Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F5C9754CB92011EE927E5750C4F9AE02.roa
File: F5C9754CB92011EE927E5750C4F9AE02.roa (raw, json)
Hash identifier: Yei5brJsBAThETY/DK2XWpxmgzNKFE5WEIeJN4RYtq8=
Subject key identifier: EC:F2:74:86:9B:70:69:28:A1:04:34:BF:2F:12:1B:E2:16:52:7C:90
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0FC6
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F5C9754CB92011EE927E5750C4F9AE02.roa
Signing time: Wed 24 Jan 2024 14:23:53 +0000
ROA not before: Wed 24 Jan 2024 14:23:53 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
180.178.140.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 08:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4038 (0xfc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 24 14:23:53 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65b11d79-03d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:70:65:c2:64:16:66:97:d9:8b:2c:92:79:a8:
ed:19:11:98:6f:fb:8b:92:22:ba:e0:9d:5b:e7:cc:
c3:d9:8d:7f:98:17:55:f1:e1:5d:69:4d:48:3d:17:
9b:cd:32:ae:d7:eb:c5:93:14:5d:04:4d:93:e3:f0:
3b:ec:06:dd:0b:b6:86:a2:47:92:8b:95:b2:a0:4b:
e8:8a:10:fa:76:b6:be:1f:96:7e:76:55:49:a7:12:
f8:bd:f8:68:53:f6:90:bb:90:33:44:b6:08:b8:1e:
30:4a:fd:71:f5:5f:33:1a:70:f7:4d:42:f7:88:de:
eb:9c:3a:3f:81:66:19:e0:31:20:50:2c:80:2e:a1:
18:af:09:62:23:17:d2:ce:7c:48:42:e7:7b:90:eb:
ab:64:f2:9a:b4:33:55:7b:ea:c9:f0:75:24:14:9e:
69:79:16:43:c6:2d:71:f3:35:fc:ac:98:d6:44:ba:
cd:5f:3c:61:8a:20:f9:31:8b:6e:2f:cb:ca:a6:9b:
fa:70:32:50:39:30:44:bb:99:82:be:9d:ef:6f:44:
ce:93:b5:bf:e2:08:23:a5:ac:c7:b2:20:15:b3:07:
a4:43:a2:fb:04:8a:26:86:25:8e:8e:28:3c:78:7a:
d4:af:71:58:63:3f:bc:52:ab:98:9e:14:fb:b2:ca:
b8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F2:74:86:9B:70:69:28:A1:04:34:BF:2F:12:1B:E2:16:52:7C:90
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F5C9754CB92011EE927E5750C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.211.0-113.203.212.255
113.203.214.0/23
113.203.219.0/24
113.203.222.0/24
113.203.227.0/24
113.203.243.0/24
180.178.140.0/24
180.178.148.0/24
180.178.151.0/24
180.178.161.0/24
180.178.164.0/24
180.178.168.0/24
180.178.171.0/24
180.178.190.0/24
Signature Algorithm: sha256WithRSAEncryption
86:4d:02:d8:8c:02:30:8f:da:25:61:a4:94:77:46:bb:ff:6b:
d2:89:d2:4d:ad:04:72:ea:d0:14:2f:f5:c7:bd:91:8c:b7:0c:
01:9b:06:30:1d:63:c5:c5:6a:07:78:7b:67:48:6b:91:40:9a:
95:c3:0b:47:5c:e8:aa:01:82:bc:d5:cc:cf:2f:d5:fe:ca:aa:
42:ef:b5:da:76:e4:6f:10:4d:1b:3e:ea:12:ac:1f:55:a5:94:
2c:99:07:b5:8d:41:9d:ce:8c:30:f1:03:41:56:6a:38:c7:e7:
2c:62:45:d5:2a:62:ea:b9:4e:e3:1f:83:f9:c4:1e:60:17:1f:
d7:ca:c8:23:d7:a6:04:62:af:60:72:1d:a2:41:4b:d7:c8:e1:
a6:e3:d9:13:94:f2:7b:17:e9:4a:e3:7b:d1:b2:0e:8c:94:0f:
28:ce:6f:52:63:fb:2d:25:d5:b4:f5:71:61:00:ac:30:90:ac:
7f:7a:1d:b1:25:c4:4b:c8:fd:9a:36:e2:3a:8f:0c:62:5b:ef:
e1:96:c9:96:96:26:c4:24:c0:36:f1:8d:6b:02:3c:70:a0:c3:
b4:21:58:af:ca:e5:cf:02:8d:49:11:96:82:9d:3a:56:94:ba:
8d:64:7a:8c:df:a9:8f:b8:87:20:d2:6a:c2:05:b7:1d:2e:5a:
b0:6f:cf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 12:42:45 2024 by rpki-client on console-fra.rpki-client.org