Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E87D94C8B46F11EEA7BFDA46C4F9AE02.roa
File: E87D94C8B46F11EEA7BFDA46C4F9AE02.roa (raw, json)
Hash identifier: 5gR9CD3AKaMHypQWtqCtc62RMAScqUuUVlnmS/PoIsU=
Subject key identifier: 8C:80:33:A7:DA:68:25:FA:6D:E3:91:F4:4E:FE:25:EF:DE:90:10:C3
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0F9F
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E87D94C8B46F11EEA7BFDA46C4F9AE02.roa
Signing time: Tue 16 Jan 2024 13:05:23 +0000
ROA not before: Tue 16 Jan 2024 13:05:23 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 103.11.61.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 08:45:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3999 (0xf9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 16 13:05:23 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65a67f13-c3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:89:aa:3e:90:ed:23:5f:2e:59:95:31:56:
56:85:6a:0d:c2:a2:75:9f:3a:81:8c:76:06:fb:78:
24:53:95:b6:bc:13:fe:ac:cb:0d:22:b8:f4:82:a2:
71:a9:1c:0b:9b:91:d8:01:d2:a5:e4:6d:7a:53:f9:
f3:09:c9:ce:9d:73:da:c4:2f:82:88:bf:6c:0e:cf:
20:df:66:30:b6:9e:49:4f:ff:46:a0:8a:d2:2f:ba:
bf:75:27:b4:1a:ab:14:ae:e9:a6:39:46:9e:10:dd:
e4:1f:4e:ba:37:84:41:e8:df:8a:24:31:94:23:ff:
4a:0e:6c:a4:8b:db:38:2a:dd:67:c1:cc:e1:50:b5:
b4:aa:89:f4:b3:63:7f:26:33:d9:ff:6a:5a:04:18:
92:59:d9:3e:71:70:9f:77:0c:b9:07:7c:62:7d:78:
16:db:ea:40:bf:84:94:80:eb:52:b2:4e:f0:d3:1e:
29:fe:91:42:22:0a:34:58:e6:23:e5:d3:4d:07:5a:
a2:51:6c:fc:09:14:39:31:db:63:d0:be:3e:a4:e8:
91:a0:c6:cb:bc:c8:82:d3:67:1e:ed:75:00:40:03:
b7:ed:bc:69:c0:ce:6f:d4:16:24:b1:cb:64:b6:8e:
21:6d:28:6c:f4:a9:33:5e:30:c7:14:99:2c:dd:5a:
59:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:80:33:A7:DA:68:25:FA:6D:E3:91:F4:4E:FE:25:EF:DE:90:10:C3
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E87D94C8B46F11EEA7BFDA46C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.61.0/24
113.203.228.0/23
113.203.244.0/24
113.203.254.0/23
180.178.165.0/24
Signature Algorithm: sha256WithRSAEncryption
67:67:90:a5:28:22:b3:dc:93:df:f5:df:76:31:47:72:3e:7c:
f4:58:4c:ae:e3:1b:0f:98:82:48:dc:96:40:24:f8:35:f1:aa:
e4:c2:b4:a4:33:b3:d8:31:09:dd:69:69:aa:a2:e4:91:d3:4f:
2f:d3:cc:14:22:5b:ae:2b:1e:e9:94:d3:5d:aa:d0:33:8d:bf:
59:30:97:d6:5d:04:a3:47:a4:84:82:da:24:69:aa:0c:d1:6d:
7d:ce:69:cd:81:08:53:13:d8:ca:31:bf:3b:50:fa:4a:a8:f1:
d9:42:fa:3f:dc:0a:26:fb:e2:1c:db:23:f2:90:fe:a1:69:a6:
81:eb:34:37:3a:aa:69:a6:b7:ff:c9:b2:c4:e1:d5:1f:d3:f0:
f3:01:5f:9c:54:f2:2a:8c:99:98:c1:ca:33:6d:f2:f9:6b:d9:
7f:6e:81:4f:a6:05:45:cd:e9:4d:a0:0a:ac:f0:76:9b:c9:e9:
65:1f:f6:12:3e:ad:cc:5a:c5:ab:be:f7:38:07:17:ea:62:c3:
e8:d2:c3:31:0a:ef:9e:5a:43:76:af:e2:5b:44:9e:22:bc:3c:
e4:6a:24:f0:f4:19:01:2a:b7:e7:68:8b:e6:2e:55:9b:c1:b3:
cf:60:c6:ff:8e:01:78:7a:a3:f1:6f:28:74:9b:95:79:16:d5:
36:0f:aa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 12:08:00 2024 by rpki-client on console-fra.rpki-client.org