Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9C2EBB7264DB11ED8D290065C4F9AE02.roa
File: 9C2EBB7264DB11ED8D290065C4F9AE02.roa (raw, json)
Hash identifier: OCX9WZlCUTgPDt32DZn544P2gdTDTGdUoE7D7XCRveM=
Subject key identifier: FB:D1:F8:CC:1A:AA:DF:04:F8:37:4C:65:C2:4F:B1:1C:34:36:B3:5A
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0B27
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9C2EBB7264DB11ED8D290065C4F9AE02.roa
Signing time: Tue 25 Apr 2023 09:59:21 +0000
ROA not before: Tue 25 Apr 2023 09:59:21 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 113.203.248.0/24 maxlen: 24
113.203.249.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
113.203.251.0/24 maxlen: 24
115.167.24.0/24 maxlen: 24
115.167.25.0/24 maxlen: 24
115.167.26.0/24 maxlen: 24
115.167.27.0/24 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2855 (0xb27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 25 09:59:21 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6447a479-73d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:bc:88:03:12:01:9d:41:8c:c2:f5:48:c9:
89:7d:de:11:34:43:7a:54:06:8b:6e:b8:55:dd:68:
4d:1b:9f:6b:08:ba:34:09:d0:6b:e0:03:7e:8c:cd:
15:b7:57:b8:6a:00:f7:ed:08:f9:0d:11:58:29:6a:
fa:98:bb:11:69:3c:d0:57:db:89:73:83:88:37:ad:
0d:9d:1e:a2:e9:7b:99:0f:ca:bf:6c:f8:16:b5:86:
12:24:13:28:2d:a6:de:5d:4c:3c:7d:f3:bd:eb:ad:
a0:0b:d4:7d:fb:d8:f5:e3:08:6d:a5:81:e7:3e:fb:
45:83:b2:8f:43:70:3e:0a:b4:3c:cd:1c:c8:a1:83:
73:a3:b8:56:6a:56:be:c3:da:38:0e:d1:f9:39:99:
14:98:6c:13:eb:67:91:41:21:0b:8e:e7:12:cd:49:
58:e0:b9:3d:11:7b:07:89:d8:e1:31:4f:8a:e4:96:
d5:42:a3:1d:fa:fd:fc:49:c3:07:64:55:39:97:29:
69:3c:4d:93:1d:78:0e:70:83:00:dd:ba:e7:e5:04:
98:a6:0f:a4:47:42:5d:1e:c8:8b:c5:15:42:7a:7b:
95:95:03:bf:e9:95:a8:85:43:7e:e8:e9:9b:d9:ec:
55:d6:1f:e7:31:88:7b:68:0b:63:c5:03:39:32:31:
da:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D1:F8:CC:1A:AA:DF:04:F8:37:4C:65:C2:4F:B1:1C:34:36:B3:5A
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9C2EBB7264DB11ED8D290065C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.248.0/22
115.167.24.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:61:7c:1a:9d:65:b9:63:d3:3b:45:04:ec:7e:b4:04:78:57:
04:51:91:3c:4e:c2:c0:36:66:f6:01:ab:74:8e:5c:5f:dc:10:
99:ce:bd:25:03:9a:6a:32:7e:d8:7a:61:ec:c1:42:41:89:bf:
e9:8a:ca:1f:ee:d2:d4:7f:c7:60:60:0c:f0:88:4c:8f:92:3d:
88:0e:4d:54:42:90:92:60:7a:e0:27:98:de:ea:d8:bc:9c:0b:
6f:42:85:ad:e4:25:e5:4f:a8:d3:38:d1:55:6f:c2:dd:4a:13:
a3:0e:5b:ac:40:44:64:8f:18:b9:46:a1:ec:5e:25:49:8c:90:
4c:a6:0e:81:cc:27:bf:9a:6a:75:63:65:ec:10:f9:a3:d7:b4:
1c:5e:f6:e6:ac:16:7c:5a:86:52:9f:26:15:bd:4c:45:9f:b9:
59:4e:89:71:af:6f:b2:1f:64:a4:9c:5e:1e:50:70:94:f4:82:
60:17:4c:62:dd:5d:66:39:35:f6:f2:67:c3:e2:7b:04:3d:9e:
17:b1:9a:fa:1e:c0:98:82:e9:57:3d:ff:19:99:5b:bd:10:20:
e8:ff:b5:f3:1f:1a:6c:68:38:3c:ef:bf:21:1e:0c:65:e3:81:
b9:07:26:ac:84:f2:d7:2d:82:78:24:8c:7b:0a:90:c0:a8:9b:
cb:88:5c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org