8:8B:5E:CA:FC:E2:99:A0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6B25820932011EDBF466F52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.164.0/22
103.139.70.0/23
103.148.144.0/24
103.170.56.0/23
Signature Algorithm: sha256WithRSAEncryption
02:1a:df:11:2c:b3:ee:0b:e8:81:6d:27:07:27:f3:a5:ab:98:
b4:9d:6e:f4:a7:30:7f:31:4c:f9:88:7e:5f:39:f5:2b:50:09:
67:59:79:b4:e8:2f:13:24:42:18:5b:d3:8a:94:63:5d:1f:06:
8a:86:aa:6d:c1:ab:5f:56:fc:56:de:dc:bf:8d:4a:6d:52:f1:
96:2a:c0:4d:76:d4:f5:75:43:6d:94:0f:ef:97:b8:c3:cd:09:
b6:e1:25:6a:a2:55:45:1a:7c:22:71:6e:a6:f8:d3:ea:41:03:
be:8a:16:5b:67:e4:90:c3:49:9e:7d:15:25:a5:d2:ec:62:d1:
81:5f:37:7f:82:54:fe:ee:10:92:0d:e4:cf:18:7d:f6:ae:04:
54:0a:91:f2:6d:91:29:14:13:a4:37:86:54:48:16:5d:60:f7:
6a:3e:df:bc:b0:87:26:58:35:c4:44:34:15:3d:75:17:b4:f8:
0f:34:29:bf:0d:57:fb:a7:d6:5b:ac:48:4f:b8:7d:b9:02:58:
1e:07:52:b1:2d:85:e7:29:e7:ad:9e:df:57:5f:4d:d2:82:65:
7b:6d:2f:d6:9e:3f:ac:ff:2d:84:9d:c0:b8:11:68:5f:9e:15:
9a:0a:f2:4f:e2:27:59:ac:e6:9a:a4:f2:db:b7:42:81:d3:00:
2a:2b:65:b9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICbBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTYyMjQ4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzRkOC02MTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwJvciUbhH7OY+inpPQxcNDY83IgHo+wUf8pmJ62o7VdOwFTVwxiz6Kf5ccTi
ajGWFunrwnB1EocLjPuW78v3W31rYOQ2kipkRzJ0qUGu4Pxf9ck65e7L12yOcxM3
MopjPwJxCxBR8BwJI23gIsfUuzXlXohMA/d/Vs5RCc7zXZvlBs//12CJel31/IXE
0YSbYeY19WpvKzcxXxyScd33ATs/Wk0dupwE5crFLHpTO07DecSZza7+tVUA56I1
mn8y3yJn7zcreCrIUf5n5JBIACTB1rJUBuv7Uha8BtdSCbQN3Gl4TA+FkQvOj0UK
4j32TY4MWe7wHP0skrRuz84xIQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFEhClRnq
gcBnDYUcQtiLXsr84pmgMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTZCMjU4MjA5
MzIwMTFFREJGNDY2RjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBAIr/6QDBAFni0YDBABnlJADBAFnqjgwDQYJKoZIhvcNAQEL
BQADggEBAAIa3xEss+4L6IFtJwcn86WrmLSdbvSnMH8xTPmIfl859StQCWdZebTo
LxMkQhhb04qUY10fBoqGqm3Bq19W/Fbe3L+NSm1S8ZYqwE121PV1Q22UD++XuMPN
CbbhJWqiVUUafCJxbqb40+pBA76KFltn5JDDSZ59FSWl0uxi0YFfN3+CVP7uEJIN
5M8YffauBFQKkfJtkSkUE6Q3hlRIFl1g92o+37ywhyZYNcRENBU9dRe0+A80Kb8N
V/un1lusSE+4fbkCWB4HUrEthecp562e31dfTdKCZXttL9aeP6z/LYSdwLgRaF+e
FZoK8k/iJ1ms5pqk8tu3QoHTACorZbk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:58 2023 by rpki-client on console-fra.rpki-client.org