Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4FD83364EE8511ED90E30C41C4F9AE02.roa
File: 4FD83364EE8511ED90E30C41C4F9AE02.roa (raw, json)
Hash identifier: TVfGB5kJL+D0NTpXVmQ9KXSyp3qAB9ORA5bZnYwfHQI=
Subject key identifier: 21:75:A3:51:65:53:0F:A6:7B:BA:54:90:FA:1F:A4:C5:9D:9C:24:8B
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0BBA
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4FD83364EE8511ED90E30C41C4F9AE02.roa
Signing time: Wed 24 May 2023 23:25:24 +0000
ROA not before: Wed 24 May 2023 23:25:24 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 139218
IP address blocks: 113.203.244.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3002 (0xbba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 23:25:24 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646e9ce3-1bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:f9:a5:51:4b:bc:bf:ec:62:47:0d:14:bf:
1d:fd:5f:bc:b5:3c:1e:17:13:62:71:c5:13:b7:f9:
09:d6:4d:97:9e:73:a1:9a:1f:88:93:95:da:9c:6a:
0c:e8:7d:38:47:30:bd:5e:67:06:bd:9e:d3:42:c6:
6b:b0:70:07:e6:47:4e:4e:ba:b5:ea:e4:3c:e7:df:
9e:fc:6a:87:c6:bc:71:ce:8f:34:35:27:eb:df:60:
d5:5a:05:6e:de:00:fb:f2:24:2c:9f:a4:4f:42:a4:
ff:b8:76:b1:75:16:18:90:66:82:0f:e6:10:0f:9c:
eb:0e:7d:7d:b1:ee:44:15:16:15:21:15:3c:69:77:
48:85:98:6e:64:18:d9:c5:60:ee:fb:50:79:fa:f0:
3a:2a:9a:ce:85:2d:89:fa:55:e2:11:0c:42:8f:2b:
b1:0d:ec:b0:0c:2f:12:a9:34:5a:fb:38:51:fe:85:
55:50:40:a6:cf:11:d9:fa:0a:7f:91:03:79:92:29:
4e:01:3a:13:3f:6a:3a:b0:60:af:43:85:f8:dd:ec:
f8:8d:34:de:97:25:a2:4f:4c:84:93:b2:e6:aa:0d:
ea:e1:f5:ae:ae:7e:3c:45:71:44:17:a5:c1:51:07:
95:df:2b:3c:0d:d5:90:7d:fa:63:ee:ac:39:ba:b2:
19:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:75:A3:51:65:53:0F:A6:7B:BA:54:90:FA:1F:A4:C5:9D:9C:24:8B
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4FD83364EE8511ED90E30C41C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.244.0/24
180.178.160.0/24
Signature Algorithm: sha256WithRSAEncryption
84:24:c6:c6:f7:fb:c7:21:36:ed:81:1c:47:1c:0f:f4:f6:ec:
cf:81:0e:47:32:a3:5f:22:26:ee:0b:6e:03:11:d5:13:9c:3a:
b4:ac:7b:d7:0c:24:e4:68:47:b0:35:f7:f4:11:27:f6:85:90:
7b:e5:69:2f:0b:62:5a:db:35:16:c6:ab:2a:8b:2a:b2:57:73:
73:00:d0:cf:4e:1a:12:ec:f6:3a:85:72:17:ad:19:30:7a:32:
34:60:04:18:fa:d7:ad:4a:d0:05:8f:0c:10:5b:d9:55:12:c3:
f4:46:a0:ad:72:a3:f2:c8:8a:63:bb:5e:d0:2f:13:89:b9:a2:
65:6e:c6:c0:1f:1b:b8:22:e6:51:84:46:4f:f8:03:e9:d7:48:
7a:68:01:5f:cb:cc:ff:91:78:de:17:4d:85:27:07:17:a1:06:
25:b1:80:87:4b:55:80:ff:d9:e7:f1:fc:3c:1e:9f:c2:4d:81:
09:a7:cc:bb:03:55:e3:a0:9a:f8:9e:a5:ed:87:3c:45:3c:07:
36:19:dd:41:3b:2b:12:f9:d0:04:77:d3:bb:de:b7:1b:b6:d0:
74:68:ad:16:47:26:38:c7:98:58:57:44:d8:4c:b4:a0:c2:d4:
c6:c8:5a:df:3f:71:33:4b:0d:85:5e:84:96:79:6b:c6:78:95:
21:15:7f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 21:45:19 2023 by rpki-client on console-fra.rpki-client.org