Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D483292CB9CB11EE84A6E684C4F9AE02.roa
File: D483292CB9CB11EE84A6E684C4F9AE02.roa (raw, json)
Hash identifier: P3LeaiNCcoEEw+Skwi9tiR5asV/DnYAERRmBKCgW52I=
Subject key identifier: 4B:9D:E7:BC:DF:4B:62:28:E8:53:BD:94:55:66:2F:35:2E:F0:85:C5
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0FBB
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D483292CB9CB11EE84A6E684C4F9AE02.roa
Signing time: Tue 23 Jan 2024 08:45:59 +0000
ROA not before: Tue 23 Jan 2024 08:45:59 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 103.11.61.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 11:37:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4027 (0xfbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 23 08:45:59 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65af7cc7-978c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:20:98:7b:b5:4a:91:a4:77:90:9f:fb:46:24:
64:1b:f8:04:23:ce:c8:84:3d:98:4a:a3:f0:3c:2e:
9f:b2:81:50:f6:ac:9e:21:f8:da:68:20:0b:44:70:
78:3e:f8:db:ce:bb:63:d1:b3:2c:d7:e7:a2:27:71:
8e:58:3b:04:b4:ea:3a:4e:cd:4c:c0:23:18:ab:77:
41:c5:b5:d0:ca:b8:8e:28:d0:96:77:a3:e4:f6:e4:
2a:1c:07:ab:03:a6:d3:5f:92:5b:1c:25:92:3b:b2:
8a:5d:5b:ec:e8:39:39:9a:f7:d1:32:86:a8:7f:2a:
fe:4e:1d:90:51:e1:57:cb:b1:04:21:5a:28:30:58:
06:f5:22:0b:da:20:b1:83:32:e7:ea:74:55:d6:73:
e3:a6:ba:c7:a5:63:05:d7:f1:64:4b:ee:80:2c:b6:
f7:a9:d2:ea:52:7b:ad:8e:dd:92:f4:a3:f6:e2:d4:
20:a4:24:de:2c:22:6b:ac:36:b7:9e:27:9d:b4:cc:
d6:f3:85:4d:5b:96:36:d9:68:48:ce:86:bd:41:7f:
94:a5:0f:74:ef:41:b3:a3:db:40:17:5f:ad:a8:2b:
ad:8f:a4:94:f4:60:16:e3:92:35:48:d9:9e:b7:f1:
65:6e:56:fd:f3:55:3d:34:32:2a:f9:0f:e0:6a:a1:
9c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9D:E7:BC:DF:4B:62:28:E8:53:BD:94:55:66:2F:35:2E:F0:85:C5
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D483292CB9CB11EE84A6E684C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.61.0/24
113.203.229.0/24
113.203.244.0/24
113.203.254.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:b7:bc:e8:b8:68:4d:c6:66:58:cd:ac:7f:8c:20:dc:70:12:
2e:e3:d0:f1:72:1a:19:16:a5:9d:c2:86:2f:ea:f2:ac:63:5d:
f2:cf:60:77:ab:b8:be:ee:57:16:2d:27:73:68:d4:21:38:4d:
1f:8f:70:5f:11:61:09:ef:1e:66:b4:5a:4b:13:d6:a2:77:b0:
e4:d1:d5:8e:34:f1:7f:3a:97:d1:7e:25:94:c8:81:1a:39:8e:
e8:cf:9d:ad:2f:0f:bf:8a:87:80:ad:b6:af:1e:4a:94:7b:cb:
3e:2d:84:f4:82:92:0b:b3:46:50:62:2a:14:80:8d:36:cd:43:
1c:cf:a5:90:fb:bf:c1:8b:5b:fd:30:11:cf:28:bb:64:be:fd:
6d:b8:c3:e2:16:ab:d7:1b:13:d4:5f:ba:18:ad:98:86:e1:01:
11:23:03:ea:ae:6e:71:44:bd:07:4b:76:2d:c9:b9:3b:ce:60:
ef:c2:31:18:be:6e:09:b3:4b:14:3d:e2:13:98:f1:5d:48:64:
81:c6:c7:c0:5f:aa:10:8e:28:f6:cb:fb:ad:e3:d8:e7:4f:f9:
7b:d5:7d:92:c8:b1:d2:09:2f:91:0d:ee:1d:d7:37:41:0d:f0:
72:a2:9d:75:36:2d:b8:bd:11:75:bc:86:2c:49:4e:91:6c:81:
c2:c0:76:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 14:58:06 2024 by rpki-client on console-ams.rpki-client.org