Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5103E576EE8511ED90E30C41C4F9AE02.roa
File: 5103E576EE8511ED90E30C41C4F9AE02.roa (raw, json)
Hash identifier: s5yBUdkZVEDtsukWPVheqLnn5mx+MzHxDuPiulVKSQE=
Subject key identifier: 9D:7F:0E:46:05:E5:E0:87:4A:6A:31:0F:B4:D8:63:2A:1A:D3:12:BE
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0B83
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5103E576EE8511ED90E30C41C4F9AE02.roa
Signing time: Fri 12 May 2023 12:09:15 +0000
ROA not before: Fri 12 May 2023 12:09:15 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 9387
IP address blocks: 43.254.12.0/22 maxlen: 24
103.11.60.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2947 (0xb83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 12 12:09:15 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=645e2c6b-f901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6b:31:31:be:10:7b:bf:01:42:8d:44:d0:90:
06:17:36:c4:a2:cb:ad:d6:c0:75:d7:5b:40:a9:1e:
54:03:71:e9:61:40:7f:bf:fb:5c:82:2e:1d:ae:09:
46:21:53:cd:cc:ef:73:2f:7e:e3:e4:89:ae:40:69:
64:05:e0:ae:eb:c9:f5:4e:de:26:67:43:69:52:2b:
7c:1d:08:79:d3:b4:0b:b6:3b:65:69:35:af:86:da:
31:fd:48:8e:34:28:33:90:95:8c:8b:c0:aa:7a:2a:
31:27:19:f9:21:72:01:a3:cc:1c:fd:90:01:f0:03:
cc:63:1d:77:7c:94:b8:94:74:75:62:f0:3d:b8:c3:
58:fe:08:f4:81:64:22:d0:d1:66:9c:76:47:b0:62:
12:63:08:1c:88:90:29:12:fa:98:f8:7d:de:0c:5c:
74:95:90:03:f2:82:a8:e3:f7:a6:a2:1f:2b:7d:66:
66:b1:8c:a6:59:fd:ce:40:17:d9:18:85:cf:ef:78:
f1:5c:84:f4:ac:5c:3d:81:f3:42:48:b8:76:7f:9f:
26:f2:7f:c9:c3:48:0d:32:6f:ee:ed:f7:4e:a4:a8:
46:06:37:35:62:4a:90:92:1f:44:73:b3:64:74:f5:
f5:ec:4f:51:5d:5f:b6:2c:bc:55:1f:05:5c:19:35:
15:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7F:0E:46:05:E5:E0:87:4A:6A:31:0F:B4:D8:63:2A:1A:D3:12:BE
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5103E576EE8511ED90E30C41C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.12.0/22
103.11.60.0/24
113.203.208.0/23
113.203.211.0-113.203.216.255
113.203.219.0/24
113.203.234.0-113.203.240.255
113.203.243.0/24
180.178.128.0/23
180.178.132.0-180.178.139.255
180.178.149.0/24
180.178.161.0/24
180.178.164.0-180.178.168.255
180.178.170.0-180.178.172.255
180.178.174.0/23
180.178.178.0/24
180.178.180.0/22
180.178.188.0/22
223.29.227.0-223.29.231.255
Signature Algorithm: sha256WithRSAEncryption
79:ea:64:89:14:a1:ef:cd:04:f9:a1:d5:5b:f3:4c:f6:35:17:
88:e6:71:c7:98:4c:16:03:f1:8b:2a:93:78:3b:81:79:be:4f:
8f:f5:2e:88:a2:93:03:29:e1:83:12:aa:97:c1:ce:ba:5d:03:
79:df:9a:3f:10:27:a0:9f:7f:c9:0a:e6:79:d1:65:01:f6:49:
6f:7b:c4:cc:93:1d:ec:bb:f3:ee:05:23:a6:64:37:11:56:b7:
01:15:3e:03:38:23:b5:f4:54:ed:da:74:1b:5d:60:d1:17:68:
27:9e:88:99:42:aa:9e:18:25:07:7c:bd:2d:f1:3d:68:74:45:
04:cc:cc:a1:b6:ca:54:91:7d:63:bc:c7:33:cf:5e:0f:4c:e8:
8e:7f:82:07:3a:5d:1d:70:2f:54:f7:e2:72:28:a6:58:f0:70:
38:20:ba:99:aa:da:3e:52:41:85:d5:a5:2a:a2:fe:18:80:fb:
d3:44:e7:f1:dc:cb:13:70:be:c4:79:76:d3:1d:de:69:0b:06:
4b:a2:dc:35:41:51:88:3d:a5:14:d9:58:08:e3:ad:9b:a6:2a:
b4:fa:4c:c6:2e:3c:c8:e9:43:54:7c:5c:17:70:86:9a:b1:36:
ee:0d:a6:77:32:23:d0:09:9b:5e:0c:38:d1:14:d5:ec:21:6b:
cb:8e:61:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org