Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFAD65F48B2911EC87ED112AC4F9AE02.roa
File: FFAD65F48B2911EC87ED112AC4F9AE02.roa (raw, json)
Hash identifier: TNfI0JZKKA4Vs3MBJPUuKu8bMogYbG/BPAdc0uCkZwU=
Subject key identifier: 5D:2D:53:62:BC:0F:CA:D0:7C:A9:86:B9:E1:EB:D4:F5:56:DD:7F:AA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6AB4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFAD65F48B2911EC87ED112AC4F9AE02.roa
Signing time: Wed 10 May 2023 16:16:04 +0000
ROA not before: Wed 10 May 2023 16:16:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133707
IP address blocks: 103.47.124.0/24 maxlen: 24
103.47.125.0/24 maxlen: 24
103.47.126.0/24 maxlen: 24
103.47.127.0/24 maxlen: 24
103.86.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27316 (0x6ab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:16:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc344-d79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:48:56:cf:98:ee:0d:5c:82:c1:e7:61:d9:
cf:ce:e4:5f:b1:fe:60:db:58:e4:9c:ce:9c:62:4a:
9b:c9:6d:fe:e5:89:de:f9:d1:10:ea:61:c8:6e:26:
62:ee:62:bc:65:e2:a7:d6:6c:da:35:74:e3:aa:c6:
34:60:6a:ec:38:5f:4f:6e:4c:ae:97:dc:a1:42:87:
22:46:e7:aa:30:d5:ef:69:9a:b0:12:94:93:b4:5a:
1e:9a:7b:66:0f:01:25:91:26:83:61:b0:7c:80:d2:
9b:db:d2:0c:95:69:f9:27:21:8a:fa:97:2d:da:ee:
4c:32:e7:18:46:1f:40:a5:47:23:35:6c:a0:51:f7:
a7:e7:19:e7:bb:49:a8:71:1f:a9:89:9b:cc:b8:bb:
b8:fc:25:b1:59:48:ae:52:72:ef:11:b3:03:c5:2c:
01:96:5a:a8:22:7b:b4:b3:b7:5e:62:5f:e2:98:5e:
23:43:01:c9:48:4a:3d:5a:34:23:9b:28:db:df:54:
ab:8f:62:1b:3a:22:2d:bf:53:55:82:80:ab:58:11:
43:69:df:b3:46:a8:c6:4f:5b:41:11:4f:8a:60:ca:
e2:10:05:69:6a:ac:79:c4:a8:e4:fd:b5:22:ce:6e:
75:d5:89:d7:54:eb:95:06:c2:3c:62:b6:18:4f:94:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2D:53:62:BC:0F:CA:D0:7C:A9:86:B9:E1:EB:D4:F5:56:DD:7F:AA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFAD65F48B2911EC87ED112AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.47.124.0/22
103.86.90.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b8:b5:41:72:f4:f2:c2:f0:9c:5b:6f:42:90:ea:37:b1:fb:
34:2c:fe:7a:59:83:5c:3c:35:31:65:6c:5f:2b:d4:26:97:04:
84:e8:09:86:2e:e3:b9:25:76:e5:f9:c3:10:f9:9a:14:ed:e6:
e0:aa:43:40:f3:5f:fb:6c:c3:2e:aa:83:3a:8b:7a:76:25:dc:
25:d4:3b:59:21:da:a1:44:37:e6:34:8a:ef:77:89:d7:9a:b0:
ea:66:e6:14:22:1a:99:9f:a0:12:98:39:5b:ad:25:1f:a5:05:
89:ad:7e:67:d3:95:45:09:b0:11:a4:47:77:ab:a5:45:b9:94:
21:39:a7:b2:9d:a2:3e:c5:f5:4f:b9:78:86:b1:68:97:46:9d:
5b:f9:7c:c9:9e:84:35:cc:55:16:d4:58:ae:e5:f9:22:2c:a0:
c9:83:e2:db:a7:d2:15:aa:7b:56:09:ff:d9:92:a2:06:34:83:
19:9f:88:3e:de:54:1b:af:5b:31:dd:c2:c9:59:32:1c:0d:03:
c6:e9:f4:50:f0:62:bc:f0:e8:6d:7c:89:72:b9:2d:a1:02:3f:
70:07:85:95:82:9b:e9:61:dd:f8:19:96:e6:e6:d7:c8:16:a9:
31:e8:0c:14:8f:07:8f:9c:7b:c2:b8:64:4c:2f:34:c5:b6:17:
a6:01:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 11:48:58 2023 by rpki-client on console-fra.rpki-client.org