Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E6BEE1667FF711EE8DD3276AC4F9AE02.roa
File: E6BEE1667FF711EE8DD3276AC4F9AE02.roa (raw, json)
Hash identifier: TQ/16UyLxo8p8ZR6QM3oiNmS7gEp4O7H+MgSRgTyxAE=
Subject key identifier: D2:83:25:47:CC:39:5A:E7:D3:4F:31:B6:78:51:09:27:02:50:8F:82
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0DF2
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E6BEE1667FF711EE8DD3276AC4F9AE02.roa
Signing time: Mon 13 Nov 2023 08:54:37 +0000
ROA not before: Mon 13 Nov 2023 08:54:37 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/22 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.249.0/24 maxlen: 24
113.203.251.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.173.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.176.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3570 (0xdf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 13 08:54:37 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6551e44d-5da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0b:72:7b:3d:a5:f8:a5:d8:5f:65:02:01:8e:
d3:ab:f6:24:96:84:68:18:b9:69:c4:d2:7d:ba:ef:
07:15:dd:0c:d7:1a:d2:7b:ae:bc:75:0e:df:36:cf:
8b:89:51:81:93:8e:b5:07:2e:66:e4:49:b6:14:f1:
00:36:16:6e:36:53:6b:cb:b4:4e:50:04:20:1a:a6:
2e:5c:2f:cb:b5:23:f8:f8:40:47:7c:92:0f:1c:36:
98:6f:a3:f0:f0:06:5d:2f:b1:3a:63:f2:82:6f:96:
5e:87:63:29:8f:e5:59:b3:e7:53:ec:a0:24:2f:94:
cb:ce:7e:a6:a5:66:65:94:37:b8:07:23:56:07:21:
ea:ae:c9:34:e3:a1:84:15:88:5c:85:f8:1d:26:ca:
58:9e:fc:9b:c6:c8:fc:0e:d2:ff:1b:06:38:5b:9b:
0c:6b:a6:46:99:67:af:21:2b:00:a8:ad:f3:3d:0d:
62:2e:86:b0:8d:1b:83:ff:92:bc:34:73:9b:c9:29:
7b:ef:12:b4:79:09:cb:fd:a9:b7:3b:12:4c:c0:a2:
d1:2b:a6:49:80:3b:16:61:7b:4f:80:ea:9e:90:bc:
51:70:0d:99:ef:f5:37:0f:7b:f7:af:33:ce:c7:37:
df:b7:0f:c4:64:e1:06:65:56:03:7a:94:ff:a2:c8:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:83:25:47:CC:39:5A:E7:D3:4F:31:B6:78:51:09:27:02:50:8F:82
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E6BEE1667FF711EE8DD3276AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0/24
113.203.210.0-113.203.215.255
113.203.218.0-113.203.220.255
113.203.222.0/24
113.203.225.0/24
113.203.227.0-113.203.228.255
113.203.234.0-113.203.240.255
113.203.243.0/24
113.203.245.0/24
113.203.249.0/24
113.203.251.0/24
113.203.253.0-113.203.254.255
180.178.128.0/23
180.178.132.0-180.178.139.255
180.178.147.0-180.178.149.255
180.178.151.0/24
180.178.160.0-180.178.162.255
180.178.164.0-180.178.168.255
180.178.171.0-180.178.176.255
180.178.178.0/24
180.178.180.0-180.178.184.255
180.178.186.0-180.178.191.255
223.29.226.0-223.29.231.255
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
56:22:48:1f:86:41:20:6a:4a:1f:81:76:f0:64:2a:a5:d5:f2:
98:ce:cb:80:2a:d8:d5:23:7f:ee:53:8a:e4:4c:41:45:d1:01:
12:db:d0:76:74:c9:98:56:82:94:8b:b0:d2:b5:bc:58:7a:46:
28:4d:7f:e2:99:f4:37:09:69:9e:0f:ed:6f:7b:e5:54:78:e1:
23:5c:be:a9:4a:0e:42:d4:3b:4c:b8:1d:41:33:ab:1e:e9:3a:
9b:7d:4f:19:49:3d:5f:92:c5:b5:0c:28:df:01:86:a3:d0:24:
a1:78:ac:18:f2:56:42:ff:ce:a4:a0:d6:c0:b9:62:77:dd:0a:
a3:8b:c6:11:0a:bb:a2:02:a2:af:01:f1:0e:b3:a7:58:1c:19:
93:77:72:4a:7a:f7:ca:67:ea:66:12:fb:62:be:d5:a0:89:a4:
6d:60:9f:73:34:82:76:4a:89:30:a1:08:dd:6f:c1:c5:a7:84:
62:f7:a0:bb:9f:c1:61:b4:05:50:d0:7d:d8:6d:ce:e7:0e:6c:
ca:22:45:c9:41:0f:16:ad:92:46:14:49:2b:e0:49:66:24:6c:
ad:88:0f:7c:67:eb:31:be:db:c2:ef:a2:df:96:5a:79:c7:9b:
08:fd:57:70:db:50:bd:41:a0:89:2b:a5:f0:ac:85:63:a5:57:
36:b8:a8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 08:13:48 2023 by rpki-client on console-fra.rpki-client.org