Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6EF5782A3AC11EE85B48170C4F9AE02.roa
File: E6EF5782A3AC11EE85B48170C4F9AE02.roa (raw, json)
Hash identifier: i/bZcp5cSibJMN4VVGLFLmm+vqPt3n6dV/X9qBFi7Yk=
Subject key identifier: 2E:8B:FC:91:E3:81:3C:68:52:39:4C:E2:A8:E0:17:3B:F5:C1:8A:F5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8097
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6EF5782A3AC11EE85B48170C4F9AE02.roa
Signing time: Tue 26 Dec 2023 05:09:10 +0000
ROA not before: Tue 26 Dec 2023 05:09:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137615
IP address blocks: 103.115.182.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 09:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32919 (0x8097)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 26 05:09:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=658a5ff6-37ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:3c:3e:1b:1a:ce:e2:73:0e:d9:20:37:8e:
92:89:30:9d:f5:41:7c:6f:37:f9:0b:9d:e1:7e:95:
ed:cc:52:13:be:98:1d:30:7e:28:3c:e3:ab:d7:dc:
25:3c:b0:c7:69:b7:bb:53:ac:16:76:f2:d0:21:13:
bf:cc:73:3f:29:0e:aa:57:63:9c:d2:2e:8e:2a:86:
5f:93:5f:75:4f:7b:15:36:cf:e6:aa:25:77:33:2e:
a5:c0:d2:6d:4d:b2:cb:89:b3:0a:9d:6d:84:b3:d0:
25:fd:2c:6e:23:96:35:0d:a7:2e:3b:0e:16:89:d9:
0b:29:60:4c:99:42:20:11:73:5c:d1:cf:ef:a2:4d:
fd:b1:bd:c3:d1:24:bf:60:7b:64:f2:38:1d:06:41:
84:9f:ef:4b:6f:00:18:81:83:ec:f2:d3:57:83:21:
5d:38:1c:e2:0e:09:a2:9f:6a:9f:df:03:34:f5:a1:
97:1c:ac:8d:e2:83:e2:b9:b5:09:9d:6b:a0:73:8f:
89:b3:c0:eb:56:ea:c1:3b:3f:3a:5d:20:35:69:bd:
33:ad:62:6c:7a:38:be:14:a3:c1:52:e9:87:30:87:
a2:46:6c:51:7f:37:9a:b5:e5:76:99:7e:d0:de:d3:
ed:44:d3:6f:06:b4:f8:ee:01:17:53:2d:f2:b3:c6:
d5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8B:FC:91:E3:81:3C:68:52:39:4C:E2:A8:E0:17:3B:F5:C1:8A:F5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6EF5782A3AC11EE85B48170C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.182.0/23
Signature Algorithm: sha256WithRSAEncryption
61:0d:4c:10:88:7a:c8:97:c8:c9:89:f8:16:07:11:b5:4c:01:
0b:1b:01:02:b8:78:1d:2b:be:73:0c:69:f0:5a:6c:e6:81:fd:
dc:f9:76:30:2e:e8:a0:fc:f3:54:47:3f:47:55:f4:11:22:69:
01:79:b8:e3:64:11:e2:de:a5:29:ea:be:af:ca:2a:a7:8e:f9:
23:73:77:29:f9:07:fb:6c:bb:39:f4:5f:ed:83:a2:ec:93:d7:
bd:5d:1e:ff:3d:3e:a3:39:cd:4e:a5:f7:27:dc:36:d1:fc:db:
29:a2:0b:05:cc:d8:b1:a8:84:27:63:5e:2c:5a:7c:a3:0e:40:
84:fa:79:2c:9e:5e:32:36:a8:3c:7f:02:f9:54:c8:a5:d8:0b:
61:3d:9e:7c:74:9d:ff:3c:7b:4b:e0:e4:06:d6:1c:77:25:79:
aa:04:47:34:7f:b5:21:16:1f:0b:e9:64:a9:42:26:cb:aa:84:
2a:bb:0d:e8:e5:92:7b:44:d7:f1:71:52:8d:65:63:7b:c9:af:
50:20:5b:98:84:b4:2f:43:2d:cd:b1:4c:c3:19:66:40:e7:b5:
6d:62:47:88:60:0b:25:6d:6b:33:88:39:22:12:48:12:f6:8d:
fd:d7:67:b3:2f:d2:92:e0:c7:9d:90:06:23:4e:02:29:66:e5:
52:78:eb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 13:01:14 2024 by rpki-client on console-ams.rpki-client.org