Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8E7102D8F89211ED9061C04FC4F9AE02.roa
File: 8E7102D8F89211ED9061C04FC4F9AE02.roa (raw, json)
Hash identifier: R/GOGp2RV0ecp78t4fan1cWRFS03d/tgJcgRS7blvWc=
Subject key identifier: 87:56:01:3D:2C:41:9B:86:53:4E:00:72:87:34:B5:B6:DD:0A:CD:19
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0B98
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8E7102D8F89211ED9061C04FC4F9AE02.roa
Signing time: Mon 22 May 2023 11:19:46 +0000
ROA not before: Mon 22 May 2023 11:19:46 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 103.11.61.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
115.167.68.0/22 maxlen: 24
115.167.108.0/22 maxlen: 24
175.110.76.0/22 maxlen: 24
175.110.92.0/22 maxlen: 24
175.110.98.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.173.0/24 maxlen: 24
180.178.179.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2968 (0xb98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 22 11:19:46 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=646b4fd2-0c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:0a:b0:a7:60:1a:e0:79:56:9b:83:30:19:
b3:d3:be:43:fd:62:a3:6b:db:ae:1d:fc:5a:e6:4c:
99:c9:f1:19:b8:4d:7b:f2:21:9b:f2:48:e9:61:a8:
d8:6f:41:ef:26:90:9b:ae:7c:fe:5d:92:28:6f:d2:
3c:ce:02:b5:98:a2:0b:6d:f9:70:b6:c1:ec:03:4a:
41:64:dc:f1:a1:8d:37:d5:29:74:69:00:fb:c9:99:
37:c2:b5:02:21:a6:17:f9:4a:57:96:b3:99:56:4c:
80:80:79:4f:08:69:7d:c3:5d:e1:8e:be:e6:b1:da:
c6:ea:0e:85:8a:25:40:63:e2:8e:a3:a8:45:7b:12:
d6:f0:fb:3f:4a:26:5e:87:3e:04:f1:94:cc:f8:f7:
2b:f4:60:78:a4:74:b4:7c:6f:8e:38:35:d5:ed:a1:
23:9b:75:60:65:00:13:df:ff:70:76:8b:4d:0b:1c:
2b:47:5e:4a:68:b1:77:1d:c9:5e:d0:d3:d9:7d:22:
18:cf:72:c5:fd:a5:c9:37:2e:3c:89:31:b5:2f:ab:
3b:fc:95:09:76:ce:f2:3f:6c:c1:46:9a:1b:ad:ac:
47:69:aa:49:c0:58:46:46:25:8c:2b:60:31:c4:a5:
71:d6:08:7b:12:db:a1:32:e2:b6:a5:f1:d1:1b:52:
26:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:56:01:3D:2C:41:9B:86:53:4E:00:72:87:34:B5:B6:DD:0A:CD:19
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8E7102D8F89211ED9061C04FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.61.0/24
113.203.210.0/24
113.203.218.0/24
113.203.220.0/24
113.203.222.0/24
113.203.227.0/24
113.203.233.0/24
113.203.245.0/24
113.203.252.0/22
115.167.68.0/22
115.167.108.0/22
175.110.76.0/22
175.110.92.0/22
175.110.98.0/24
180.178.148.0/24
180.178.151.0/24
180.178.173.0/24
180.178.179.0/24
223.29.226.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:48:f8:4e:96:e8:c1:b4:fd:26:69:c4:e6:1a:0e:bb:08:96:
f5:8c:e4:a8:ec:6d:ea:73:56:d0:f8:4b:90:63:f2:ea:0c:98:
da:12:08:7e:09:f6:40:2c:bc:6b:9b:81:62:5e:7f:68:38:47:
36:fa:c4:5f:f2:24:d2:dd:92:fe:bb:6b:d1:db:53:ea:2d:27:
5a:2f:3b:84:63:62:63:08:42:6c:72:79:58:03:23:c7:07:f1:
3a:22:ae:02:ad:e4:ac:16:49:da:a7:ba:a1:63:a1:f9:69:76:
e4:fc:28:0e:14:ed:3f:fa:ec:db:4f:46:2f:a0:cb:9c:18:f8:
67:e0:55:78:0a:e4:07:03:3d:a8:6c:f1:db:cd:bc:8e:16:e4:
5f:4e:c7:84:2d:12:7c:f6:b7:e9:4b:ab:68:dd:87:4e:83:a5:
8d:30:2e:f9:fe:b5:34:25:1f:67:ee:72:ed:77:ad:ed:23:1f:
32:1d:c2:90:6b:7a:7b:b2:de:cb:5c:6b:f5:f0:bb:5d:c5:f2:
6a:5d:8f:2e:eb:8a:9d:bb:eb:51:84:8c:28:dd:f7:a3:f3:ca:
4e:e3:83:34:7d:ea:bf:6f:5e:7c:5a:0e:d9:80:17:d6:76:ba:
80:10:40:25:15:88:f8:57:32:bd:51:39:4b:5a:32:86:bf:ef:
b6:2e:7c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org