Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EA25679C458E11EEA7800C68C4F9AE02.roa
File: EA25679C458E11EEA7800C68C4F9AE02.roa (raw, json)
Hash identifier: OiDwVxqoV0I4LjzcU6laxn8EyEXcFRJLF2mAcx2tAQk=
Subject key identifier: 4E:6B:9B:5D:11:94:75:49:96:FB:A5:0A:C8:4D:44:5E:DD:84:53:3E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 803F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EA25679C458E11EEA7800C68C4F9AE02.roa
Signing time: Tue 19 Dec 2023 13:05:14 +0000
ROA not before: Tue 19 Dec 2023 13:05:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140171
IP address blocks: 103.38.182.0/23 maxlen: 24
103.53.30.0/24 maxlen: 24
103.53.31.0/24 maxlen: 24
103.72.218.0/24 maxlen: 24
103.72.219.0/24 maxlen: 24
103.77.14.0/24 maxlen: 24
103.80.152.0/24 maxlen: 24
103.80.153.0/24 maxlen: 24
103.80.154.0/23 maxlen: 24
103.134.132.0/24 maxlen: 24
103.144.192.0/24 maxlen: 24
103.147.93.0/24 maxlen: 24
103.156.200.0/23 maxlen: 24
103.159.162.0/24 maxlen: 24
103.160.186.0/24 maxlen: 24
103.160.187.0/24 maxlen: 24
103.161.32.0/24 maxlen: 24
103.161.33.0/24 maxlen: 24
103.163.42.0/23 maxlen: 24
103.163.126.0/23 maxlen: 24
103.163.158.0/24 maxlen: 24
103.169.154.0/24 maxlen: 24
103.169.155.0/24 maxlen: 24
103.169.167.0/24 maxlen: 24
103.175.0.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.187.166.0/23 maxlen: 24
103.190.100.0/23 maxlen: 24
103.209.62.0/24 maxlen: 24
103.209.63.0/24 maxlen: 24
103.209.174.0/23 maxlen: 24
103.220.24.0/24 maxlen: 24
202.61.108.0/24 maxlen: 24
2001:df1:1fc0::/48 maxlen: 48
2001:df1:2040::/48 maxlen: 48
2001:df1:20c0::/48 maxlen: 48
2001:df1:2240::/48 maxlen: 48
2001:df1:22c0::/48 maxlen: 48
2001:df1:2740::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32831 (0x803f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 19 13:05:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65819509-c0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:39:0b:b3:0e:92:d5:95:56:bd:1b:85:32:
89:07:6c:90:65:0e:63:62:75:90:5a:e0:7a:a1:68:
20:75:ad:6a:62:76:94:60:a9:a8:37:b9:f6:94:a5:
94:1f:91:7a:a8:ab:6a:54:af:c6:2b:cb:d7:59:fe:
49:2f:d4:9f:19:89:fc:00:ba:5a:ea:00:e6:51:c8:
bf:51:be:3f:80:09:c7:91:85:60:75:2e:b7:c2:00:
da:93:6f:fc:21:c6:57:47:f6:8b:ac:cd:fe:a5:bf:
d8:4f:1a:a0:9f:e6:24:7e:eb:ea:96:38:aa:fc:8c:
e5:eb:ee:05:43:59:f3:f4:14:15:07:2c:92:f9:ba:
1f:a4:b9:2b:62:be:e0:e7:5d:86:68:9a:c4:a0:a8:
ad:0d:aa:d8:f3:f1:b1:10:cd:70:d5:7b:fd:9e:9b:
58:ec:1f:5b:bd:86:99:40:94:d6:80:92:95:3b:20:
91:80:af:97:d7:39:17:b1:3d:53:2c:19:b6:db:0b:
39:28:fc:ad:8d:a2:aa:97:44:4e:c6:69:8a:c2:cc:
6f:7a:de:c6:03:f4:5a:25:00:1d:e5:3e:85:f1:51:
2c:c0:c9:8d:cd:c4:94:00:ab:98:ba:5d:72:a2:a7:
09:ae:c0:a4:0b:7b:9f:8b:48:ca:e7:e9:19:a6:fa:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6B:9B:5D:11:94:75:49:96:FB:A5:0A:C8:4D:44:5E:DD:84:53:3E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EA25679C458E11EEA7800C68C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.38.182.0/23
103.53.30.0/23
103.72.218.0/23
103.77.14.0/24
103.80.152.0/22
103.134.132.0/24
103.144.192.0/24
103.147.93.0/24
103.156.200.0/23
103.159.162.0/24
103.160.186.0/23
103.161.32.0/23
103.163.42.0/23
103.163.126.0/23
103.163.158.0/24
103.169.154.0/23
103.169.167.0/24
103.175.0.0/23
103.176.142.0/24
103.187.166.0/23
103.190.100.0/23
103.209.62.0/23
103.209.174.0/23
103.220.24.0/24
202.61.108.0/24
IPv6:
2001:df1:1fc0::/48
2001:df1:2040::/48
2001:df1:20c0::/48
2001:df1:2240::/48
2001:df1:22c0::/48
2001:df1:2740::/48
Signature Algorithm: sha256WithRSAEncryption
74:b1:2d:1e:c1:7f:2e:e7:e5:3e:52:98:e5:1e:80:67:56:18:
ae:be:3d:83:9c:77:4e:c5:b1:67:3e:29:d1:32:f7:76:ef:e8:
c9:28:08:69:89:47:13:d6:67:de:74:d8:73:ea:32:ac:63:08:
1f:ff:3a:0c:be:37:58:ff:22:16:04:08:7a:8b:d1:03:07:29:
8a:e1:eb:bb:11:8a:b6:b6:e2:fc:1b:e9:cb:91:99:fe:3f:fc:
8c:ee:4e:3e:52:23:f1:96:ec:d2:22:80:88:cf:66:13:ad:4a:
c6:95:4e:86:36:9f:6f:cf:71:1c:f8:52:ac:22:b6:88:50:11:
e7:41:61:a2:ef:66:81:00:da:b3:13:d2:7a:8b:eb:7e:2a:bd:
c2:0e:29:26:d7:92:e4:e4:fd:f4:3d:3d:46:48:24:2d:c7:3e:
4a:ce:9a:27:8e:ad:eb:8f:6a:e4:fd:0e:07:eb:eb:8d:4e:4d:
c2:56:a5:30:6a:ad:c2:82:42:54:81:d3:48:c0:b0:0e:d7:8c:
5a:73:81:8f:64:16:f4:27:96:04:41:7d:86:9e:f6:c8:3d:97:
ee:40:ff:46:e3:6d:0e:7f:67:5c:2a:f8:4a:fe:a6:d3:c6:0a:
0c:f4:9e:bd:9a:3c:ba:90:78:cb:da:ac:15:b0:6b:ec:2f:f3:
2b:e1:d1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 22 10:26:25 2023 by rpki-client on console-ams.rpki-client.org