Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F4DA1282E57B11ED8D3D2D65C4F9AE02.roa
File: F4DA1282E57B11ED8D3D2D65C4F9AE02.roa (raw, json)
Hash identifier: u/6Glw6UATUML+zO18WFQKJzslmPI4dd/yJa3EY5DLE=
Subject key identifier: D8:0C:17:F5:26:63:BB:B7:30:01:66:34:86:3D:B9:42:59:42:A8:D2
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0B46
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F4DA1282E57B11ED8D3D2D65C4F9AE02.roa
Signing time: Fri 28 Apr 2023 04:39:45 +0000
ROA not before: Fri 28 Apr 2023 04:39:45 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
223.29.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2886 (0xb46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 28 04:39:45 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=644b4e11-6b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:72:a7:18:37:aa:33:34:b6:e4:65:9e:4f:32:
92:dc:84:e1:ad:f8:6d:a4:47:d0:2e:1a:46:cf:7d:
76:a6:84:13:2f:b8:c9:67:76:9d:72:9f:f1:68:a4:
a0:ca:ca:c4:cf:a0:41:98:4a:43:fb:31:e0:9d:2a:
68:bb:80:7a:11:5f:90:fa:88:5c:d4:11:e6:8a:8a:
19:d0:6a:e9:07:86:52:bd:4a:5e:5c:4b:b6:00:65:
40:74:bf:fe:90:21:b8:27:07:8e:57:64:de:5c:84:
f0:b3:02:7b:77:e3:d4:b7:96:98:46:89:9f:32:14:
c3:cd:61:c7:c2:03:be:c9:0b:ef:92:15:12:1e:e7:
c3:d6:40:4e:c8:bc:5d:df:60:25:75:bc:57:1c:fb:
2a:b2:09:51:40:08:10:a1:af:67:bb:cc:af:57:34:
65:58:93:65:05:e4:c6:ae:e7:5c:7f:c3:f0:7b:ed:
57:c2:d4:ed:0d:84:dc:de:a0:91:89:c3:35:ac:1c:
76:d0:f7:4a:85:56:e7:a3:ba:5a:e3:5a:1d:79:aa:
5e:80:3f:5c:c8:3c:43:3f:89:e9:37:eb:af:3f:82:
59:34:44:9f:16:86:b4:3b:38:14:0f:75:e0:47:03:
24:67:7a:ed:7f:00:a2:39:43:f0:8f:2c:61:ea:24:
2d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0C:17:F5:26:63:BB:B7:30:01:66:34:86:3D:B9:42:59:42:A8:D2
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F4DA1282E57B11ED8D3D2D65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0/24
113.203.209.0/24
113.203.211.0-113.203.216.255
113.203.219.0/24
113.203.226.0/24
113.203.234.0-113.203.240.255
113.203.243.0-113.203.244.255
180.178.128.0/23
180.178.132.0-180.178.139.255
180.178.149.0/24
180.178.160.0/23
180.178.164.0-180.178.168.255
180.178.172.0/24
180.178.174.0/23
180.178.178.0/24
180.178.180.0/22
223.29.227.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:a3:6f:66:b1:1c:84:77:1c:5d:9a:69:65:b8:d0:39:07:ee:
bd:73:43:3b:23:67:26:a3:ce:95:43:a1:8d:ce:83:44:fb:11:
b9:27:35:58:d8:67:27:b0:2d:61:12:b5:9a:c5:68:53:50:ef:
17:fe:96:a5:54:9d:42:cb:0b:06:76:73:5a:c6:d6:b0:98:e2:
2c:ce:17:d5:a8:01:30:eb:8b:25:e5:c6:88:31:7a:0d:fe:ed:
c7:97:59:e0:1f:56:30:2e:c8:1e:0f:2e:d8:35:08:76:3c:67:
bf:6d:f4:e8:90:4e:66:e8:d8:6a:13:82:df:b2:04:72:6f:d1:
66:96:e9:80:70:47:b4:63:a5:d1:e1:0c:95:ac:d7:11:8b:0c:
8b:ee:90:a4:f7:1b:f7:ed:89:d5:d3:1b:b2:eb:5d:44:41:10:
5c:c7:99:b7:37:b6:8f:0d:c5:5b:45:f2:e7:66:2b:5d:10:d1:
0d:87:d7:ba:5c:b3:e9:d7:6f:d7:5f:b9:08:ab:67:65:37:1b:
59:5b:3e:0b:3c:af:a4:59:ad:be:e0:d5:72:5f:4f:b6:fc:97:
92:7c:5f:53:92:76:7f:fd:8d:ec:01:79:39:8d:98:33:14:37:
9c:06:38:ff:3f:c1:4d:7a:c4:19:52:86:97:90:b7:37:6a:ea:
bc:11:91:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org