Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F78B08726CE111EE96C33033C4F9AE02.roa
File: F78B08726CE111EE96C33033C4F9AE02.roa (raw, json)
Hash identifier: kERmWXh9nBYMRNE2cMyQhaTVDbkCefUGOv/GyPcnyts=
Subject key identifier: B6:54:BF:96:5A:08:C1:80:40:75:C7:DD:E9:6F:39:A3:31:22:51:2A
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0D9E
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F78B08726CE111EE96C33033C4F9AE02.roa
Signing time: Tue 17 Oct 2023 11:40:27 +0000
ROA not before: Tue 17 Oct 2023 11:40:27 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 113.203.230.0/24 maxlen: 24
180.178.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3486 (0xd9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 17 11:40:27 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=652e72ab-3854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:d8:67:03:41:1c:63:c0:e6:6d:2d:8b:bf:
38:40:74:df:dc:7d:07:7d:20:5c:89:fa:6f:27:4e:
b0:b2:3c:4c:a7:4c:f1:fc:1f:af:c7:03:e2:fd:0b:
4d:5b:b7:db:f3:8c:10:3e:97:b2:ad:d9:bd:ba:e4:
48:4e:97:e3:06:c6:04:76:be:78:5e:45:36:92:3a:
6d:d5:fc:9c:33:23:a1:74:ab:33:f1:b3:6a:30:41:
7e:73:fe:be:99:36:7c:45:7f:93:4b:42:c5:30:b0:
b2:97:f5:e1:f3:23:76:ad:f3:2a:21:fd:e2:b7:48:
e5:77:82:27:6d:35:dd:a0:2f:be:d6:36:6f:99:83:
b3:dc:64:b5:2c:ea:25:2a:d9:c0:b5:71:a6:a4:e6:
a1:1f:60:99:43:74:22:b4:55:92:e4:98:d4:6c:d1:
94:45:af:02:4b:c5:16:a2:2a:fa:fa:63:c4:08:6b:
07:98:1c:c0:b1:77:3a:ee:14:2a:66:11:f9:b5:c0:
9c:f1:71:22:fe:9a:c9:7d:6f:2c:68:1e:e5:a2:52:
c1:b3:e7:0c:fb:9d:d3:ed:4d:90:2f:2c:2b:37:c8:
1b:91:d9:31:0c:e7:b3:a9:13:3d:25:53:24:65:37:
8e:9d:d7:65:b9:df:14:ac:00:b1:88:48:ce:06:c0:
3a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:54:BF:96:5A:08:C1:80:40:75:C7:DD:E9:6F:39:A3:31:22:51:2A
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F78B08726CE111EE96C33033C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.230.0/24
180.178.140.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b0:64:0d:24:f0:65:91:79:cc:1c:38:ad:ce:e6:fe:b0:fd:
97:17:94:c1:fd:85:c7:1d:9d:18:25:b6:01:67:e3:39:7b:e4:
67:e4:7c:02:7f:ea:ce:ff:a1:b0:b8:fa:7d:21:c9:e0:b8:28:
77:04:ca:a5:e6:7e:22:4f:23:2f:f4:53:26:1f:e6:7f:fc:5b:
e5:d9:64:32:72:1d:f9:ac:d7:9f:b4:46:05:65:7e:18:f5:b3:
31:09:81:6a:ef:d7:77:d0:55:4a:c7:fa:44:8e:02:11:50:2b:
cf:09:de:dc:ef:36:f8:4e:09:fb:e8:e3:01:4a:64:ef:57:e8:
1e:d2:b3:da:74:18:a3:41:8e:5c:a7:ee:a5:0f:ee:0d:20:9f:
b9:07:31:0d:e8:1f:00:72:39:09:db:05:59:d3:8c:8d:7e:63:
5e:7f:20:58:1a:37:5d:6b:e8:de:6e:79:4d:14:e3:29:ba:be:
ff:ca:ab:59:48:a3:a3:18:e8:ef:41:2b:58:47:90:a1:8c:9b:
7f:f1:d8:85:7e:d5:93:32:71:c4:56:03:05:cd:a2:55:56:98:
74:1a:7e:65:56:16:87:ce:0e:6a:3a:3b:f9:16:8c:fc:7f:20:
6b:c3:08:b5:26:15:49:fa:97:03:74:2a:5c:51:0a:58:92:99:
c0:9c:19:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 11:36:34 2023 by rpki-client on console-ams.rpki-client.org