Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FDE354B2FBC711ED87CD6859C4F9AE02.roa
File: FDE354B2FBC711ED87CD6859C4F9AE02.roa (raw, json)
Hash identifier: 1ieA8u0p0bg/ALyMM6A6E96vSCq4ZjA7nCLJZF/tiqw=
Subject key identifier: 91:82:68:1D:E0:DE:E0:28:37:89:CD:11:BB:E1:E0:6B:7B:55:42:A7
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0BEB
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FDE354B2FBC711ED87CD6859C4F9AE02.roa
Signing time: Tue 30 May 2023 07:55:04 +0000
ROA not before: Tue 30 May 2023 07:55:04 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 57142
IP address blocks: 103.11.61.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.179.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3051 (0xbeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 30 07:55:04 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6475abd8-f0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0d:f8:dc:91:42:3e:98:94:d2:ae:ac:95:af:
e5:21:fd:db:c4:0b:31:10:ee:48:55:ed:63:64:9c:
be:80:8e:64:e1:f1:23:f7:7d:fc:f9:2f:bf:1a:af:
18:2c:81:af:e5:dd:5e:9c:db:bf:25:5f:5b:77:95:
86:bb:71:86:84:e5:e3:d4:d4:07:ee:2c:4a:44:2d:
1d:f8:62:ea:7a:96:aa:47:7a:b7:cb:8f:80:11:3d:
1e:5e:c5:3f:b1:c4:a9:e5:cb:7f:63:a5:7d:e3:d2:
1c:e5:fe:31:0d:87:10:9d:04:ea:95:b2:ea:7e:eb:
1d:64:22:21:e5:f7:6e:0d:cc:bd:8f:fb:6c:90:4b:
aa:f6:4c:7d:d6:ac:e4:34:d6:8d:1f:ea:de:2d:a9:
29:3b:37:7c:9d:c9:83:5a:31:d3:6b:8a:17:ee:30:
66:95:8f:5c:09:8d:22:83:ba:72:16:f9:e8:c0:61:
d5:ea:4e:1a:b2:1b:79:97:65:6d:c7:9e:a9:56:04:
59:2c:66:9d:8c:bf:47:d3:8b:4f:bb:fd:34:1f:94:
8a:9f:81:63:b9:b5:61:b3:e5:cf:13:b0:32:d7:82:
fd:72:62:98:c5:d4:cc:23:17:06:7e:6c:00:20:d9:
9d:98:e1:0f:03:66:a4:eb:86:38:37:9e:71:a5:ec:
c1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:82:68:1D:E0:DE:E0:28:37:89:CD:11:BB:E1:E0:6B:7B:55:42:A7
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FDE354B2FBC711ED87CD6859C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.61.0/24
113.203.225.0/24
113.203.233.0/24
113.203.245.0/24
180.178.148.0/24
180.178.151.0/24
180.178.179.0/24
223.29.226.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:4c:7a:ff:fd:28:3a:20:ca:a3:87:f0:7e:71:bc:46:af:3a:
13:ee:66:11:e2:43:73:a6:c6:32:56:ad:60:af:9e:a1:cc:99:
2c:fd:13:70:0e:ba:10:9b:55:83:fb:02:be:37:ba:f0:6f:69:
f7:00:dc:59:71:92:b4:28:f2:a2:a7:44:cd:8c:7e:f1:78:e1:
66:5b:93:6c:e1:97:e7:0c:48:65:92:e9:10:d3:7c:63:1a:a0:
64:72:8c:5e:7e:f1:de:82:e1:4b:6a:fb:7f:dd:bd:75:e7:0b:
d9:91:48:09:fb:6c:7f:67:38:60:0e:8a:16:35:75:0b:bd:15:
c3:8e:2d:72:0a:28:60:dc:40:e4:08:21:fd:4d:dc:c5:86:4b:
e2:04:33:4e:9b:8e:36:44:a4:61:a5:a5:39:35:9a:19:95:62:
ef:da:f1:9c:cb:4f:97:a0:bd:35:59:05:97:b2:20:c2:63:f3:
d1:af:0b:9c:0b:5e:66:99:0b:19:94:b8:2d:71:38:ed:85:22:
97:55:48:29:24:e2:9a:9c:79:3a:1e:7f:da:38:7d:58:35:c2:
7b:13:37:58:3d:9a:fe:56:6c:c2:f9:eb:cb:20:b9:5f:51:06:
a5:32:e6:cd:0b:e2:2c:fc:fb:ec:fb:55:f3:4b:17:ad:a3:79:
e6:43:69:70
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgICC+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwNTMwMDc1NTA0WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDc1YWJkOC1mMGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzw343JFCPpiU0q6sla/lIf3bxAsxEO5IVe1jZJy+gI5k4fEj9338+S+/Gq8Y
LIGv5d1enNu/JV9bd5WGu3GGhOXj1NQH7ixKRC0d+GLqepaqR3q3y4+AET0eXsU/
scSp5ct/Y6V949Ic5f4xDYcQnQTqlbLqfusdZCIh5fduDcy9j/tskEuq9kx91qzk
NNaNH+reLakpOzd8ncmDWjHTa4oX7jBmlY9cCY0ig7pyFvnowGHV6k4asht5l2Vt
x56pVgRZLGadjL9H04tPu/00H5SKn4FjubVhs+XPE7Ay14L9cmKYxdTMIxcGfmwA
INmdmOEPA2ak64Y4N55xpezBewIDAQABo4ICvzCCArswHQYDVR0OBBYEFJGCaB3g
3uAoN4nNEbvh4Gt7VUKnMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRkRFMzU0QjJG
QkM3MTFFRDg3Q0Q2ODU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E
OjA4MDYEAgABMDADBABnCz0DBABxy+EDBABxy+kDBABxy/UDBAC0spQDBAC0spcD
BAC0srMDBADfHeIwDQYJKoZIhvcNAQELBQADggEBAIpMev/9KDogyqOH8H5xvEav
OhPuZhHiQ3OmxjJWrWCvnqHMmSz9E3AOuhCbVYP7Ar43uvBvafcA3FlxkrQo8qKn
RM2MfvF44WZbk2zhl+cMSGWS6RDTfGMaoGRyjF5+8d6C4Utq+3/dvXXnC9mRSAn7
bH9nOGAOihY1dQu9FcOOLXIKKGDcQOQIIf1N3MWGS+IEM06bjjZEpGGlpTk1mhmV
Yu/a8ZzLT5egvTVZBZeyIMJj89GvC5wLXmaZCxmUuC1xOO2FIpdVSCkk4pqceToe
f9o4fVg1wnsTN1g9mv5WbML568sguV9RBqUy5s0L4iz8++z7VfNLF62jeeZDaXA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-ams.rpki-client.org