Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6F267EF057EF11EE9CCB0549C4F9AE02.roa
File: 6F267EF057EF11EE9CCB0549C4F9AE02.roa (raw, json)
Hash identifier: ZGZHR2MdRpVvywvhszxCFQa8AdL7TNPaBTvoEWaOge8=
Subject key identifier: CE:CA:46:A1:CA:10:35:A8:94:A7:95:36:B7:B7:A9:62:45:D3:DB:EE
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0D5A
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6F267EF057EF11EE9CCB0549C4F9AE02.roa
Signing time: Tue 03 Oct 2023 11:41:11 +0000
ROA not before: Tue 03 Oct 2023 11:41:11 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 399045
IP address blocks: 113.203.208.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.249.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
113.203.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3418 (0xd5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 3 11:41:11 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=651bfdd7-6dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:fc:10:b5:9e:cf:56:86:ce:8c:bf:f7:69:
6e:af:ec:f8:0f:d8:69:ba:67:8e:89:de:f2:a6:cb:
81:03:93:6f:53:fb:d9:a3:f1:9b:41:b7:77:b9:73:
3c:5a:f4:5b:f3:cc:0f:ca:2f:99:6b:8a:45:78:d6:
e7:f9:3a:33:17:a7:95:36:36:5b:6a:99:13:dd:27:
aa:d4:e0:3a:60:ea:0d:fc:1d:40:3f:a7:d3:db:bf:
72:53:00:d3:05:57:05:ea:56:ff:00:34:10:6e:80:
d7:bd:16:11:2f:be:5c:0e:87:5a:8f:3d:28:c7:0d:
95:ce:f1:5e:dc:e3:d2:57:9b:b7:97:c9:33:db:56:
70:63:29:21:25:85:90:e8:7d:16:e6:ec:ee:23:71:
46:c1:cf:fb:09:75:25:f6:b7:04:32:9c:84:9e:a6:
07:88:46:5c:db:87:5b:a9:57:e6:fc:de:ac:22:f5:
0d:4a:12:e9:0c:36:01:41:fb:bf:24:02:8d:35:aa:
03:37:9a:8c:8f:03:e0:3e:d5:fc:96:26:70:44:5e:
ab:9f:33:e9:5d:c5:b2:b3:eb:7c:c7:09:5e:84:d7:
3c:a4:d5:1e:04:b6:bc:32:99:40:12:1a:1a:1d:05:
23:1a:97:60:80:fa:88:b9:63:f9:90:8f:36:01:98:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CA:46:A1:CA:10:35:A8:94:A7:95:36:B7:B7:A9:62:45:D3:DB:EE
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6F267EF057EF11EE9CCB0549C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.208.0/24
113.203.231.0/24
113.203.249.0-113.203.251.255
Signature Algorithm: sha256WithRSAEncryption
7a:2f:db:dd:29:0c:45:e3:28:10:3b:bb:84:2f:a1:5a:18:e4:
cf:b9:e4:52:05:ef:49:27:1f:7c:f4:cc:ab:06:87:49:86:be:
21:97:cb:d2:de:bc:cf:43:a0:98:cf:7a:2a:04:04:20:64:7d:
a9:c4:de:1e:b1:c2:d3:14:b2:8d:cd:21:ac:a7:ae:b9:88:d9:
ea:b0:09:27:2d:59:b8:a6:25:84:fa:cf:76:9d:e6:5c:f7:80:
41:98:60:eb:35:30:98:01:7f:f6:d9:40:53:07:84:f0:5b:29:
33:db:3b:b3:be:20:a0:37:a4:53:b1:b3:5f:eb:3c:c4:87:e2:
15:d7:de:eb:f2:c6:8a:d9:df:11:96:16:bd:63:f0:14:ce:39:
91:5d:04:3a:a1:22:48:7e:26:17:29:b5:75:f6:0e:3b:fa:0d:
0c:bf:bf:44:57:92:b5:44:b2:8d:51:c8:85:a3:e6:fa:62:d7:
4e:b0:9d:a7:48:1e:63:5c:3c:c4:79:16:dd:00:a6:30:52:6e:
56:75:72:bd:9a:a7:c9:d1:0b:17:9d:a3:19:c1:ab:63:2f:70:
68:9c:85:46:ad:a7:1f:29:3e:ae:ae:aa:28:54:02:f3:8a:e8:
fd:cb:e2:9f:1c:26:38:6b:e0:b3:46:60:04:40:25:5a:db:f9:
b8:31:5a:a1
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICDVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMxMDAzMTE0MTExWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTFiZmRkNy02ZGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuX/8ELWez1aGzoy/92lur+z4D9hpumeOid7ypsuBA5NvU/vZo/GbQbd3uXM8
WvRb88wPyi+Za4pFeNbn+TozF6eVNjZbapkT3Seq1OA6YOoN/B1AP6fT279yUwDT
BVcF6lb/ADQQboDXvRYRL75cDodajz0oxw2VzvFe3OPSV5u3l8kz21ZwYykhJYWQ
6H0W5uzuI3FGwc/7CXUl9rcEMpyEnqYHiEZc24dbqVfm/N6sIvUNShLpDDYBQfu/
JAKNNaoDN5qMjwPgPtX8liZwRF6rnzPpXcWys+t8xwlehNc8pNUeBLa8MplAEhoa
HQUjGpdggPqIuWP5kI82AZgrTQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFM7KRqHK
EDWolKeVNre3qWJF09vuMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNkYyNjdFRjA1
N0VGMTFFRTlDQ0IwNTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E
JDAiMCAEAgABMBoDBABxy9ADBABxy+cwDAMEAHHL+QMEAnHL+DANBgkqhkiG9w0B
AQsFAAOCAQEAei/b3SkMReMoEDu7hC+hWhjkz7nkUgXvSScffPTMqwaHSYa+IZfL
0t68z0OgmM96KgQEIGR9qcTeHrHC0xSyjc0hrKeuuYjZ6rAJJy1ZuKYlhPrPdp3m
XPeAQZhg6zUwmAF/9tlAUweE8FspM9s7s74goDekU7GzX+s8xIfiFdfe6/LGitnf
EZYWvWPwFM45kV0EOqEiSH4mFym1dfYOO/oNDL+/RFeStUSyjVHIhaPm+mLXTrCd
p0geY1w8xHkW3QCmMFJuVnVyvZqnydELF52jGcGrYy9waJyFRq2nHyk+rq6qKFQC
84ro/cvinxwmOGvgs0ZgBEAlWtv5uDFaoQ==
-----END CERTIFICATE-----
Generated at Wed Oct 4 10:26:03 2023 by rpki-client on console-ams.rpki-client.org