Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/26C4A2B8AC9A11EEBFA95D3FC4F9AE02.roa
File: 26C4A2B8AC9A11EEBFA95D3FC4F9AE02.roa (raw, json)
Hash identifier: 2JWCUUKIplqOKw0QEhdcsQEsZ79OZZ0ABFJMJ09x1iE=
Subject key identifier: 1A:E1:45:F8:4B:9C:9A:A0:5D:A8:1C:D4:75:29:79:17:99:AE:C5:A4
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0EF7
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/26C4A2B8AC9A11EEBFA95D3FC4F9AE02.roa
Signing time: Sat 06 Jan 2024 13:47:37 +0000
ROA not before: Sat 06 Jan 2024 13:47:37 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 103.11.61.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.252.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 11:43:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3831 (0xef7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 6 13:47:37 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=659959f9-23f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:f8:94:6e:6d:03:96:68:db:06:91:0b:74:
4e:d9:4d:fe:52:5a:39:fa:ca:bc:e3:20:9d:fd:25:
4f:cb:67:b9:c1:60:48:df:8b:10:71:4a:c7:db:c7:
80:74:d4:de:dc:38:f4:c0:19:c1:b7:9b:e6:4b:25:
dd:13:97:4a:c7:c3:68:7f:3a:88:8a:aa:42:89:13:
74:5f:94:95:40:5e:f1:55:5c:45:6c:3e:31:8a:8d:
41:93:70:16:96:a5:5d:bf:36:a9:dc:93:86:18:b9:
37:fc:d1:c9:43:81:d9:29:b2:e9:92:2a:e1:0e:31:
26:7a:0d:57:60:d0:e9:b4:e7:9b:fa:eb:32:f2:a4:
0b:cd:0e:31:5a:2e:e2:45:77:94:7a:a6:cb:94:c4:
4f:a8:99:cb:33:8f:10:5a:43:02:6f:3a:f0:ae:98:
5a:1d:c8:2f:b9:d0:92:8a:48:fd:a8:b7:91:62:e8:
fb:27:0a:82:f0:50:d3:db:a9:fb:dc:8c:fc:4a:c8:
02:20:ec:62:6a:db:d5:cb:ec:aa:de:1e:84:ed:b7:
d8:44:de:2a:d1:a1:6b:ce:0a:db:a0:8c:e1:fb:6a:
03:83:ac:0f:01:77:88:0b:57:8d:46:b9:45:58:4c:
ae:21:78:9c:98:49:7d:60:10:fd:00:7d:77:83:ed:
22:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E1:45:F8:4B:9C:9A:A0:5D:A8:1C:D4:75:29:79:17:99:AE:C5:A4
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/26C4A2B8AC9A11EEBFA95D3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.61.0/24
113.203.210.0/24
113.203.228.0/23
113.203.244.0/24
113.203.252.0/24
113.203.254.0/23
180.178.165.0/24
180.178.177.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:7b:57:98:91:41:8d:21:0f:7a:c1:96:87:c2:fe:73:d3:be:
f7:7d:b6:bc:cf:e5:01:1c:c4:b3:21:7b:45:82:78:88:d8:ae:
bd:26:f8:ea:69:5f:74:4f:c2:85:83:d6:2f:53:7f:d7:74:80:
9f:c3:f7:d6:c0:15:c7:71:04:93:dd:3b:f8:9a:57:32:e8:cc:
bf:e0:42:8c:b9:0f:46:ce:d3:40:09:e2:5a:09:ec:e6:2e:d3:
c1:5d:bc:f0:d7:fa:49:25:e5:76:d4:f0:d5:e1:3e:8a:2f:80:
d8:bb:dd:5c:ee:84:e3:42:99:2a:f5:d6:96:1e:ae:c4:16:03:
63:95:03:b1:64:c3:27:60:1f:e3:26:a9:97:52:66:a7:70:87:
23:2c:1e:19:28:41:4a:07:00:85:d0:76:4e:71:29:5d:b2:b3:
50:63:6a:26:b6:1f:e0:da:80:55:a9:0d:21:2b:38:9f:2a:80:
48:2c:1c:1e:08:ba:d3:42:15:9d:ce:1d:50:0a:fb:44:d2:58:
fb:78:00:77:06:86:9a:06:60:ea:8a:43:d4:11:9c:a7:07:64:
30:a0:80:b0:b1:dc:a9:21:93:1c:49:79:8c:c3:9f:b2:4b:c6:
2e:32:83:a2:7a:2f:be:7a:c6:32:5c:87:6c:ca:95:c4:75:82:
01:ad:d2:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jan 12 17:10:07 2024 by rpki-client on console-fra.rpki-client.org