Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CAC4A7641F3711EE84BB5E1DC4F9AE02.roa
File: CAC4A7641F3711EE84BB5E1DC4F9AE02.roa (raw, json)
Hash identifier: 3AVki/jXzoQQZC4Zqn/EN99+75W22RfLGtl73Dfh/LQ=
Subject key identifier: E3:F7:92:D4:CA:E6:AA:AD:30:D2:A0:86:D5:F9:16:E3:73:4C:60:69
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0C81
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CAC4A7641F3711EE84BB5E1DC4F9AE02.roa
Signing time: Fri 21 Jul 2023 10:57:05 +0000
ROA not before: Fri 21 Jul 2023 10:57:05 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 9387
IP address blocks: 43.254.12.0/22 maxlen: 24
103.11.60.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.248.0/22 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/24 maxlen: 24
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3201 (0xc81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 21 10:57:05 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64ba6480-ce20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:a0:53:dc:ab:c4:6c:44:b2:91:80:2c:e8:
90:6d:86:67:b5:8f:f4:4e:7d:27:79:0c:4c:2c:26:
75:7b:eb:6d:34:ed:6d:cc:8b:d3:0d:d9:8e:fe:8d:
c6:50:8c:d0:0e:4f:52:44:51:ad:44:f4:81:48:55:
3c:c0:cf:8b:e3:8e:19:47:a2:32:18:3e:65:41:86:
78:4c:85:e0:63:34:66:14:58:ba:e2:a0:91:a6:4f:
46:a8:7a:75:c5:53:35:3f:b8:c1:f6:f1:2e:a0:49:
c4:77:36:ce:30:ca:76:4c:31:0c:2c:51:36:e4:bb:
49:80:c8:d0:9c:71:8e:76:2b:38:53:71:14:73:b2:
60:a9:3e:00:0c:53:15:cb:ab:76:93:2d:de:96:02:
1e:bf:74:c2:d5:21:78:65:ca:0f:0e:4d:c3:0f:b3:
a8:cd:20:68:3e:55:19:9f:85:c7:ed:fe:49:33:7e:
24:84:1d:da:68:70:e0:37:9d:fc:85:9c:8f:b1:78:
1c:7a:56:15:b1:ee:64:c0:d3:5c:9d:25:a4:56:0d:
c6:ba:ec:d5:25:ee:19:50:07:50:9e:7a:88:d7:ef:
37:6f:33:cc:b1:cb:77:b9:24:32:70:b8:d5:b2:5e:
da:8e:2e:8d:36:53:e2:db:91:8b:fc:5a:a7:f9:f1:
d9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F7:92:D4:CA:E6:AA:AD:30:D2:A0:86:D5:F9:16:E3:73:4C:60:69
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CAC4A7641F3711EE84BB5E1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.12.0/22
103.11.60.0/24
113.203.212.0-113.203.216.255
113.203.219.0/24
113.203.222.0/24
113.203.225.0/24
113.203.228.0/22
113.203.234.0-113.203.240.255
113.203.243.0/24
113.203.248.0/22
180.178.128.0/23
180.178.132.0-180.178.139.255
180.178.149.0/24
180.178.151.0/24
180.178.162.0/24
180.178.164.0/22
180.178.170.0-180.178.172.255
180.178.174.0/23
180.178.178.0/24
180.178.180.0-180.178.191.255
223.29.227.0-223.29.231.255
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
91:d8:a6:8f:b7:76:df:5e:5c:39:53:04:af:1e:49:f9:f4:6a:
fe:94:a1:86:63:74:65:80:23:40:90:14:fc:b9:7f:7b:b6:91:
e9:68:12:78:fc:f2:3d:be:6e:58:64:ce:1b:71:c7:f7:63:0f:
c0:df:10:8c:1e:55:f0:5f:c4:ed:5d:19:cf:68:13:a5:cb:ed:
48:c2:30:95:c8:7a:bc:f4:d1:de:9d:fb:ba:48:96:67:46:c1:
4f:d1:0c:b4:90:5d:7f:62:1c:0e:40:d0:a6:1c:7e:49:31:2a:
1c:b5:3a:a8:c1:d1:44:bd:aa:4f:1c:76:01:21:4c:32:d3:bb:
a5:92:1a:a4:2b:f2:53:a1:bc:6a:8d:c5:27:99:a5:fe:ec:4b:
24:5a:d7:54:24:ea:f4:6c:af:55:dd:2d:be:fd:fe:ec:d0:78:
cf:0b:4b:73:0e:78:5d:2a:4a:dc:e4:53:07:82:8b:62:da:93:
02:31:98:a0:f2:e7:57:06:a9:7b:9d:12:06:6a:e7:7d:e7:0f:
f3:7d:51:40:39:8c:28:ac:d4:bf:a3:a8:67:f5:b9:da:92:dc:
55:6f:4b:6c:75:da:1d:5a:ba:11:83:37:01:e6:c9:17:b9:49:
0f:69:30:27:05:2f:af:e3:0a:fa:22:d4:e0:66:35:0d:21:8b:
95:90:2a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 11:48:58 2023 by rpki-client on console-fra.rpki-client.org