Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E8C594CE9F2711EEA61F2E28C4F9AE02.roa
File: E8C594CE9F2711EEA61F2E28C4F9AE02.roa (raw, json)
Hash identifier: gejFkyF+xS8M4GcqnIV/5c4fgUjSAAFRQKeICMoLpGg=
Subject key identifier: 11:D6:28:CC:C0:86:2C:39:55:A6:A8:C9:5D:2F:D0:F2:75:13:93:26
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0EBC
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E8C594CE9F2711EEA61F2E28C4F9AE02.roa
Signing time: Thu 21 Dec 2023 15:56:54 +0000
ROA not before: Thu 21 Dec 2023 15:56:54 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3772 (0xebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 21 15:56:54 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65846046-1c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:45:ba:56:2d:84:74:90:f0:a9:c5:92:39:35:
f3:12:b3:e6:b4:d5:2f:d9:6c:26:d4:de:32:84:10:
d5:e7:68:1c:ad:96:23:8b:d5:0f:39:8b:a4:5d:11:
76:7c:50:04:a2:35:55:68:ee:70:55:af:a5:86:74:
46:68:da:d7:d7:ad:60:02:96:d7:4c:c3:a5:62:aa:
7a:12:b8:58:07:98:a6:10:77:66:f3:d7:b2:58:b5:
ba:6b:7b:7a:77:e8:ea:34:bd:7b:92:45:aa:66:e5:
9a:0f:13:02:c3:98:aa:8b:37:04:fb:8a:9f:eb:fa:
29:4a:ab:74:2c:32:8b:c0:62:db:81:b3:8f:b5:c5:
82:b6:6e:7d:46:cc:41:03:1a:0a:15:c8:0f:d4:49:
1d:61:1e:40:f4:f5:3d:ff:5a:ec:20:d9:48:48:f9:
fe:ed:4d:8b:a8:ce:97:38:b9:63:4f:38:58:80:fd:
2f:9d:e3:24:a3:92:f3:b6:35:34:c3:49:bd:58:c0:
61:b4:59:8f:0d:fe:c6:a0:e2:c6:06:b0:9e:bf:0f:
f7:64:0e:9a:83:99:ac:07:5e:cd:a1:a0:aa:49:81:
ba:77:85:a0:9c:37:f8:5a:85:35:53:d5:80:70:09:
51:c9:2d:2c:85:df:36:9e:cf:78:a3:fd:fe:41:7d:
a7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D6:28:CC:C0:86:2C:39:55:A6:A8:C9:5D:2F:D0:F2:75:13:93:26
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E8C594CE9F2711EEA61F2E28C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.223.0-113.203.224.255
180.178.163.0/24
223.29.236.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:e6:c0:09:9d:c7:45:1b:68:2a:43:7e:e6:9b:0f:49:44:be:
16:ef:1a:e1:fb:47:31:b1:2f:b3:39:64:08:21:ee:32:78:f6:
66:cd:44:8c:bb:43:43:63:74:89:f9:c0:83:3c:ac:91:2c:70:
68:f9:6c:cf:ee:0c:ce:f8:72:1f:b5:da:38:de:ec:d1:fe:e4:
2b:89:b9:5c:3b:16:91:5b:56:5d:0a:88:d0:ef:8c:63:b6:98:
f5:09:40:1f:37:7a:09:0d:d8:9a:6d:f5:ec:f0:21:1b:46:37:
45:5a:77:9f:6b:53:0d:72:c7:ba:ca:a4:84:6f:ef:41:3a:b5:
d8:07:0f:57:02:ea:07:eb:80:a4:a9:97:f7:20:04:80:b5:cf:
fd:8f:10:2d:3b:96:d8:86:9c:aa:cf:59:88:e9:81:f3:d6:99:
cf:2b:69:14:03:19:3e:cd:6d:58:63:06:3c:98:01:68:fd:d0:
d8:e3:14:d2:54:8c:d5:ae:15:3d:a6:d9:cd:b5:08:a3:08:69:
44:49:2d:d5:d6:7c:43:3b:c5:54:15:4a:45:ce:a1:e0:e1:c9:
75:8e:0e:d1:e6:0a:c1:52:e2:96:4f:f4:e4:f3:ae:ec:ce:f7:
45:6b:0c:8d:a1:9b:0e:79:fa:86:ee:28:37:50:32:a5:36:80:
c4:ad:9a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 15:47:18 2024 by rpki-client on console-fra.rpki-client.org