Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DFA4B9BE7CE611EEB148FE7AC4F9AE02.roa
File: DFA4B9BE7CE611EEB148FE7AC4F9AE02.roa (raw, json)
Hash identifier: l6y1cbvTsDTs4jx5wCIpR9jjJ8hb1ez0/xIVveN7IEA=
Subject key identifier: 02:BF:0C:EC:66:40:5B:1C:14:BA:EA:8E:60:14:67:B2:5B:8B:9E:44
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0E2D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DFA4B9BE7CE611EEB148FE7AC4F9AE02.roa
Signing time: Wed 29 Nov 2023 17:06:53 +0000
ROA not before: Wed 29 Nov 2023 17:06:53 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 103.11.61.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.249.0/24 maxlen: 24
113.203.252.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
180.178.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3629 (0xe2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 29 17:06:53 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65676fad-5d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:af:92:ec:a0:ba:f4:64:c3:5e:67:fc:de:
0e:6c:57:36:de:b1:c1:ef:dd:0d:7f:d0:ea:8f:45:
2a:69:0a:9e:41:c0:84:53:26:12:ec:58:e4:fe:42:
fc:e9:70:1b:e0:bc:f0:d7:66:c3:12:d4:1b:fc:e6:
b7:f0:9a:7a:be:0d:cc:cf:d0:9b:75:4b:77:a4:83:
38:de:0a:e0:57:a0:ad:7b:e3:6c:7d:06:d7:f0:9a:
ba:f9:66:c5:c7:24:4d:24:ab:4b:73:50:80:f2:82:
ce:66:55:65:e6:66:a1:83:e2:d7:b3:69:a7:c5:ad:
e1:7f:84:01:ac:cf:1d:0f:61:db:a6:93:e7:bc:e1:
2b:59:61:85:8a:10:ee:15:25:f9:80:8c:63:24:e8:
63:f5:36:0b:99:da:c1:6f:a2:e7:d5:63:f3:c9:37:
59:35:ea:30:b3:b4:65:ca:45:dc:04:04:be:d8:8e:
d2:3e:3f:ac:67:65:fe:1c:2f:0d:4a:22:a3:d5:55:
c1:0c:91:d9:97:3c:ea:67:35:48:83:13:c5:bc:6b:
b5:1b:aa:03:ea:82:a8:40:96:e6:de:90:f3:b3:ba:
bf:f1:88:86:ae:4a:ff:62:ea:13:e1:e8:0b:97:53:
6d:14:46:82:5d:8c:74:03:c9:b4:5d:73:75:b4:a8:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BF:0C:EC:66:40:5B:1C:14:BA:EA:8E:60:14:67:B2:5B:8B:9E:44
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DFA4B9BE7CE611EEB148FE7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.61.0/24
113.203.210.0/24
113.203.220.0/24
113.203.229.0/24
113.203.244.0/24
113.203.248.0/23
113.203.252.0/24
113.203.254.0/23
180.178.177.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5f:fd:83:6b:02:23:00:7f:a3:68:42:4f:03:8e:f6:c1:46:
b9:03:4c:2c:84:64:17:74:1c:1e:44:18:f8:33:d8:39:66:57:
57:df:ab:18:6c:c1:90:76:fe:bb:37:48:53:0e:bc:4a:de:a7:
36:8f:d4:c7:3e:06:f6:f9:cb:55:22:81:03:cd:8d:6b:ad:88:
4b:8b:07:ec:29:ea:f1:08:2b:c7:ab:53:50:50:b7:95:f5:75:
03:91:d8:da:e0:c6:b8:5b:5a:ef:a8:dd:c9:c5:ad:41:c0:8a:
08:ed:ce:9e:6b:d3:08:22:f6:84:00:53:6e:f0:1c:f2:fd:8d:
50:fc:73:e2:2f:f6:c2:dc:12:ee:1e:ca:d3:30:ca:56:f2:1f:
f5:ea:d1:fe:3d:01:d0:b5:5e:3f:6c:b0:1c:6c:f6:7e:71:1b:
a3:20:3a:46:d2:46:ed:a3:b0:dd:a8:c0:18:cd:72:71:25:f1:
de:82:01:d4:cc:95:d6:d8:64:a4:13:b9:1a:a5:2c:7d:68:2e:
dd:12:6e:40:7f:a6:12:9b:1f:d2:84:e0:49:69:c3:7c:e2:8e:
6e:e1:34:36:53:bd:ef:60:f7:21:a0:69:1f:22:ae:74:84:5b:
b9:78:a1:26:3a:16:f9:4b:3b:c5:a4:d2:94:70:8b:75:68:84:
5e:44:68:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 14:55:57 2023 by rpki-client on console-fra.rpki-client.org