Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4FEB942DE3511EBB8DFDB0CC4F9AE02.roa
File: F4FEB942DE3511EBB8DFDB0CC4F9AE02.roa (raw, json)
Hash identifier: TPVJfpx+OmlPnpE/jeQAinY0KRuVykxANEcVRvB1cCw=
Subject key identifier: 33:EE:63:F8:77:5F:C5:32:67:9B:B8:1E:E2:08:23:72:E3:72:A7:E4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7586
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4FEB942DE3511EBB8DFDB0CC4F9AE02.roa
Signing time: Fri 14 Jul 2023 05:55:06 +0000
ROA not before: Fri 14 Jul 2023 05:55:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137681
IP address blocks: 103.117.60.0/23 maxlen: 24
103.140.73.0/24 maxlen: 24
103.144.188.0/23 maxlen: 24
103.157.128.0/24 maxlen: 24
103.157.129.0/24 maxlen: 24
103.160.70.0/23 maxlen: 24
103.168.4.0/24 maxlen: 24
2401:15e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 12 Jan 2024 06:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30086 (0x7586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 14 05:55:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64b0e33a-6293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:e7:4b:fd:bb:07:1f:01:52:70:88:34:63:
f2:e0:a4:ac:73:2d:a6:0e:f6:f1:7d:28:64:8f:0c:
59:39:3c:08:48:dc:90:05:3f:74:38:8c:cb:e5:1f:
84:64:72:bb:2a:f9:bd:76:43:95:f7:df:20:e1:3a:
d7:c1:03:00:14:b5:b4:a3:26:ce:c5:e7:1e:ee:92:
3e:f0:81:45:5c:9c:d2:73:f1:d7:96:2b:72:29:e5:
ea:3c:57:74:b2:0a:c3:07:54:a0:52:06:30:03:4e:
a4:19:88:c3:ca:70:72:8d:3b:7c:4e:4a:95:b7:fa:
95:e6:6a:a2:6b:f9:94:71:7b:33:dd:a9:8f:de:c5:
0f:b9:47:11:0a:fe:9e:20:77:32:e8:75:cb:01:0a:
fe:2d:3c:54:a8:3d:dd:8b:74:02:a7:da:8a:9a:04:
35:7e:ae:be:d6:6b:99:a8:62:63:94:7f:63:67:8b:
04:2f:20:ba:9d:16:33:71:fe:30:a0:4f:77:50:41:
fe:86:52:20:5a:90:a6:65:44:7a:36:31:86:f1:ff:
c0:b7:02:99:b6:c2:de:70:f9:56:32:fc:69:d3:4a:
8b:bd:f8:2e:8e:77:3d:a0:22:23:66:ee:dc:ce:99:
6a:fa:81:f2:99:e0:84:af:ac:f2:3e:03:6a:bb:44:
01:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EE:63:F8:77:5F:C5:32:67:9B:B8:1E:E2:08:23:72:E3:72:A7:E4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4FEB942DE3511EBB8DFDB0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.60.0/23
103.140.73.0/24
103.144.188.0/23
103.157.128.0/23
103.160.70.0/23
103.168.4.0/24
IPv6:
2401:15e0::/32
Signature Algorithm: sha256WithRSAEncryption
5c:cf:80:f3:2e:dd:ff:28:b8:90:48:99:31:3e:1d:b1:96:63:
b3:f0:c3:19:5d:7c:f1:90:c2:e2:c1:c1:5a:23:9f:e2:74:e3:
39:9b:da:70:13:f7:80:bb:f5:ba:b9:3e:2c:e7:8f:3f:fe:ac:
1b:ac:28:da:7e:2c:9d:e6:3d:3b:30:63:a9:79:5d:1e:c0:5f:
f8:87:da:fe:c7:10:6b:68:55:16:23:8d:d3:e7:82:02:3f:d9:
f8:2e:5f:c6:bd:94:1c:22:57:e8:62:60:6b:b4:65:70:44:d5:
d2:76:7d:3c:0f:08:c3:c3:8a:b8:bc:5a:8d:7a:69:3c:3b:15:
39:e2:1d:f2:8a:ac:79:d2:8d:ec:f9:93:7e:b2:98:96:04:2c:
66:61:22:17:2b:c8:ac:c3:36:25:76:d6:60:17:54:6c:22:99:
0f:52:af:5a:87:5b:ab:6c:a4:c7:13:8d:65:63:1d:82:8d:54:
44:58:f6:a0:4e:e2:9b:1e:a9:56:b6:95:52:25:8f:9d:ef:cc:
b3:3f:c0:27:2b:e0:91:3f:b5:b7:18:a4:92:a5:b2:6b:58:fc:
85:30:32:f8:0d:1b:58:b7:13:57:a7:eb:a5:89:ff:84:a7:9f:
49:79:ee:e5:72:cd:e9:77:58:73:a6:c7:5e:95:e5:43:45:5e:
50:a7:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 07:39:35 2024 by rpki-client on console-fra.rpki-client.org