Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F31C8E1C57EE11EE9C30EE47C4F9AE02.roa
File: F31C8E1C57EE11EE9C30EE47C4F9AE02.roa (raw, json)
Hash identifier: XmimEe2+nnNEJ4suINnOPHMt6ZpjObgVZsibHaQqa2E=
Subject key identifier: 6E:5E:59:A0:0A:F0:43:8F:89:1C:F0:35:FF:E9:33:21:8D:96:10:6F
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0D3A
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F31C8E1C57EE11EE9C30EE47C4F9AE02.roa
Signing time: Wed 20 Sep 2023 19:50:29 +0000
ROA not before: Wed 20 Sep 2023 19:50:29 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 113.203.211.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.184.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3386 (0xd3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 20 19:50:29 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=650b4d05-0fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:93:5d:e5:4a:fc:9c:38:a4:63:b5:5b:60:
60:b2:cc:9f:29:00:d6:6a:e5:e3:e6:7d:bc:e2:70:
d1:6f:4c:a8:d6:1d:e8:1c:43:2b:59:2f:f8:70:6b:
b5:40:4d:81:f7:76:dd:5e:4b:fb:cb:e7:7b:58:54:
72:6c:0f:50:18:b2:1e:cf:72:e7:30:22:22:b4:b8:
96:cf:e0:4d:48:7e:64:19:c1:34:4e:ad:b6:10:43:
ef:a1:98:21:97:ce:95:36:54:87:f5:92:ca:ad:a2:
8e:73:66:65:ae:88:c7:3b:de:a1:fd:80:b0:d4:83:
de:13:3c:81:e6:62:68:7c:10:b2:96:e1:a8:6f:f1:
0b:d4:9d:30:4a:92:d8:88:50:a2:20:a1:e8:25:56:
77:54:bc:5e:95:e6:b6:7f:52:77:0e:f5:86:77:83:
19:3e:11:06:a6:ae:73:b7:91:c6:90:46:50:c8:e5:
54:a8:b9:09:e5:6b:34:44:a1:a3:ab:4e:18:50:69:
61:7f:6f:a0:56:53:dc:87:25:7b:a2:3a:b9:93:5b:
3b:9f:4b:15:69:10:4f:23:0d:1b:6c:85:ec:ce:a0:
f5:a8:33:e4:f0:62:35:c9:53:a7:66:a4:f6:0a:ed:
96:90:88:00:01:3a:cd:34:5e:2a:18:e6:ce:59:38:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5E:59:A0:0A:F0:43:8F:89:1C:F0:35:FF:E9:33:21:8D:96:10:6F
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F31C8E1C57EE11EE9C30EE47C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.211.0/24
113.203.219.0/24
113.203.233.0/24
180.178.168.0/24
180.178.171.0/24
180.178.184.0/24
180.178.186.0/24
Signature Algorithm: sha256WithRSAEncryption
69:17:5f:3d:69:29:60:ed:0b:e8:a3:d7:2c:4a:6b:8f:b2:43:
42:7d:d6:c5:85:28:dd:3d:1d:3e:c4:7e:2d:3d:b3:5f:49:71:
e2:75:b4:a9:02:51:3e:65:0a:0d:75:82:c7:e7:45:95:cf:d5:
76:fb:8a:1c:d9:5e:6e:82:00:0f:a3:e1:79:65:4c:37:5e:83:
b3:1d:c6:82:bd:7b:8d:eb:3e:4a:21:71:83:f1:e3:91:bb:22:
3d:ab:0d:bd:41:ff:2c:80:d3:89:ec:92:01:df:c0:2c:8c:eb:
09:e0:2e:e9:44:da:9b:d6:54:c3:14:f3:a9:00:21:d0:04:e7:
b3:34:c5:cc:1e:fc:1e:8d:52:df:eb:03:33:53:bf:ea:9c:57:
9f:db:cd:f8:75:0b:36:2b:7b:05:c9:4e:68:a9:ac:dd:4d:0b:
c7:d3:9f:fc:df:99:61:97:09:7c:ac:9f:2b:70:af:75:b2:ab:
de:9d:72:42:39:bc:e3:f9:8d:15:2d:d3:53:19:67:ff:e7:b5:
d9:70:e2:39:c2:65:14:95:95:3c:58:54:c0:96:70:88:13:b9:
c8:ca:f6:b6:bd:93:30:2e:25:a4:ca:8c:98:bc:0d:93:4a:0f:
ae:d7:c7:c1:36:65:aa:23:0e:73:70:d5:9d:c5:39:0e:65:5d:
c6:cd:96:84
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgICDTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwOTIwMTk1MDI5WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTBiNGQwNS0wZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxUuTXeVK/Jw4pGO1W2BgssyfKQDWauXj5n284nDRb0yo1h3oHEMrWS/4cGu1
QE2B93bdXkv7y+d7WFRybA9QGLIez3LnMCIitLiWz+BNSH5kGcE0Tq22EEPvoZgh
l86VNlSH9ZLKraKOc2ZlrojHO96h/YCw1IPeEzyB5mJofBCyluGob/EL1J0wSpLY
iFCiIKHoJVZ3VLxelea2f1J3DvWGd4MZPhEGpq5zt5HGkEZQyOVUqLkJ5Ws0RKGj
q04YUGlhf2+gVlPchyV7ojq5k1s7n0sVaRBPIw0bbIXszqD1qDPk8GI1yVOnZqT2
Cu2WkIgAATrNNF4qGObOWTjg9wIDAQABo4ICuTCCArUwHQYDVR0OBBYEFG5eWaAK
8EOPiRzwNf/pMyGNlhBvMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRjMxQzhFMUM1
N0VFMTFFRTlDMzBFRTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E
NDAyMDAEAgABMCoDBABxy9MDBABxy9sDBABxy+kDBAC0sqgDBAC0sqsDBAC0srgD
BAC0srowDQYJKoZIhvcNAQELBQADggEBAGkXXz1pKWDtC+ij1yxKa4+yQ0J91sWF
KN09HT7Efi09s19JceJ1tKkCUT5lCg11gsfnRZXP1Xb7ihzZXm6CAA+j4XllTDde
g7MdxoK9e43rPkohcYPx45G7Ij2rDb1B/yyA04nskgHfwCyM6wngLulE2pvWVMMU
86kAIdAE57M0xcwe/B6NUt/rAzNTv+qcV5/bzfh1CzYrewXJTmiprN1NC8fTn/zf
mWGXCXysnytwr3Wyq96dckI5vOP5jRUt01MZZ//ntdlw4jnCZRSVlTxYVMCWcIgT
ucjK9ra9kzAuJaTKjJi8DZNKD67Xx8E2ZaojDnNw1Z3FOQ5lXcbNloQ=
-----END CERTIFICATE-----
Generated at Mon Oct 16 08:29:47 2023 by rpki-client on console-ams.rpki-client.org