Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/19BAFE28AC9A11EE8F2B4F3FC4F9AE02.roa
File: 19BAFE28AC9A11EE8F2B4F3FC4F9AE02.roa (raw, json)
Hash identifier: KzPnrAxWjj/dV53DQrlc9Vq2mVzcxPe6ODtkknGpoTE=
Subject key identifier: 43:1E:8B:4D:94:4C:96:DD:92:83:2E:A2:E7:A8:4C:67:8D:9A:D0:CF
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0EF5
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/19BAFE28AC9A11EE8F2B4F3FC4F9AE02.roa
Signing time: Sat 06 Jan 2024 13:47:15 +0000
ROA not before: Sat 06 Jan 2024 13:47:15 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 113.203.223.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 09:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3829 (0xef5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 6 13:47:15 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=659959e3-ab36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:fe:38:ea:20:e5:b0:59:7f:68:cb:89:8b:
ea:c1:c2:2e:9e:45:dc:36:52:04:ec:24:12:0c:46:
e4:37:d8:d2:0d:e7:59:f1:4e:45:cb:14:e2:5e:c0:
1f:d5:cf:b7:41:2d:ac:b3:ab:db:2f:bc:2b:44:d3:
ef:4f:39:3b:3c:42:c7:e6:95:1d:bf:43:66:a0:b9:
10:4c:8c:73:9e:d2:3e:76:2a:96:34:23:a5:76:ec:
44:84:ea:0a:3c:d8:1f:75:ea:14:28:fb:c8:da:2f:
c1:04:39:8a:a6:ea:e6:a5:ca:ec:a0:8c:ec:29:fb:
db:e7:c8:bf:62:b5:1c:a4:5b:10:cf:37:f9:63:fc:
a4:8c:4a:bb:97:e8:80:6e:b5:a1:12:81:29:87:e8:
d8:40:3b:b8:88:bf:74:c0:62:d6:86:37:6a:e1:86:
08:52:f9:5c:98:c5:98:e1:fc:56:e4:13:d2:b4:38:
bc:d0:32:5a:b5:d9:71:86:0b:fb:86:6d:5d:93:f8:
54:ed:5a:f1:8b:f7:e3:99:ad:d3:2c:6e:fb:2e:0b:
29:5c:0d:8c:36:a5:b2:b2:73:6a:ba:54:6d:09:a6:
49:47:6d:3f:76:ca:b5:f9:89:42:04:c8:4e:4f:b3:
59:c5:d5:4f:34:89:12:6a:42:36:05:bc:dc:56:60:
fb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1E:8B:4D:94:4C:96:DD:92:83:2E:A2:E7:A8:4C:67:8D:9A:D0:CF
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/19BAFE28AC9A11EE8F2B4F3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.223.0/24
180.178.163.0/24
Signature Algorithm: sha256WithRSAEncryption
22:b9:c3:ee:55:74:4f:a8:af:e1:bf:c3:51:d3:06:c8:ae:74:
d7:6a:50:35:df:58:05:48:2a:8d:3e:d0:af:9e:b3:57:a3:b3:
fd:87:88:5f:40:25:35:b2:7c:91:0a:c1:4e:fd:f4:91:2c:83:
cb:2b:11:dc:e2:af:48:08:25:f1:1b:8b:7f:e2:77:05:b7:53:
ab:90:19:7a:2a:79:5f:ca:7a:a8:8f:22:0e:e3:81:e6:72:2a:
5f:66:29:3b:b7:d5:94:47:da:20:5e:69:e1:02:c5:70:2f:c7:
19:81:58:09:2c:96:09:f8:96:5f:f7:0c:26:11:b7:df:d7:7a:
37:4d:40:1d:fe:10:65:ba:4f:fc:ab:f8:2e:22:2f:34:54:0f:
a7:e6:c9:a0:65:ed:2d:25:c0:77:2c:e6:09:75:a5:22:ae:ce:
f8:07:93:6a:ee:87:f9:40:9d:2a:5a:b7:42:1f:7d:88:89:60:
96:a2:b9:a4:94:3c:2b:19:06:0b:d5:77:37:eb:97:d6:28:06:
88:32:56:d6:59:25:01:51:2d:b4:e3:12:76:f1:da:72:ac:5d:
22:33:08:a2:f6:ec:6f:fe:13:2e:b1:e3:39:1b:41:a8:b0:65:
f1:e0:b0:bf:7b:de:d7:07:87:05:f5:1d:fc:cc:13:bb:ef:11:
bd:99:8c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 12:42:45 2024 by rpki-client on console-fra.rpki-client.org