Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/33361CF832C311EEA4E75F0FC4F9AE02.roa
File: 33361CF832C311EEA4E75F0FC4F9AE02.roa (raw, json)
Hash identifier: I398JJUXjqq3xbtaqULtT8HKL7aPupXCnT2LCE2sUao=
Subject key identifier: 55:E5:C6:C7:E1:CE:B9:B7:52:E7:ED:DE:00:DE:97:86:88:15:5E:D5
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0C9C
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/33361CF832C311EEA4E75F0FC4F9AE02.roa
Signing time: Fri 04 Aug 2023 12:34:05 +0000
ROA not before: Fri 04 Aug 2023 12:34:05 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 207084
IP address blocks: 113.203.210.0/24 maxlen: 24
180.178.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3228 (0xc9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Aug 4 12:34:05 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64ccf03d-53d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:53:85:01:35:82:ba:2b:c9:85:b7:fa:e1:
48:7e:8a:21:3e:bf:23:d7:c5:5d:1c:da:55:08:c1:
1b:4d:6e:0e:28:5c:2e:d4:d7:f1:f8:e1:2b:ed:24:
54:df:51:54:65:5a:be:d3:aa:b8:b9:60:81:c5:3b:
50:69:07:ca:50:1c:a9:e0:1c:b6:5b:b7:1e:03:83:
42:ac:e7:0e:87:f8:80:2d:be:c4:8e:8b:e0:d7:68:
17:05:29:b0:02:29:2f:2b:e2:90:d0:11:f1:69:cd:
6c:34:0c:a0:fb:a2:bf:cc:55:a6:fc:8d:d3:09:d0:
c4:37:f1:4a:fc:ea:57:a4:8e:be:4b:e0:2f:8e:66:
5d:25:11:ae:a8:e4:93:52:d2:bb:40:f0:17:2d:bf:
d1:62:22:f7:5a:e8:c0:a2:f8:8a:cb:98:98:2e:ad:
6e:8f:5e:c2:1e:5f:38:69:5a:da:a2:c3:e1:46:e1:
bc:3a:2a:11:c7:5b:47:db:aa:80:9a:68:f3:bf:24:
2e:b7:30:c1:dc:68:5d:d3:25:07:78:d1:a7:08:35:
b4:e5:52:1e:cd:14:82:3f:0c:71:47:e7:80:3d:12:
25:bf:d6:22:22:43:eb:9f:45:4a:4b:76:d5:da:44:
5a:a5:14:bc:b4:cb:b4:ec:f0:fc:9f:77:0c:58:74:
19:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E5:C6:C7:E1:CE:B9:B7:52:E7:ED:DE:00:DE:97:86:88:15:5E:D5
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/33361CF832C311EEA4E75F0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.210.0/24
180.178.177.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:0b:5c:9f:8e:d5:b3:d1:50:83:b2:ae:8f:60:85:85:11:0b:
5f:aa:fe:36:af:94:19:79:28:f5:1d:74:b1:8a:77:21:83:6d:
7c:88:7d:f6:88:ae:03:fc:fd:ab:06:37:30:e3:d7:67:22:86:
d3:a4:26:4e:21:09:d6:7b:f8:8e:62:4c:6e:6e:56:8d:d3:38:
79:1f:46:ae:36:72:a4:ce:c2:59:a0:a7:6c:1b:c9:46:c4:2c:
70:5f:6d:0d:43:2d:44:c4:94:93:ed:b8:61:d2:38:8c:d2:da:
a5:d4:4a:19:99:f5:98:64:2a:c1:3f:96:02:80:cf:16:08:d8:
9c:0b:57:fd:f5:af:66:03:9b:17:29:75:2e:ed:3e:14:c7:78:
96:50:1f:0c:fe:84:11:65:a7:6a:e9:1a:a7:78:d3:1b:f2:15:
c6:4f:59:d2:dc:0e:a0:26:72:c1:ee:b8:62:e3:46:fb:4f:13:
ea:98:dc:1d:b9:c5:5d:b7:1b:f6:6d:23:58:dc:61:b1:9b:48:
e7:d4:ae:26:28:a1:ad:dd:5e:45:22:3f:45:af:49:61:34:c8:
2c:a9:cf:22:39:25:bc:c5:c2:fc:a2:85:65:94:a9:69:0d:7c:
e0:36:5d:12:82:4f:b5:8d:f8:86:3c:0e:a3:5f:ab:f3:00:08:
7f:08:c2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 10:51:28 2023 by rpki-client on console-ams.rpki-client.org