Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CCCBB7A2342111ED82888936C4F9AE02.roa
File: CCCBB7A2342111ED82888936C4F9AE02.roa (raw, json)
Hash identifier: TDjiZ2tjBNeVznF1Mi1s0v3fKVBtwnfnnoy2pdxbidg=
Subject key identifier: 62:F2:6A:EF:2A:3E:A3:CA:19:BC:0A:EB:C1:89:0F:6B:8E:21:76:92
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0A08
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CCCBB7A2342111ED82888936C4F9AE02.roa
Signing time: Mon 12 Dec 2022 04:29:05 +0000
ROA not before: Mon 12 Dec 2022 04:29:05 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 3561
IP address blocks: 103.11.68.0/22 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.96.0/22 maxlen: 24
115.167.100.0/22 maxlen: 24
175.110.100.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2568 (0xa08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 12 04:29:05 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6396ae10-92b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ba:bb:98:30:54:74:a5:64:b5:29:fc:67:4a:
02:d6:a5:df:66:13:f0:b8:a3:d6:a3:49:ab:ba:36:
ef:6f:a1:e9:d6:f3:e5:43:c3:48:22:e0:a3:ed:37:
53:05:c4:a3:3b:9e:27:bc:a6:ce:9a:6e:6c:d2:0a:
d3:7e:f8:0d:4d:22:31:b2:c8:f7:44:c1:99:7d:e5:
e4:19:bf:06:7d:8b:18:2b:7b:6e:29:88:ac:9b:61:
4c:5e:45:fc:21:63:89:4d:d4:1d:34:b9:30:4b:19:
41:5c:d6:87:94:31:35:51:15:6a:9c:6e:c6:8e:13:
1a:8b:46:c5:9c:bc:a6:52:66:3c:92:21:9a:29:a2:
77:41:f6:87:66:4f:d9:06:8a:f9:1d:64:34:b3:47:
f8:cc:26:1d:78:db:45:62:41:5e:33:10:29:61:eb:
09:95:e0:5f:8c:e5:d6:78:e2:8c:79:e8:a4:ef:99:
86:7d:f3:28:8c:7d:dc:3b:dc:ce:e8:04:62:bb:7f:
c0:20:ed:b3:dd:1b:14:d4:12:2f:f0:20:1b:07:28:
58:3e:f8:02:27:aa:fd:5d:ae:22:1d:d0:c8:30:c1:
ec:22:a1:92:60:eb:92:cc:91:7b:2c:32:55:e0:ac:
31:cb:6c:1b:d4:a8:aa:4e:08:cb:a6:be:d2:57:72:
40:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F2:6A:EF:2A:3E:A3:CA:19:BC:0A:EB:C1:89:0F:6B:8E:21:76:92
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CCCBB7A2342111ED82888936C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.68.0/22
115.167.5.0-115.167.6.255
115.167.96.0/21
175.110.100.0/22
Signature Algorithm: sha256WithRSAEncryption
00:0f:ef:02:22:26:47:99:ca:f6:71:0c:f9:b4:34:57:e4:84:
e2:f1:e4:09:76:51:ec:ef:14:0d:01:b9:98:55:20:1e:7b:de:
90:9a:56:3b:4b:e6:b6:b7:dc:d4:84:3d:b6:87:aa:b7:cd:0c:
04:5d:48:b2:ee:cb:cf:c3:39:e6:eb:ed:ac:66:2c:eb:de:d2:
70:d1:e8:f2:bf:7e:73:ef:36:bb:c8:77:81:7b:c1:93:2e:4e:
67:6b:98:22:bf:04:37:07:08:54:bc:f7:b1:19:ae:5f:2e:24:
ae:b7:58:37:f8:83:b9:9f:1a:a9:f4:ff:7c:7a:6f:08:09:57:
16:07:75:1c:ce:89:eb:95:be:88:30:47:df:3f:f7:1d:8a:c3:
f3:46:92:f7:d6:fd:de:ac:7c:d1:62:a9:f8:53:b4:71:f1:14:
78:28:e1:d8:72:fe:60:e1:8f:cc:bf:5f:5a:7f:22:e3:db:bd:
1d:91:a9:43:5f:13:94:af:23:cc:30:fa:88:73:d6:f9:0b:da:
85:a5:9f:e2:99:54:1d:03:c3:93:c1:02:c7:1f:67:6e:6d:a6:
76:73:91:e8:5b:ba:7b:9f:7b:1f:d6:44:ac:69:c0:88:08:d8:
90:e6:00:24:f4:68:50:4b:9a:e3:0c:55:0f:2e:0a:48:85:ea:
d0:5f:6b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org