Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ECC9CC4CA92911ED91B3EF59C4F9AE02.roa
File: ECC9CC4CA92911ED91B3EF59C4F9AE02.roa (raw, json)
Hash identifier: 9pSc9Y0WJ9tnPO635yq0vAXDHb06j9eDeR9dzWRJMds=
Subject key identifier: 71:7B:D5:AF:86:FD:A3:5B:47:C3:52:7A:F8:B2:CB:6D:BE:D9:7F:95
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6F1E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ECC9CC4CA92911ED91B3EF59C4F9AE02.roa
Signing time: Wed 10 May 2023 16:37:17 +0000
ROA not before: Wed 10 May 2023 16:37:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141836
IP address blocks: 103.168.60.0/23 maxlen: 24
103.171.174.0/23 maxlen: 24
103.173.98.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28446 (0x6f1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:37:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc83c-497e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:98:6c:76:e5:bc:bc:e4:c4:b1:cb:0f:44:58:
6a:0f:db:47:b7:1d:20:93:7b:7c:e3:43:2a:01:33:
d6:e7:c2:4f:66:dd:4d:a8:4f:fd:21:8b:94:fb:40:
6c:fb:7b:6e:6a:16:d4:cf:8e:ce:6e:88:6c:94:66:
c5:4f:1f:ce:23:f5:c3:4d:ae:df:66:27:e7:c4:61:
62:20:02:be:78:a9:b2:0f:c1:e4:7d:ff:76:c1:e6:
e4:92:a5:98:2f:de:46:55:b2:9c:d1:b6:62:3f:ee:
de:13:72:42:88:a7:ca:f5:7e:ff:12:cb:09:6f:8c:
73:5d:51:59:84:94:35:0f:b3:84:f8:21:36:e7:2e:
31:2d:e5:cc:a0:72:cc:a2:07:bd:04:04:a4:b7:22:
ac:49:1f:bf:a3:09:18:f2:a5:05:31:78:0b:93:06:
69:15:5d:5a:0d:ac:01:e1:6d:e6:e6:48:96:92:c9:
f9:2e:5a:f9:7f:c9:f4:4b:a6:82:b1:5e:df:7f:28:
c3:b9:2c:29:e0:1f:e2:b5:4d:42:a5:9f:df:e1:2a:
17:31:b5:b1:36:b0:97:f3:3e:bc:70:a0:39:5d:dc:
2f:d6:94:b0:05:a0:85:32:eb:aa:b8:98:4e:be:3a:
e1:e5:31:38:63:c1:f8:93:85:f6:be:04:61:3b:fd:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7B:D5:AF:86:FD:A3:5B:47:C3:52:7A:F8:B2:CB:6D:BE:D9:7F:95
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ECC9CC4CA92911ED91B3EF59C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.168.60.0/23
103.171.174.0/23
103.173.98.0/23
Signature Algorithm: sha256WithRSAEncryption
72:ce:20:05:a5:9a:4a:29:66:4f:ce:85:65:e7:2b:b1:c2:09:
43:8e:b2:3d:89:eb:ac:8e:c5:3c:66:d7:71:62:ba:bf:63:d2:
1f:ab:75:cc:9e:2a:1e:d9:1f:cc:3f:46:d5:9c:7d:9c:8c:ed:
4e:76:3d:e2:46:ad:0a:0b:ec:cc:46:ba:4f:5f:e4:ca:ee:90:
f0:35:04:1c:d2:f8:25:ca:2d:8a:e3:d1:e7:c7:f3:2c:e5:80:
9c:46:a1:7e:ef:fa:1c:e1:9f:1a:05:ed:59:bd:11:ce:80:3c:
34:89:a1:d9:43:65:4a:0c:72:a2:a5:46:cc:31:6d:c5:30:db:
61:13:3f:1e:a9:9a:ce:17:94:f7:db:38:b3:5a:b8:c1:06:4a:
19:5e:28:54:cf:51:bd:67:c0:11:dd:a8:37:f6:9b:0d:03:07:
f1:77:82:86:f1:72:90:e5:06:ac:bf:19:46:5e:1e:2c:a7:c4:
ce:f0:39:61:bb:ce:48:3c:a0:78:7a:5d:2b:73:82:26:c9:f9:
70:e9:79:36:b5:c2:2a:0b:a1:21:2a:b6:63:24:76:fe:7a:97:
e6:47:c8:6a:47:70:f4:42:ee:38:97:9f:1d:93:a1:b1:07:9c:
a3:5a:60:32:09:2d:e8:26:e4:6d:a6:76:38:bc:17:1a:66:d6:
12:9e:a1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 06:28:18 2023 by rpki-client on console-fra.rpki-client.org