Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EC31265E877711EE8470F951C4F9AE02.roa
File: EC31265E877711EE8470F951C4F9AE02.roa (raw, json)
Hash identifier: R3nQLrmfiup5tSvsy/tqjJ0mYCRmOFGKVRvurcdNXjY=
Subject key identifier: 1B:12:39:E8:21:59:E0:D1:DC:43:34:B1:F4:7E:3B:BB:AF:AD:53:F4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7E3F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EC31265E877711EE8470F951C4F9AE02.roa
Signing time: Mon 20 Nov 2023 07:39:23 +0000
ROA not before: Mon 20 Nov 2023 07:39:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150036
IP address blocks: 103.181.64.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32319 (0x7e3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 20 07:39:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=655b0d2b-4314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:72:23:f1:4d:70:ab:9c:1d:7a:73:e7:fd:
3f:7f:84:ba:40:19:cb:d4:f7:20:47:fe:32:bb:93:
69:51:bb:30:ee:10:eb:ae:26:13:e2:fd:cd:a5:a5:
5d:a0:a3:fd:f1:35:b7:66:9d:94:0c:5d:b6:e4:1a:
39:4c:c9:0d:be:ec:66:3e:a9:dc:4f:2d:96:18:53:
0a:5d:92:8b:c1:2e:43:15:65:cc:7d:81:9c:50:37:
1d:02:3b:a9:9b:87:af:79:e8:ca:14:e1:be:dd:87:
f3:30:e7:9d:17:ef:10:fb:d2:0d:13:7b:61:33:bd:
8b:31:53:57:0a:2c:6f:96:55:0d:5d:d2:9e:be:6c:
0b:86:55:bb:4e:ba:fb:93:dc:6a:d0:5a:7d:90:ad:
ce:40:13:9b:28:c4:af:35:45:3a:22:dc:ab:af:85:
8b:9a:75:b1:03:18:96:90:19:07:52:72:02:60:04:
ae:68:09:10:eb:14:ea:39:bd:4f:17:7d:ca:26:7a:
f5:85:03:d5:64:4e:d0:bc:bc:5a:ef:d7:06:2a:4c:
35:21:bb:60:91:4c:79:24:0f:36:d7:b2:31:c8:c6:
d9:72:9d:5c:3d:ee:5f:bf:79:71:d3:46:c8:0b:d6:
f2:63:fc:f1:a5:22:7e:81:e0:17:56:6a:b8:1b:fe:
9b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:12:39:E8:21:59:E0:D1:DC:43:34:B1:F4:7E:3B:BB:AF:AD:53:F4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EC31265E877711EE8470F951C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.64.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:00:e0:b7:08:7a:10:4c:4f:6c:ea:7a:0e:f9:87:70:aa:e8:
87:dc:56:d1:2c:d1:59:df:f5:12:db:6c:2c:09:2c:f8:15:d6:
e0:6c:6e:54:c5:e3:6b:70:be:e1:1f:87:64:dd:4a:56:b4:00:
33:8e:f3:da:0a:75:6f:e7:a6:35:bd:14:dc:56:07:be:8f:93:
77:6b:01:80:2f:11:1c:6e:44:f8:25:79:2f:ba:37:37:09:44:
1d:29:d1:91:21:ca:ad:6b:b7:1e:d7:c5:b2:4a:09:0a:9d:31:
f9:4a:6c:40:d3:69:2f:ad:a5:aa:1a:5d:79:d6:33:aa:63:7a:
45:7c:26:b4:b5:b1:46:54:ba:53:a4:dc:82:c5:a8:ba:9f:22:
46:95:2a:1d:43:bc:78:a5:27:5b:99:39:0d:0e:72:84:b7:b7:
9d:5f:1f:6b:b0:45:bb:cc:e6:c4:76:b3:eb:91:da:72:b9:6d:
da:70:a1:58:0f:81:0f:02:a0:b1:39:bc:a3:75:c8:ab:88:06:
8d:05:ad:84:0a:57:d0:ff:1f:2d:da:c2:e7:b9:c8:a3:79:bc:
8b:bb:01:c4:7c:a4:ac:f2:7e:a9:ff:d8:6a:a6:dd:cf:b1:a9:
4e:96:7f:cd:f2:94:02:8a:f9:97:e9:f6:6e:22:76:4e:72:aa:
b7:5c:ad:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 08:49:03 2023 by rpki-client on console-ams.rpki-client.org