Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/38BA6DD4666211EC85CD6566C4F9AE02.roa
File: 38BA6DD4666211EC85CD6566C4F9AE02.roa (raw, json)
Hash identifier: j0ioyiI8IlHn8QZNSj+0Idi4LoZEPmAXevcjjEPowg8=
Subject key identifier: 42:14:9E:ED:95:FB:C7:21:5F:81:F7:01:CF:E6:F2:BE:65:73:4F:D2
Certificate issuer: /CN=A91E4D3D/serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Certificate serial: 0428
Authority key identifier: C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/38BA6DD4666211EC85CD6566C4F9AE02.roa
Signing time: Sun 04 Jun 2023 13:10:42 +0000
ROA not before: Sun 04 Jun 2023 13:10:42 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 13150
IP address blocks: 103.203.220.0/24 maxlen: 24
103.203.221.0/24 maxlen: 24
103.203.222.0/24 maxlen: 24
103.203.223.0/24 maxlen: 24
123.253.152.0/24 maxlen: 24
123.253.153.0/24 maxlen: 24
123.253.154.0/24 maxlen: 24
123.253.155.0/24 maxlen: 24
150.195.208.0/24 maxlen: 24
150.195.209.0/24 maxlen: 24
150.195.210.0/24 maxlen: 24
150.195.211.0/24 maxlen: 24
150.195.216.0/24 maxlen: 24
150.195.217.0/24 maxlen: 24
150.195.218.0/24 maxlen: 24
150.195.219.0/24 maxlen: 24
150.195.220.0/24 maxlen: 24
150.195.221.0/24 maxlen: 24
150.195.222.0/24 maxlen: 24
150.195.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1064 (0x428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4D3D/serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Validity
Not Before: Jun 4 13:10:42 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=647c8d51-73aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:9c:d5:4f:3a:65:a7:b0:d6:20:a9:07:91:78:
49:28:df:98:df:6a:b2:c0:08:e6:84:4f:0d:ba:26:
b5:18:f5:32:3e:2c:bf:f3:41:97:1a:0a:b5:4d:8d:
f3:0f:e4:36:7e:c1:2d:78:64:f3:a0:d0:b8:c6:d9:
2f:bc:2d:1c:d0:d7:de:ec:16:e6:d5:fb:50:4f:d4:
4c:5a:c3:75:f9:66:91:d1:ae:47:03:67:6f:34:65:
d6:dd:31:e9:16:02:e6:7f:f8:b1:21:40:e9:04:10:
dd:9b:7c:f0:90:66:e0:3c:bc:24:30:dd:da:14:7d:
dc:15:82:c1:98:bb:6d:63:4d:c1:1c:86:b0:b7:d9:
1e:52:7b:f8:ec:60:98:7b:7f:cc:82:e1:d8:c0:e1:
fd:12:cc:7c:c1:b8:20:db:7f:6c:8f:38:cb:a4:38:
b6:f7:f6:b6:de:91:0a:72:2e:db:65:5b:a8:1b:c4:
74:6b:4e:57:e5:a3:e0:89:66:f7:82:a3:64:14:eb:
4d:85:ca:6b:8e:e4:63:69:0c:3e:e9:1b:dc:9d:d1:
5a:d8:4f:93:b7:57:a6:1c:0a:b7:69:65:af:58:c5:
13:a5:04:20:e8:99:14:f5:7d:bd:cc:68:1f:e9:92:
e3:69:21:8a:97:36:d9:92:f9:b6:0c:c0:f2:aa:8a:
f7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:14:9E:ED:95:FB:C7:21:5F:81:F7:01:CF:E6:F2:BE:65:73:4F:D2
X509v3 Authority Key Identifier:
keyid:C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/38BA6DD4666211EC85CD6566C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.203.220.0/22
123.253.152.0/22
150.195.208.0/22
150.195.216.0/21
Signature Algorithm: sha256WithRSAEncryption
85:35:12:1f:99:88:9c:9c:96:fa:aa:59:29:f6:bc:95:cf:e5:
21:45:75:f9:23:1e:95:20:df:e1:a8:28:87:47:12:d6:9d:a6:
05:b5:07:8c:94:38:cd:50:14:45:d9:3a:54:9c:bf:1a:24:01:
f2:a9:76:92:c3:76:c4:93:fb:28:26:e5:06:cb:d2:5b:f6:44:
fe:c5:ef:df:63:15:c1:9c:21:7b:56:02:1f:5c:60:d7:e5:58:
0d:d2:88:0b:78:d2:0e:d6:03:be:f8:ce:92:ab:8f:ef:59:36:
b6:8d:ed:47:01:98:6f:f4:93:90:e3:af:82:29:ca:33:38:3c:
7c:86:37:88:70:3a:06:42:3f:77:73:90:66:e3:5a:82:0e:20:
97:ff:6b:19:f7:77:50:8d:94:d5:17:d0:11:3e:a9:b4:eb:53:
c7:27:ea:38:26:77:49:2a:81:05:ad:e9:e3:dd:bf:ee:9b:37:
00:82:26:03:39:24:36:16:1d:94:a0:fc:f3:3d:d5:ad:69:b0:
b3:cb:2c:3c:d8:13:e4:b2:ce:68:81:d0:19:ea:1a:49:10:db:
5f:7a:9f:27:ca:97:c5:84:9a:37:ba:f8:78:85:9a:1a:c9:9d:
fc:72:1e:f4:58:97:b7:92:9f:22:03:95:7e:2a:49:6f:ed:5a:
19:13:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org