Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4A88A62027B811EE9C1D1658C4F9AE02.roa
File: 4A88A62027B811EE9C1D1658C4F9AE02.roa (raw, json)
Hash identifier: 1X4Bbfe2/PpLfFyFTKrAc3AD7bw0oZ0Jt3sgtNmkQms=
Subject key identifier: 48:CF:D4:0A:6A:1F:13:EB:F1:A9:0E:73:B9:BF:4A:71:F4:AA:B2:CA
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0C84
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4A88A62027B811EE9C1D1658C4F9AE02.roa
Signing time: Fri 21 Jul 2023 11:18:17 +0000
ROA not before: Fri 21 Jul 2023 11:18:17 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 9387
IP address blocks: 43.254.12.0/22 maxlen: 24
103.11.60.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.248.0/22 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3204 (0xc84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 21 11:18:17 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64ba6979-0bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:fd:10:dc:96:1a:17:32:1a:7b:e2:b8:b9:
71:92:09:73:61:d0:da:9b:f6:0c:da:f5:3e:cc:fc:
6a:9a:28:59:ce:b0:ed:b4:1c:1d:43:02:32:a8:ea:
01:cd:6f:15:5e:5f:ff:87:d2:ef:a9:c1:03:ba:b6:
1e:bb:9e:8d:e9:73:65:28:10:34:b3:e5:22:e2:19:
55:2d:31:69:7f:fd:f6:c6:cc:12:7b:98:d8:40:fa:
3e:11:d1:16:e1:ce:ee:1b:26:b8:fa:d4:01:a3:ba:
63:2e:49:ee:9d:b7:e6:b6:b9:31:41:94:81:5b:57:
57:86:23:4e:60:df:8d:f8:a0:81:ab:51:3d:a1:23:
1f:b9:85:4e:71:c7:5d:04:dd:53:cd:d1:f9:ed:12:
db:b6:07:5c:a5:eb:a1:51:cf:01:3d:a5:f6:e9:96:
18:c9:70:2d:d5:d1:c5:f3:e7:b8:f4:a4:55:c6:a3:
a7:ec:be:d5:a7:1e:0e:23:60:13:5b:86:8a:30:92:
0c:79:8a:d4:f7:88:f4:37:ba:69:91:e4:51:98:e5:
dd:ba:0d:6b:56:10:1a:cc:30:dc:d1:36:d9:60:3d:
4c:a7:f4:6d:38:5c:6a:78:6f:82:36:cc:c3:9a:f3:
99:ad:77:4f:04:68:46:13:28:88:58:df:e1:bb:29:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CF:D4:0A:6A:1F:13:EB:F1:A9:0E:73:B9:BF:4A:71:F4:AA:B2:CA
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4A88A62027B811EE9C1D1658C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.12.0/22
103.11.60.0/24
113.203.212.0-113.203.216.255
113.203.219.0/24
113.203.222.0/24
113.203.225.0/24
113.203.228.0/22
113.203.234.0-113.203.240.255
113.203.243.0/24
113.203.248.0/22
180.178.128.0/23
180.178.132.0-180.178.139.255
180.178.149.0/24
180.178.151.0/24
180.178.162.0/24
180.178.164.0/22
180.178.170.0/24
180.178.172.0/24
180.178.174.0/23
180.178.178.0/24
180.178.180.0/22
180.178.185.0-180.178.191.255
223.29.227.0-223.29.231.255
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
50:94:50:af:d6:78:8a:9f:2c:42:9a:1a:ba:b6:de:51:b7:66:
32:bd:cd:16:19:a4:92:a6:73:da:73:f5:fc:03:26:27:89:84:
d1:53:78:14:1a:a9:a6:a1:c8:38:ff:7d:95:b0:c1:e2:20:78:
dc:8b:1b:91:96:8e:65:6c:86:96:23:7a:fe:89:01:7f:31:52:
1c:5b:52:89:8f:c9:5d:86:21:c4:5b:14:75:a1:26:e2:12:a8:
e4:49:0c:7a:48:46:7a:f4:d9:c5:b6:f2:e1:d2:7e:5d:8f:2a:
b3:13:e1:43:f0:e2:5e:76:1a:7d:3e:69:38:e7:36:bc:c9:a7:
dd:7a:ca:a8:9d:8a:c6:81:16:3b:8b:db:f5:3a:0d:e2:ab:ca:
fd:c6:73:0b:40:5f:83:56:ce:68:56:22:e5:29:e8:bb:c1:35:
5f:f1:65:fa:29:ba:34:d5:ad:7a:f6:78:1b:bd:41:e0:4a:d3:
11:49:31:e8:88:48:cd:1b:f1:f9:d1:bd:8a:83:ce:c7:11:6b:
bc:08:16:3c:76:bb:ec:73:cb:80:6c:5e:c7:2e:04:51:17:c5:
20:d7:cf:78:0d:20:f8:f6:19:c6:e3:70:dc:01:61:ef:f2:e5:
86:7e:13:11:17:4c:22:50:78:46:ca:17:e5:65:be:73:f9:40:
ec:05:14:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 17:30:46 2023 by rpki-client on console-fra.rpki-client.org