Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/986E6A78982E11EE8F7E393DC4F9AE02.roa
File: 986E6A78982E11EE8F7E393DC4F9AE02.roa (raw, json)
Hash identifier: yvZyogTNMFpIrhfyfAeul5vxr1uEPu9oirfo/NhRIkA=
Subject key identifier: BD:8B:B4:18:8D:5B:05:89:19:9A:14:04:55:21:39:81:35:D7:26:99
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0EB4
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/986E6A78982E11EE8F7E393DC4F9AE02.roa
Signing time: Wed 20 Dec 2023 21:29:32 +0000
ROA not before: Wed 20 Dec 2023 21:29:32 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 103.11.61.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.249.0/24 maxlen: 24
113.203.252.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3764 (0xeb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 20 21:29:32 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65835cbc-434b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c5:ee:21:a1:cd:3a:db:3f:bf:99:04:41:ba:
aa:16:d5:a9:a9:26:59:83:99:f1:8c:3d:75:61:11:
78:83:66:ba:c4:ca:3f:b8:77:7b:db:f9:a2:03:9c:
bf:62:1f:de:9b:dd:25:e7:93:79:fb:61:50:54:a6:
f6:3d:41:07:04:08:51:06:47:a3:a3:a2:ea:18:b6:
9c:eb:19:ba:20:a4:eb:6c:6b:72:f7:8d:3e:fb:71:
8a:de:39:9d:13:3d:3b:93:5b:82:45:59:07:b7:af:
c3:56:4b:7a:43:7e:4a:c2:aa:84:d9:b0:c6:e5:8d:
ef:e1:43:29:ad:79:05:6d:5e:0f:53:21:5d:47:c1:
8a:1f:eb:3e:9b:56:02:e8:65:b0:95:11:c7:06:9b:
1d:cd:80:20:d1:96:b0:d0:f5:2f:ab:37:7e:b6:8b:
a7:17:c9:43:c3:f3:f7:a9:33:89:2d:6a:92:de:13:
25:6c:3d:6a:e2:6a:1c:56:2c:31:82:cd:e2:f5:b5:
a3:5d:17:6b:bd:77:46:ea:49:70:57:81:1f:4d:73:
45:c3:7e:2a:ac:bf:29:a3:67:6f:92:ee:22:67:44:
99:77:70:bf:bd:2f:e6:df:7c:9e:13:69:3f:66:51:
5a:9c:c0:f6:df:bb:ff:c5:fc:51:db:a0:3a:c3:6f:
c3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8B:B4:18:8D:5B:05:89:19:9A:14:04:55:21:39:81:35:D7:26:99
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/986E6A78982E11EE8F7E393DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.61.0/24
113.203.210.0/24
113.203.220.0/24
113.203.228.0/23
113.203.244.0/24
113.203.248.0/23
113.203.252.0/24
113.203.254.0/23
180.178.165.0/24
180.178.177.0/24
Signature Algorithm: sha256WithRSAEncryption
73:b3:f5:6f:d6:ce:3c:f8:9d:d1:63:ac:58:dc:ff:47:49:b8:
54:46:81:ad:17:a5:54:25:a0:a1:c8:6b:8b:31:5a:d2:de:09:
c1:73:06:02:a2:69:63:a0:a2:ba:4b:32:a1:91:51:21:ed:f1:
de:24:b9:60:b6:fc:5f:70:15:60:f8:f1:60:2b:d5:7d:d8:a4:
73:41:ca:f0:ba:64:32:b6:c0:57:97:09:22:c2:7f:00:ed:e1:
b4:10:fe:2e:7e:43:7a:5b:3f:d8:aa:9b:ed:54:98:8d:07:ea:
dc:f3:a6:20:20:9a:b5:09:66:e3:cd:1e:5b:5f:c7:c0:58:5a:
dc:77:a0:4e:0d:0d:41:f1:1a:b3:19:22:e3:6f:c7:2f:ee:f9:
7a:d2:72:1d:db:c5:f3:a7:35:53:18:f1:4b:69:33:56:50:d4:
6d:23:68:06:dc:76:b6:15:ed:4e:de:a2:b6:bb:f8:be:b3:d1:
ff:b1:c4:e9:c7:9d:27:45:69:5f:22:e6:72:bd:38:bf:3e:5e:
b2:a3:9c:ff:0b:e7:cd:43:b8:ef:c4:3c:09:2c:57:40:b2:be:
91:d6:f7:2c:5f:40:21:d9:2f:63:27:de:f3:0c:8f:a1:84:77:
e9:31:f5:de:87:bf:d9:00:9b:d7:27:e3:9c:3d:c1:60:09:21:
52:83:e1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:44 2024 by rpki-client on console-fra.rpki-client.org