Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CC82FD54E4F811ED9F93311EC4F9AE02.roa
File: CC82FD54E4F811ED9F93311EC4F9AE02.roa (raw, json)
Hash identifier: v5RXLHUJWKHxanp2mWORzb2UA9vjGoNxEnRgreBLyUo=
Subject key identifier: C2:05:DD:A2:6B:12:EA:4E:A8:BB:A9:5F:6A:01:44:7D:4E:21:78:32
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0B3D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CC82FD54E4F811ED9F93311EC4F9AE02.roa
Signing time: Thu 27 Apr 2023 13:02:06 +0000
ROA not before: Thu 27 Apr 2023 13:02:06 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 113.203.248.0/24 maxlen: 24
113.203.249.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
113.203.251.0/24 maxlen: 24
115.167.24.0/24 maxlen: 24
115.167.25.0/24 maxlen: 24
115.167.26.0/24 maxlen: 24
115.167.27.0/24 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2877 (0xb3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 27 13:02:06 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=644a724e-3002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:eb:0c:f1:12:02:f6:6a:c1:2e:06:da:19:00:
42:93:b3:a4:ad:07:0f:ef:57:b8:1e:ab:39:ea:7c:
33:b4:b5:48:ad:73:46:28:80:6d:d9:78:a7:f6:84:
7f:97:bd:88:2a:32:15:17:1b:ce:2a:79:bf:f7:90:
d0:ec:d4:8c:1e:5c:61:be:0b:17:90:d0:79:7e:92:
a7:d7:5b:7e:37:c5:94:73:72:c5:73:e6:e1:56:c0:
f1:51:4e:0b:d0:e9:ef:44:7e:55:3a:ac:ae:c8:06:
7f:ed:4f:34:5e:bd:04:ef:64:a0:8a:31:8f:b8:9d:
a0:97:3e:8a:b1:ef:25:6f:1a:80:d0:0b:c5:bc:16:
0c:3b:05:46:29:91:8f:87:99:64:07:89:f7:10:86:
3e:f6:9e:d0:ab:fa:a1:53:cc:07:a0:30:46:d5:77:
4c:94:84:37:e1:b8:1a:78:1f:7f:a4:78:dd:75:1b:
6a:07:c8:3d:b0:50:09:73:12:75:29:72:40:68:27:
fe:c7:0f:1c:b4:10:9f:57:f6:77:20:36:e3:d2:69:
1b:eb:40:fb:0f:ed:93:40:5f:ae:98:74:fc:22:4f:
90:03:6b:62:c5:e8:57:7e:a0:d0:95:36:1e:f1:8f:
a0:d4:d1:cb:32:e6:75:91:b9:79:a8:12:97:4e:4e:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:05:DD:A2:6B:12:EA:4E:A8:BB:A9:5F:6A:01:44:7D:4E:21:78:32
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CC82FD54E4F811ED9F93311EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.248.0/22
115.167.24.0/21
Signature Algorithm: sha256WithRSAEncryption
49:6c:bc:71:80:25:1f:1f:24:af:03:72:d6:9e:94:9a:7a:e2:
56:a8:c1:1f:32:86:e5:50:e7:8d:a3:2b:61:6c:a4:40:90:89:
82:f9:39:8b:d6:94:8e:8c:91:a3:2c:c3:04:70:32:c5:45:06:
ee:83:83:83:40:66:37:33:df:96:4c:61:31:71:e7:76:96:a0:
51:b0:47:1c:03:b5:86:9d:7e:76:0f:bc:87:34:31:81:76:84:
4e:cd:6b:d8:ea:02:e3:b4:a4:5b:19:45:68:f8:76:5f:8d:72:
92:44:b3:47:10:12:9e:d4:6e:b3:1f:17:b8:0a:d2:28:b6:a5:
71:f2:33:4c:bd:ef:63:7f:a3:a0:f4:1b:dd:4a:ca:aa:2f:06:
2a:0a:7f:98:35:0b:53:27:b4:6c:b8:f0:f5:61:8c:25:95:45:
e0:b2:bf:91:6b:51:8e:e5:d9:b5:ac:2b:f8:f7:e3:32:c9:e0:
13:bb:de:43:3c:32:05:5b:f7:8e:24:83:0f:77:0d:a8:eb:34:
8c:a2:f3:e4:4e:1f:1d:15:93:9c:35:ed:94:bc:a3:d4:30:fc:
b5:6d:59:2f:6d:92:0e:56:0b:a2:90:88:81:10:36:44:49:e0:
e2:1c:2d:3b:2a:c8:17:94:7a:85:11:52:1f:92:44:18:9e:31:
3a:b3:d5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-ams.rpki-client.org