Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E4AAE8CEBC1711ED834F8221C4F9AE02.roa
File: E4AAE8CEBC1711ED834F8221C4F9AE02.roa (raw, json)
Hash identifier: xmdHIaNMPHlH0Qdv8Hp+gHs7st4A5ZVxyUl2jaa3QxU=
Subject key identifier: 0E:DA:CD:8F:9A:24:F6:F6:C8:89:18:90:98:B5:A9:1F:3B:58:24:75
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0AA7
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E4AAE8CEBC1711ED834F8221C4F9AE02.roa
Signing time: Mon 06 Mar 2023 12:10:33 +0000
ROA not before: Mon 06 Mar 2023 12:10:33 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 103.151.27.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2727 (0xaa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Mar 6 12:10:33 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6405d838-fa91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:86:ad:a0:67:5e:95:d3:7a:9d:71:5e:c9:
7d:9e:30:6a:e7:d2:21:67:ba:e7:8f:47:e4:03:70:
11:4f:18:86:e9:b0:ec:e7:b1:14:65:ac:4b:d5:0b:
0a:9d:0d:04:f3:b6:64:7c:a8:6f:bf:ec:36:f9:27:
de:53:bc:af:98:f4:7e:07:8a:85:09:f4:17:ab:19:
b3:43:bb:76:2c:f0:c4:99:6c:85:0f:02:25:32:97:
f7:b0:e2:dd:61:89:6b:75:82:82:6a:7a:e2:d4:d7:
14:b9:01:ba:bc:4a:5b:6d:1b:75:37:43:8f:ef:71:
f2:45:07:1a:7d:0c:f6:42:63:5e:6e:22:90:e1:1d:
b8:d1:df:81:69:dc:55:62:28:0a:d2:d2:77:b8:26:
4b:d1:0b:e2:71:e3:0a:f1:83:49:9c:6f:29:39:72:
b7:42:3c:ac:78:06:99:7f:2a:03:39:25:44:0c:62:
48:d3:80:40:0b:83:ba:84:18:cf:27:88:a8:fe:32:
c1:e9:5b:ef:ee:f9:5d:33:ec:ef:0d:bb:03:50:27:
fc:3a:76:45:13:5a:5a:b1:29:eb:ca:86:58:23:d2:
0b:ca:4e:b0:5d:20:9e:ad:7a:76:2e:6b:ec:cf:14:
58:e0:c3:89:6e:88:26:0e:38:e4:6e:34:4b:7b:ec:
fa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DA:CD:8F:9A:24:F6:F6:C8:89:18:90:98:B5:A9:1F:3B:58:24:75
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E4AAE8CEBC1711ED834F8221C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
115.167.48.0/23
115.167.77.0/24
175.110.97.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ce:59:38:1c:96:3b:6b:cf:f7:3a:c7:fd:f7:8c:05:f3:68:
60:29:c8:64:00:b0:69:4d:51:1b:9f:7d:18:47:75:76:62:c7:
13:49:c2:e8:0c:81:2f:68:fd:6e:51:6a:b1:5c:ff:c5:25:d7:
91:e8:4a:32:89:08:4d:40:6a:59:6c:8f:d7:c0:31:23:70:b4:
c4:b0:fc:03:0b:68:23:ee:99:ce:e6:2b:8c:70:44:68:a1:fa:
f9:0e:65:6c:ba:65:7d:f8:51:9d:a2:b6:be:f8:0b:df:45:d8:
97:a8:54:2b:41:3f:ab:a9:2c:74:02:f2:15:91:1f:fd:04:d9:
26:6f:61:50:39:8c:8d:95:aa:28:35:3d:ed:fd:6d:0f:ab:0a:
70:e2:a5:2c:84:ed:1c:74:f6:b2:75:ca:8d:f0:d7:95:f4:c9:
7b:e1:ae:99:d3:8b:1f:1c:49:3b:92:d2:86:49:47:61:7e:f8:
c0:10:61:e4:70:96:88:61:d7:61:60:bc:b6:3e:b9:20:6b:16:
1e:b6:36:3f:16:c1:6f:50:f1:fc:6b:12:5e:d6:ed:c1:2d:37:
69:2e:27:3b:52:48:3b:37:c9:00:39:a1:4a:0c:ff:b5:a1:dc:
40:47:d6:a9:25:22:d8:e9:b8:18:17:fc:25:b1:4b:78:94:7e:
c2:34:1f:46
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwMzA2MTIxMDMzWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDA1ZDgzOC1mYTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsr6GraBnXpXTep1xXsl9njBq59IhZ7rnj0fkA3ARTxiG6bDs57EUZaxL1QsK
nQ0E87ZkfKhvv+w2+SfeU7yvmPR+B4qFCfQXqxmzQ7t2LPDEmWyFDwIlMpf3sOLd
YYlrdYKCanri1NcUuQG6vEpbbRt1N0OP73HyRQcafQz2QmNebiKQ4R240d+BadxV
YigK0tJ3uCZL0QviceMK8YNJnG8pOXK3QjyseAaZfyoDOSVEDGJI04BAC4O6hBjP
J4io/jLB6Vvv7vldM+zvDbsDUCf8OnZFE1pasSnryoZYI9ILyk6wXSCerXp2Lmvs
zxRY4MOJbogmDjjkbjRLe+z6cQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFA7azY+a
JPb2yIkYkJi1qR87WCR1MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRTRBQUU4Q0VC
QzE3MTFFRDgzNEY4MjIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBABnlxsDBAFzpzADBABzp00DBACvbmEwDQYJKoZIhvcNAQEL
BQADggEBAAzOWTgcljtrz/c6x/33jAXzaGApyGQAsGlNURuffRhHdXZixxNJwugM
gS9o/W5RarFc/8Ul15HoSjKJCE1Aallsj9fAMSNwtMSw/AMLaCPumc7mK4xwRGih
+vkOZWy6ZX34UZ2itr74C99F2JeoVCtBP6upLHQC8hWRH/0E2SZvYVA5jI2Vqig1
Pe39bQ+rCnDipSyE7Rx09rJ1yo3w15X0yXvhrpnTix8cSTuS0oZJR2F++MAQYeRw
lohh12FgvLY+uSBrFh62Nj8WwW9Q8fxrEl7W7cEtN2kuJztSSDs3yQA5oUoM/7Wh
3EBH1qklItjpuBgX/CWxS3iUfsI0H0Y=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-ams.rpki-client.org