Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F2BBD0B0C44111EB9FFF8714C4F9AE02.roa
File: F2BBD0B0C44111EB9FFF8714C4F9AE02.roa (raw, json)
Hash identifier: Wkg2tk4zfc/57LR21HWoNhnpJP8XlUEPuIFJ+OnQwLQ=
Subject key identifier: C4:99:A7:27:55:0C:A4:1F:6A:45:95:59:A3:93:CC:05:0C:6B:4F:BC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7613
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F2BBD0B0C44111EB9FFF8714C4F9AE02.roa
Signing time: Mon 24 Jul 2023 10:16:35 +0000
ROA not before: Mon 24 Jul 2023 10:16:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141834
IP address blocks: 103.51.54.0/24 maxlen: 24
103.51.55.0/24 maxlen: 24
103.157.12.0/23 maxlen: 24
103.167.126.0/23 maxlen: 24
103.187.110.0/23 maxlen: 24
2001:df6:b680::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 04 Mar 2024 05:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30227 (0x7613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 24 10:16:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64be4f83-6b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:0e:f5:c3:be:26:42:5b:aa:33:b7:5f:43:
6b:67:3f:ec:c3:c4:a3:f5:4f:df:7a:d8:c6:56:ac:
df:55:fe:02:c3:19:f1:7f:cc:9f:0c:87:a6:99:48:
dc:99:74:ea:d9:66:7b:94:29:0a:45:c4:4c:c8:5a:
f9:36:2c:26:c3:3b:0d:4d:dc:06:cd:91:2e:cf:6e:
1c:c7:ea:be:d8:de:8f:bf:82:05:1d:3f:e9:2f:ae:
c6:b2:ed:ac:df:5b:4c:fb:51:e9:37:12:28:1b:98:
99:1d:63:bb:eb:40:9d:76:1a:a0:cf:2f:bf:15:e1:
c3:67:b7:f1:c1:54:4a:4d:33:f5:19:c2:2c:f1:d6:
70:9e:e7:4f:01:7a:b6:d1:92:d8:29:cc:76:82:70:
a4:12:7f:d2:44:74:2b:a8:8e:71:fe:5d:02:af:a9:
4c:d0:e5:ed:96:ea:47:99:a4:f6:ee:f7:3d:e7:44:
98:65:a1:7c:60:6f:29:8f:90:8d:60:b2:ee:01:4a:
ce:f9:d8:74:67:14:68:55:26:66:45:5c:c4:3e:69:
2b:2e:e7:6b:12:99:6d:2b:a3:cf:10:75:0b:1b:0e:
f6:9d:30:f9:2d:d5:63:ee:90:f4:3d:8b:5b:96:42:
6f:f0:39:2e:4a:f2:ec:16:38:9e:95:f7:00:33:bc:
fb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:99:A7:27:55:0C:A4:1F:6A:45:95:59:A3:93:CC:05:0C:6B:4F:BC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F2BBD0B0C44111EB9FFF8714C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.51.54.0/23
103.157.12.0/23
103.167.126.0/23
103.187.110.0/23
IPv6:
2001:df6:b680::/48
Signature Algorithm: sha256WithRSAEncryption
76:f2:de:b6:25:c2:d0:e8:dc:50:e1:73:2a:d4:9d:1b:d6:db:
50:f7:ad:cf:e6:9b:28:0e:e8:5f:15:a4:55:a5:47:16:8a:39:
14:ec:bf:f1:0f:47:05:d2:18:92:a8:0f:f5:d4:02:66:85:69:
11:db:45:d7:ad:32:e2:8f:d6:eb:42:68:8c:f1:d2:ac:0f:75:
79:84:ba:ad:14:b4:61:1a:19:4b:84:5e:37:8f:61:4f:b7:ce:
a6:95:b5:4a:4f:a0:cc:17:84:8b:e6:d9:e7:12:d6:cf:00:b7:
69:f2:0b:9c:96:1d:88:87:1c:85:6e:9d:30:b3:86:11:b0:68:
d2:6c:43:e2:b5:4a:57:b6:03:e5:f5:9d:ef:96:5e:63:4e:4c:
3c:aa:30:c1:7d:e3:f9:5c:4a:7d:3d:91:b0:c6:a5:10:80:7d:
a8:37:85:6c:1e:40:a4:65:93:15:10:d4:99:39:3c:09:3b:cd:
68:fa:e6:07:aa:6e:66:d2:44:8f:ff:9f:9f:4e:6a:da:88:f8:
05:ba:b2:5c:05:97:40:e0:13:29:ec:d7:da:eb:d1:bc:59:71:
f8:f5:39:ab:91:77:d4:38:a9:31:61:3d:aa:4f:f1:95:e2:90:
57:0d:d4:3b:27:68:b4:7c:c2:5f:46:e6:bb:72:28:c3:ae:4b:
f5:6a:86:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 06:34:46 2024 by rpki-client on console-fra.rpki-client.org