Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/2CF48C420E8A11EE92309575C4F9AE02.roa
File: 2CF48C420E8A11EE92309575C4F9AE02.roa (raw, json)
Hash identifier: fILoWHHRhfjMxIbT3BzhtQjJyVb47ylt3la2b58oLMg=
Subject key identifier: 14:2B:29:98:63:F3:A8:49:E8:8B:D0:D9:52:42:13:56:7D:2A:F6:18
Certificate issuer: /CN=A919AC27/serialNumber=F62FCB3A08DE55C897B1EA080FF1CC9D8B9BD8D5
Certificate serial: 0174
Authority key identifier: F6:2F:CB:3A:08:DE:55:C8:97:B1:EA:08:0F:F1:CC:9D:8B:9B:D8:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i_LOgjeVciXseoID_HMnYub2NU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/2CF48C420E8A11EE92309575C4F9AE02.roa
Signing time: Mon 19 Jun 2023 10:15:12 +0000
ROA not before: Mon 19 Jun 2023 10:15:12 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 7468
IP address blocks: 103.181.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AC27/serialNumber=F62FCB3A08DE55C897B1EA080FF1CC9D8B9BD8D5
Validity
Not Before: Jun 19 10:15:12 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=64902ab0-65c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:b2:41:ad:91:2f:8c:29:41:38:c5:49:18:
c8:0f:ef:a0:ae:b1:4b:c7:af:ba:5d:79:b4:9e:85:
46:cc:1a:7a:fe:44:63:cb:72:16:58:0c:98:4f:36:
29:95:d0:93:b7:7e:da:28:48:74:7c:b9:ca:0a:2d:
4e:08:d1:e1:b7:be:0b:b0:ef:2c:fa:13:9c:37:91:
ed:d8:89:bb:01:22:ed:17:3e:3e:e8:1c:21:ae:e9:
47:dc:dd:1a:99:92:e2:75:f2:53:6e:99:af:5b:d9:
49:cf:5e:6a:0d:77:9f:74:be:07:51:ad:08:3f:5d:
f2:0a:58:1a:98:8e:c9:a3:c6:0f:b5:37:0a:65:07:
4f:f7:e9:fd:d4:47:ab:77:ef:5f:55:63:cf:de:4a:
01:98:e0:90:75:70:63:8e:38:81:5e:78:1b:e6:72:
a0:43:05:29:3e:9b:6e:36:f7:c9:45:5f:24:83:00:
48:87:40:8e:db:0e:98:40:fd:85:29:fa:86:6a:7a:
77:65:8a:3d:08:54:8d:a3:5a:0a:f2:7f:0d:2a:e0:
4d:da:02:78:54:bb:d6:b6:87:6e:65:e6:04:b0:17:
ea:4c:c3:61:cd:a6:bf:8c:69:91:9d:c2:a0:e5:96:
2e:d9:e8:ac:d7:f5:d4:0e:d3:16:5c:35:0d:a2:e4:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2B:29:98:63:F3:A8:49:E8:8B:D0:D9:52:42:13:56:7D:2A:F6:18
X509v3 Authority Key Identifier:
keyid:F6:2F:CB:3A:08:DE:55:C8:97:B1:EA:08:0F:F1:CC:9D:8B:9B:D8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i_LOgjeVciXseoID_HMnYub2NU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/2CF48C420E8A11EE92309575C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.228.0/24
Signature Algorithm: sha256WithRSAEncryption
45:4f:08:76:ab:60:a7:02:93:d0:9f:4f:70:b7:c9:e3:37:22:
84:f2:7e:80:01:23:7c:60:c8:99:97:a3:8e:b0:7e:b9:bc:89:
56:06:f2:d9:4a:b3:56:c9:f4:2c:c4:8d:99:32:ee:4f:65:f6:
0f:a1:e3:43:d7:7d:78:21:6b:88:6e:8b:44:3d:84:d8:f2:e3:
56:a9:ce:ef:af:42:de:7a:79:68:74:c5:1f:31:e4:58:8d:f2:
0c:59:8b:00:36:04:f9:a1:30:92:32:f7:63:bc:02:33:b4:92:
10:2c:6e:b5:69:5a:44:34:50:88:d4:49:70:8d:ed:fe:75:91:
a8:3e:1d:9c:7c:d5:57:65:a1:e3:69:4e:0b:66:fd:9e:3c:17:
e0:85:34:39:cb:2f:2c:c7:e5:71:42:0a:ab:5a:5f:af:ff:06:
72:e1:96:18:81:8e:83:64:3f:ec:a5:ca:8c:d0:1a:7f:bb:bf:
0c:87:67:32:08:36:ec:d5:6d:6d:68:94:76:a0:1b:45:34:e1:
25:2e:fb:18:d7:65:63:41:c7:2c:e1:89:81:e3:59:d8:6a:41:
ff:77:c0:05:55:b2:46:ee:85:ea:83:12:0e:06:a5:5c:29:d7:
1a:8f:2a:1f:35:9d:70:44:db:0c:ee:51:8e:72:8d:64:0b:71:
50:c3:3b:a5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUFDMjcxMTAvBgNVBAUTKEY2MkZDQjNBMDhERTU1Qzg5N0IxRUEwODBGRjFDQzlE
OEI5QkQ4RDUwHhcNMjMwNjE5MTAxNTEyWhcNMjQwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDkwMmFiMC02NWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvJiyQa2RL4wpQTjFSRjID++grrFLx6+6XXm0noVGzBp6/kRjy3IWWAyYTzYp
ldCTt37aKEh0fLnKCi1OCNHht74LsO8s+hOcN5Ht2Im7ASLtFz4+6BwhrulH3N0a
mZLidfJTbpmvW9lJz15qDXefdL4HUa0IP13yClgamI7Jo8YPtTcKZQdP9+n91Eer
d+9fVWPP3koBmOCQdXBjjjiBXngb5nKgQwUpPptuNvfJRV8kgwBIh0CO2w6YQP2F
KfqGanp3ZYo9CFSNo1oK8n8NKuBN2gJ4VLvWtoduZeYEsBfqTMNhzaa/jGmRncKg
5ZYu2eis1/XUDtMWXDUNouTiSwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBQrKZhj
86hJ6IvQ2VJCE1Z9KvYYMB8GA1UdIwQYMBaAFPYvyzoI3lXIl7HqCA/xzJ2Lm9jV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUMyNy9BMDBCMzc0Q0U1
N0ExMUVDQjQ4MzNENTFDNEY5QUUwMi85aV9MT2dqZVZjaVhzZW9JRF9ITW5ZdWIy
TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlpX0xPZ2plVmNpWHNlb0lEX0hNbll1YjJOVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUFDMjcvQTAwQjM3NENFNTdBMTFFQ0I0ODMzRDUxQzRGOUFFMDIvMkNGNDhDNDIw
RThBMTFFRTkyMzA5NTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnteQwDQYJKoZIhvcNAQELBQADggEBAEVPCHarYKcCk9Cf
T3C3yeM3IoTyfoABI3xgyJmXo46wfrm8iVYG8tlKs1bJ9CzEjZky7k9l9g+h40PX
fXgha4hui0Q9hNjy41apzu+vQt56eWh0xR8x5FiN8gxZiwA2BPmhMJIy92O8AjO0
khAsbrVpWkQ0UIjUSXCN7f51kag+HZx81VdloeNpTgtm/Z48F+CFNDnLLyzH5XFC
CqtaX6//BnLhlhiBjoNkP+ylyozQGn+7vwyHZzIINuzVbW1olHagG0U04SUu+xjX
ZWNBxyzhiYHjWdhqQf93wAVVskbuheqDEg4GpVwp1xqPKh81nXBE2wzuUY5yjWQL
cVDDO6U=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-fra.rpki-client.org