Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1F0CAD929B4511EE90FF9B2DC4F9AE02.roa
File: 1F0CAD929B4511EE90FF9B2DC4F9AE02.roa (raw, json)
Hash identifier: IlflY2ylqq+cBKI/LzEtQ5Zdp7jBJckbUiSsx5Kpdcg=
Subject key identifier: 49:BA:40:9E:02:D8:E8:96:AB:D4:9E:05:1F:26:12:9C:3A:C5:6C:4C
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0E68
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1F0CAD929B4511EE90FF9B2DC4F9AE02.roa
Signing time: Fri 15 Dec 2023 12:26:07 +0000
ROA not before: Fri 15 Dec 2023 12:26:07 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 202972
IP address blocks: 113.203.233.0/24 maxlen: 24
180.178.185.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3688 (0xe68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 15 12:26:07 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=657c45df-815e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:a5:31:31:65:60:07:89:13:32:b2:d4:88:
1a:8a:41:73:a0:cf:5b:1e:28:77:c6:bf:5f:a0:b7:
83:db:4e:21:ff:69:70:29:9f:20:db:1e:c8:28:4a:
7b:c3:df:11:2c:f8:3f:cb:9f:4d:b5:8f:33:f9:2e:
0f:fa:f8:2f:59:cd:c4:42:d5:9a:98:ac:1f:53:bf:
f2:f5:3c:ec:69:a5:23:97:c0:61:13:fb:27:d4:44:
ec:c3:7e:9e:ab:d4:61:5d:d2:14:01:33:e3:a7:81:
36:7c:9b:b4:54:dd:c4:a8:31:76:f3:4f:23:c0:70:
ae:af:74:b8:12:f8:a5:58:57:ed:3d:98:99:d0:63:
92:3f:99:46:df:92:ec:f3:91:f0:eb:fc:c4:25:27:
db:09:3a:ef:9b:39:ae:4d:09:61:70:5a:0d:10:33:
14:15:53:0a:b1:b2:a5:37:8c:a7:e6:7f:10:03:ed:
e0:ac:04:fd:ef:fa:b5:1f:18:ae:a0:99:02:49:46:
98:f7:c6:20:53:c9:8f:2e:84:4e:48:71:2c:e7:a7:
af:fe:1c:b7:19:de:8a:54:b1:b2:90:e6:bc:97:6b:
e1:08:de:16:71:37:fe:53:9a:77:d8:08:e5:6a:57:
28:61:7d:c6:94:15:7d:23:a7:c7:a4:ef:b6:f8:93:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BA:40:9E:02:D8:E8:96:AB:D4:9E:05:1F:26:12:9C:3A:C5:6C:4C
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1F0CAD929B4511EE90FF9B2DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.233.0/24
180.178.185.0/24
180.178.189.0/24
223.29.229.0-223.29.230.255
Signature Algorithm: sha256WithRSAEncryption
4c:b6:b6:a5:96:fe:1f:76:dd:f5:ea:0a:83:02:a4:31:c4:58:
cc:6f:08:92:3a:18:a7:5f:e7:44:84:fe:29:cf:63:56:b1:b9:
f7:74:af:71:f0:6a:7b:dd:3e:32:ad:9e:ee:27:d2:06:cc:eb:
55:c8:71:c4:a5:58:d2:fb:7c:8a:ff:b7:e9:e9:d1:82:5b:0c:
15:86:cd:9c:c3:2e:4b:83:9d:76:c9:02:1f:97:93:fd:38:09:
97:7a:41:09:5b:5b:47:0c:c3:7c:30:4c:fd:dd:8a:a3:8c:86:
c4:6a:b8:aa:a2:d3:ab:7f:87:06:31:a8:1c:b9:1a:09:b5:2d:
8e:de:88:c6:f0:ea:c0:74:56:e0:7a:56:2a:0c:0e:14:44:a6:
4b:50:b2:61:60:ea:34:c5:11:db:0b:5d:df:7d:07:3a:58:68:
cf:19:ba:e9:a5:7a:05:6d:bb:61:af:45:69:ee:fd:89:73:07:
fe:08:06:c4:3b:92:47:86:6e:3d:7c:39:c3:8f:f7:bc:0b:a8:
9e:c6:d6:32:21:13:2d:8b:8f:28:9b:44:bf:96:77:e9:ce:e5:
b8:57:62:44:b9:44:bd:dd:5e:74:ea:15:f1:0a:51:f5:79:f9:
69:ef:61:4b:55:29:e8:53:bf:88:6f:32:be:e5:a4:ca:6d:5b:
7c:26:89:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 16:21:21 2024 by rpki-client on console-fra.rpki-client.org