Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C1EE54DAF57711EDB54A2860C4F9AE02.roa
File: C1EE54DAF57711EDB54A2860C4F9AE02.roa (raw, json)
Hash identifier: EcwxhaomK9KkXo2/KIZFDOGsh2sA8ANWOLBkELKaJSQ=
Subject key identifier: 70:C3:FC:56:10:CF:5D:64:E3:C4:C3:F0:4C:BF:64:8E:A6:B0:95:2F
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0BA4
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C1EE54DAF57711EDB54A2860C4F9AE02.roa
Signing time: Wed 24 May 2023 10:45:07 +0000
ROA not before: Wed 24 May 2023 10:45:07 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 9387
IP address blocks: 43.254.12.0/22 maxlen: 24
103.11.60.0/24 maxlen: 24
103.11.61.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.173.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.176.0/24 maxlen: 24
180.178.177.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.179.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2980 (0xba4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 10:45:07 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=646deab3-ef88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:f5:04:67:ba:11:f8:57:fe:65:c9:f9:f4:
ac:af:31:ad:06:16:c1:95:d7:c0:b8:a5:7c:05:12:
9e:15:ee:2a:2b:d5:3d:92:a2:03:38:91:38:e9:56:
32:28:1c:c9:08:c4:3d:35:ef:96:39:9b:ab:cb:0e:
7b:8e:29:94:ec:e1:95:37:d2:1b:53:57:50:fe:7c:
9e:7b:07:39:5a:bf:29:64:d7:b9:e5:ac:0f:a3:97:
b6:1c:8d:82:c3:bf:f0:1f:b5:56:8a:b1:92:94:af:
ea:97:cf:22:48:5d:bb:32:49:57:76:7d:e5:1e:6b:
b4:46:4b:39:ad:a8:76:7c:4a:02:36:6c:cf:9e:6f:
f2:5d:19:8b:8c:41:d9:8f:2c:c2:e8:84:9f:6d:57:
3a:4d:6d:48:ff:ca:f1:40:c4:5c:6d:b1:05:c4:6b:
7a:b9:64:81:6c:ca:f3:1b:30:9f:08:4c:3e:36:03:
80:64:d3:ca:72:2d:1b:f5:bc:3c:b3:d3:e2:4d:93:
b1:b5:f4:4a:56:72:67:f7:66:08:4b:18:41:5d:c9:
6c:82:39:f1:da:d9:61:09:35:22:f9:b4:a6:8d:16:
46:79:69:0f:0e:be:6c:0c:ec:16:c6:e3:0f:6b:b5:
9f:2f:e9:85:57:40:e4:70:e9:f1:70:95:5f:a0:3a:
90:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C3:FC:56:10:CF:5D:64:E3:C4:C3:F0:4C:BF:64:8E:A6:B0:95:2F
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C1EE54DAF57711EDB54A2860C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.12.0/22
103.11.60.0/23
113.203.208.0/24
113.203.210.0-113.203.216.255
113.203.218.0-113.203.220.255
113.203.222.0-113.203.225.255
113.203.227.0-113.203.231.255
113.203.233.0-113.203.240.255
113.203.243.0/24
113.203.245.0/24
113.203.252.0/22
180.178.128.0/23
180.178.132.0-180.178.139.255
180.178.148.0/23
180.178.151.0/24
180.178.162.0/24
180.178.164.0-180.178.168.255
180.178.170.0-180.178.183.255
180.178.188.0/22
223.29.226.0-223.29.231.255
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
a1:ff:f2:bb:19:f6:a4:86:bd:c9:46:7d:f8:54:6f:dc:67:da:
5c:92:41:49:bf:a4:44:c1:cc:60:b8:38:12:a0:fd:e8:c9:32:
5b:9d:ef:34:4a:98:6f:41:25:bd:12:64:27:53:eb:11:1b:b5:
f1:3d:e0:fe:4e:78:e4:1e:f1:79:e5:88:b5:38:4e:00:fb:c0:
d6:99:29:12:79:90:84:38:54:28:8c:39:d0:bf:d8:1e:93:b4:
1b:3e:c2:1d:d0:f4:2c:65:2d:63:71:20:4b:f2:fc:6c:7c:f2:
31:e8:ec:2a:e4:57:07:7c:45:db:87:bd:5c:b2:d8:f9:d7:16:
e0:76:db:9e:3e:bb:c5:66:6d:c5:15:e8:a7:1e:c6:50:90:b0:
ed:7d:32:62:d4:94:06:fc:6e:f3:fc:73:32:ae:9a:bb:33:c5:
82:52:4f:2b:69:0e:67:3b:fb:f6:06:f0:79:df:f6:a7:2d:a0:
df:d3:6b:6f:5a:af:1e:9c:ae:19:b7:ec:bb:0d:af:87:b8:bf:
14:e3:cb:2a:b6:25:df:90:48:ed:00:4c:86:7f:d0:0d:e9:2f:
78:50:b0:53:38:7e:f5:53:95:ff:47:e2:42:20:86:b0:3d:53:
08:2c:ae:f8:8c:dd:d0:75:3b:c8:f8:a6:44:6b:53:62:27:45:
51:36:64:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-ams.rpki-client.org