Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3BF8958AE6411ECBA52C786C4F9AE02.roa
File: F3BF8958AE6411ECBA52C786C4F9AE02.roa (raw, json)
Hash identifier: sxKRA7WBHnGzeuHKxnkNZiVjM+vgmaGzJo0IytKR87s=
Subject key identifier: 79:1D:F9:62:1F:99:78:D9:E1:7C:73:BC:5B:58:3E:4C:2E:2D:57:70
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8618
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3BF8958AE6411ECBA52C786C4F9AE02.roa
Signing time: Wed 10 Apr 2024 05:54:30 +0000
ROA not before: Wed 10 Apr 2024 05:54:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134286
IP address blocks: 103.109.6.0/23 maxlen: 24
103.139.59.0/24 maxlen: 24
103.142.118.0/26 maxlen: 26
103.148.165.0/24 maxlen: 24
103.178.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 05:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34328 (0x8618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 10 05:54:30 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66162996-ec7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:23:ca:c7:1a:d5:be:86:00:99:b3:37:91:b9:
26:d1:46:80:76:3d:b0:27:42:f3:c1:1b:58:f3:b2:
d4:15:aa:94:9d:fc:8f:7b:b9:73:58:72:78:7e:91:
aa:7c:bb:bc:db:2b:05:74:ce:e5:03:eb:78:02:8b:
48:be:ce:de:58:1f:9f:62:2a:fd:0a:6b:3f:06:f5:
9b:49:30:c0:b4:d9:d0:b8:60:96:e0:2a:ec:e2:89:
70:07:94:25:c2:5d:41:58:9b:cc:c2:3d:d4:22:92:
82:63:a7:b1:60:eb:25:93:7a:6d:4f:02:7b:11:b1:
dd:23:f5:02:c0:d6:a4:09:33:4b:1b:56:86:19:c9:
dc:ed:0b:1b:88:c6:17:97:ad:63:cd:98:01:4a:c3:
bf:75:72:08:a2:33:67:2a:1b:91:1a:fe:5b:d4:7d:
2a:fa:78:aa:ef:78:e5:84:5d:2f:06:81:27:d7:f6:
f6:0a:79:8e:14:84:c5:8f:8c:66:86:0a:6a:21:11:
f8:8a:eb:4b:40:4f:f3:f6:1c:54:a3:45:7b:3c:fe:
51:c2:72:c7:9f:45:2c:ec:bf:67:a1:8e:70:53:44:
cf:27:54:f4:a1:7c:5b:79:4c:18:0a:a8:d3:27:f2:
20:79:6e:22:76:ab:a6:b1:ab:a5:ec:ad:46:93:ce:
35:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1D:F9:62:1F:99:78:D9:E1:7C:73:BC:5B:58:3E:4C:2E:2D:57:70
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3BF8958AE6411ECBA52C786C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.6.0/23
103.139.59.0/24
103.142.118.0/26
103.148.165.0/24
103.178.113.0/24
Signature Algorithm: sha256WithRSAEncryption
19:f2:eb:02:9b:c1:5f:67:2f:91:0a:09:21:f6:c3:0e:8e:41:
0d:a2:2d:2c:1e:a5:cb:ff:60:be:69:de:c6:80:47:0d:03:b2:
4b:1b:d6:ec:71:3d:a6:9d:d2:71:11:01:a5:65:ab:09:58:23:
53:d7:9e:84:02:db:1e:72:06:fe:50:d3:96:31:e5:3f:9c:a4:
81:49:2e:86:f0:a7:47:37:f2:49:41:a6:4c:ca:e8:11:c2:c3:
70:c0:9b:d3:68:c7:a9:e9:d3:f3:7b:15:f4:11:e7:c9:a0:af:
98:ed:0d:04:28:b6:ed:70:05:70:c8:7d:22:4a:21:28:36:96:
1d:f3:b8:fa:8d:2b:6c:8f:e3:f3:1b:0a:73:9a:99:a4:06:04:
12:61:49:6d:4e:45:0c:50:62:2d:a6:dd:01:c8:fa:f4:cd:60:
26:3a:e9:5d:17:03:77:76:e3:bf:09:bb:ef:be:ff:49:07:eb:
e5:9c:ef:cc:e4:f2:a5:27:30:7f:b6:ff:61:be:70:3e:1c:cb:
18:42:9e:6e:59:7e:ea:76:98:1e:11:95:e9:fa:66:ea:4c:74:
61:7e:f4:c9:1a:f7:f4:e8:43:3c:00:42:51:cd:95:f9:50:ac:
c0:ba:4b:2e:31:db:1a:d5:2e:4a:d3:1d:03:77:1b:f8:5b:11:
76:78:13:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 06:46:07 2024 by rpki-client on console-ams.rpki-client.org