Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/83A47600955111EC98F81677C4F9AE02.roa
File: 83A47600955111EC98F81677C4F9AE02.roa (raw, json)
Hash identifier: 5we1kr3JBqhSrv+k9Oshcm4coyFxfcyZsddFe259tIs=
Subject key identifier: 4F:E7:66:08:85:7A:97:50:78:3A:86:0D:1B:F9:07:0E:D3:4F:A9:C7
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0914
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/83A47600955111EC98F81677C4F9AE02.roa
Signing time: Mon 12 Sep 2022 02:59:13 +0000
ROA not before: Mon 12 Sep 2022 02:59:13 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 3561
IP address blocks: 103.11.68.0/22 maxlen: 24
115.167.96.0/22 maxlen: 24
175.110.100.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2324 (0x914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 12 02:59:13 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=631ea081-05e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:0b:ed:84:cf:58:38:7c:42:c0:79:b0:fc:
ae:11:a2:5b:6d:3a:fb:85:4f:43:3f:52:2f:60:c4:
62:94:1c:0c:cf:d4:76:2e:3a:a2:9e:de:4f:af:6e:
a4:5b:3e:d1:53:d8:8d:00:29:53:36:38:23:1c:95:
24:da:b1:39:57:a4:10:e7:57:f2:51:cd:75:b8:57:
f9:b4:0c:a2:89:49:41:2e:9b:1f:07:02:2f:37:1e:
da:bc:89:0c:35:b0:ad:dc:45:40:98:e2:85:22:65:
60:a7:9e:3a:c7:3a:41:64:84:9d:c9:2a:96:6b:2c:
0e:2e:1b:db:cf:39:5a:30:40:5b:16:1b:84:73:06:
a5:79:98:87:9c:d1:f7:0d:58:91:30:54:60:54:1d:
8e:d7:5f:1a:30:f7:8b:97:5d:d1:33:e2:20:e6:3f:
d0:ff:00:f1:28:25:29:53:6f:75:5d:e4:da:54:9e:
77:2f:15:1c:b7:62:80:af:55:8c:a6:1e:49:b6:f9:
a6:c4:4b:93:62:85:af:75:73:61:9d:12:ce:44:c6:
5f:6f:ad:80:60:5e:c2:7d:ca:fe:83:f4:4f:2f:fb:
2e:4d:6a:b8:b0:af:f3:87:be:a0:40:bb:d3:96:a4:
da:1d:60:cb:69:b2:be:d4:31:c4:01:36:6b:c6:9a:
35:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E7:66:08:85:7A:97:50:78:3A:86:0D:1B:F9:07:0E:D3:4F:A9:C7
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/83A47600955111EC98F81677C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.68.0/22
115.167.96.0/22
175.110.100.0/22
Signature Algorithm: sha256WithRSAEncryption
21:20:27:ff:37:83:68:d7:66:b7:72:8f:90:d0:1b:12:e8:ce:
87:6b:fd:dc:26:ab:71:12:93:2b:73:f6:5a:c1:40:9f:da:1b:
c9:50:b9:92:6f:9a:14:a1:d9:24:ee:33:2b:d8:d7:1b:f9:02:
ea:9b:ac:55:ff:f5:46:84:69:ea:65:0f:e0:9b:c2:8f:82:90:
a7:5a:90:95:e7:94:75:40:1a:d0:9c:7b:88:25:12:c2:70:3a:
dd:ca:06:0c:25:76:38:3d:ba:fd:56:67:6f:cf:f3:35:5c:52:
9f:62:6e:b2:e9:8f:8f:c6:96:4d:d9:ae:74:5b:13:fa:b0:90:
b6:23:83:6c:c6:23:1e:0d:aa:2d:e7:0f:d8:6a:cd:a2:06:56:
39:54:5b:74:c5:01:64:8e:26:db:cb:3a:03:75:cd:f2:bb:1f:
c4:1c:b9:d4:92:c1:aa:ef:b8:ed:24:c0:cd:96:90:bb:db:1d:
11:77:1e:bd:c3:9d:9a:ba:b4:fc:1b:2c:62:5d:f8:2c:d2:b7:
90:08:60:9c:4a:c6:f7:5c:32:ad:86:40:d0:03:bd:ea:43:e9:
15:2f:38:83:56:57:61:47:b3:9a:8c:62:b7:3d:e3:1d:80:b2:
79:c9:9c:ec:45:e0:c8:f1:a5:04:6d:c8:4e:32:da:3d:5b:7f:
01:53:86:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org