Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CB3082549C7911EDABB29819C4F9AE02.roa
File: CB3082549C7911EDABB29819C4F9AE02.roa (raw, json)
Hash identifier: zF0iVVk04VH0HBU+FRC/dwT8jqi9yB0MLk3GOd5pCK4=
Subject key identifier: 6F:C8:03:65:61:07:71:26:B3:B3:40:95:66:22:C0:03:6C:78:E9:BD
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0A85
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CB3082549C7911EDABB29819C4F9AE02.roa
Signing time: Tue 31 Jan 2023 10:09:06 +0000
ROA not before: Tue 31 Jan 2023 10:09:06 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 103.151.27.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.104.0/22 maxlen: 24
115.167.108.0/22 maxlen: 24
115.167.112.0/22 maxlen: 24
115.167.116.0/22 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2693 (0xa85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 31 10:09:06 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63d8e8c2-a5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:59:8a:55:04:51:7d:e1:e0:0c:63:6f:f0:ad:
7d:26:09:08:d2:60:9a:24:7c:0c:e6:37:d2:17:ea:
07:9b:8f:9e:8a:c1:13:ef:88:38:65:54:d7:a2:7d:
d8:91:d0:b5:f7:27:56:ca:fc:6c:2e:66:49:f9:55:
7b:c5:8a:99:7f:f4:68:1d:26:8f:03:cb:f6:4b:fc:
3e:48:79:22:5c:ca:f8:12:cc:36:d4:00:36:80:9f:
c8:ac:fd:4b:6e:05:fb:5f:c5:d0:85:1f:63:0f:15:
21:dc:7c:ac:68:83:c8:9f:9b:c0:2d:ec:39:8f:8c:
6a:15:ec:e9:a5:12:46:b6:1f:65:20:7a:2e:bd:cb:
f2:78:28:c4:ef:d9:9b:65:1f:fd:0f:6b:85:60:02:
91:d1:a1:06:11:ec:f3:c4:e9:02:68:8c:33:6c:5a:
52:73:2f:fd:10:e2:a5:83:1c:bf:84:95:73:f1:ac:
cd:43:dd:8d:8a:5a:ae:47:31:d1:12:60:ac:64:72:
28:a0:87:fa:51:c6:7b:53:e8:ef:a3:8a:21:b9:54:
d4:72:1d:5f:f5:ca:33:be:51:10:c1:94:96:3c:79:
8d:78:ac:82:71:40:8f:8b:b7:36:16:22:d0:d0:2f:
9f:cc:07:8c:fe:50:5e:67:35:ca:1b:46:88:5e:20:
c5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C8:03:65:61:07:71:26:B3:B3:40:95:66:22:C0:03:6C:78:E9:BD
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CB3082549C7911EDABB29819C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
115.167.48.0/23
115.167.77.0/24
115.167.104.0-115.167.119.255
175.110.97.0/24
175.110.107.0/24
Signature Algorithm: sha256WithRSAEncryption
12:2d:63:3a:fa:0d:6b:e9:a9:94:72:b8:f4:68:ff:1a:34:38:
61:f9:eb:cc:5a:a1:f8:7c:67:a9:77:6e:7b:a7:27:8a:a6:60:
26:32:7c:b9:fc:4b:d4:20:59:6e:95:e9:60:3a:9f:a6:c3:58:
6e:58:ef:10:bd:96:5d:1b:42:7f:de:83:c0:d1:b2:1b:63:2b:
c6:19:52:2c:ca:a2:d0:ff:93:d5:4a:06:67:f9:3d:40:82:bd:
5f:9c:8a:b7:9e:0f:38:28:f3:62:20:fb:e6:3f:84:2a:38:3c:
fb:a1:66:fc:61:5a:20:48:8d:b6:83:a5:08:1d:ed:db:03:59:
b7:f9:6c:ae:76:77:76:a4:a8:c2:28:4b:6b:08:48:ec:c7:37:
2a:27:36:cc:d3:fe:6b:d2:8d:bf:e3:e4:5f:e2:9d:e2:30:df:
e8:f2:c7:3c:8c:9f:ac:2f:ed:89:ee:cb:e6:3f:57:49:40:5f:
73:6a:20:ab:48:2d:a0:96:ed:23:1c:14:3a:8b:c5:c1:28:be:
19:78:31:3e:2f:a5:7d:44:26:b8:30:74:bf:27:77:97:da:3d:
28:6f:1a:f5:d0:37:8d:4e:d4:75:dd:19:fb:1e:60:a5:e4:72:
9f:73:01:5b:d8:6a:ed:86:0e:51:02:e3:02:5c:04:cc:33:62:
d1:1c:72:d7
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgICCoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwMTMxMTAwOTA2WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2Q4ZThjMi1hNWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0lmKVQRRfeHgDGNv8K19JgkI0mCaJHwM5jfSF+oHm4+eisET74g4ZVTXon3Y
kdC19ydWyvxsLmZJ+VV7xYqZf/RoHSaPA8v2S/w+SHkiXMr4Esw21AA2gJ/IrP1L
bgX7X8XQhR9jDxUh3HysaIPIn5vALew5j4xqFezppRJGth9lIHouvcvyeCjE79mb
ZR/9D2uFYAKR0aEGEezzxOkCaIwzbFpScy/9EOKlgxy/hJVz8azNQ92NilquRzHR
EmCsZHIooIf6UcZ7U+jvo4ohuVTUch1f9cozvlEQwZSWPHmNeKyCcUCPi7c2FiLQ
0C+fzAeM/lBeZzXKG0aIXiDFWQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFG/IA2Vh
B3Ems7NAlWYiwANseOm9MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQ0IzMDgyNTQ5
Qzc5MTFFREFCQjI5ODE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E
NjA0MDIEAgABMCwDBABnlxsDBAFzpzADBABzp00wDAMEA3OnaAMEA3OncAMEAK9u
YQMEAK9uazANBgkqhkiG9w0BAQsFAAOCAQEAEi1jOvoNa+mplHK49Gj/GjQ4Yfnr
zFqh+HxnqXdue6cniqZgJjJ8ufxL1CBZbpXpYDqfpsNYbljvEL2WXRtCf96DwNGy
G2MrxhlSLMqi0P+T1UoGZ/k9QIK9X5yKt54POCjzYiD75j+EKjg8+6Fm/GFaIEiN
toOlCB3t2wNZt/lsrnZ3dqSowihLawhI7Mc3Kic2zNP+a9KNv+PkX+Kd4jDf6PLH
PIyfrC/tie7L5j9XSUBfc2ogq0gtoJbtIxwUOovFwSi+GXgxPi+lfUQmuDB0vyd3
l9o9KG8a9dA3jU7Udd0Z+x5gpeRyn3MBW9hq7YYOUQLjAlwEzDNi0Rxy1w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org