Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/50A52920B7EC11ED9CF6A63EC4F9AE02.roa
File: 50A52920B7EC11ED9CF6A63EC4F9AE02.roa (raw, json)
Hash identifier: +e7s2JKxkIv7kTu12EykFEdUEjOg6KzcYlPjBpviUg0=
Subject key identifier: 70:4B:AF:D1:72:A1:AE:5A:BB:E4:03:2B:DD:24:E6:A2:CD:E1:9C:69
Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Certificate serial: 0922
Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/50A52920B7EC11ED9CF6A63EC4F9AE02.roa
Signing time: Wed 01 Mar 2023 04:48:31 +0000
ROA not before: Wed 01 Mar 2023 04:48:31 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 58453
IP address blocks: 103.11.108.0/22 maxlen: 22
103.11.108.0/24 maxlen: 24
103.11.109.0/24 maxlen: 24
223.118.0.0/15 maxlen: 15
223.118.0.0/16 maxlen: 24
223.118.0.0/27 maxlen: 27
223.119.0.0/16 maxlen: 20
223.119.0.0/21 maxlen: 24
223.119.8.0/22 maxlen: 24
223.119.12.0/22 maxlen: 24
223.119.16.0/20 maxlen: 24
223.119.32.0/19 maxlen: 23
223.119.33.0/24 maxlen: 24
223.119.38.0/23 maxlen: 24
223.119.40.0/21 maxlen: 24
223.119.48.0/22 maxlen: 24
223.119.53.0/24 maxlen: 24
223.119.54.0/23 maxlen: 24
223.119.56.0/21 maxlen: 24
223.119.64.0/18 maxlen: 23
223.119.64.0/19 maxlen: 24
223.119.96.0/22 maxlen: 24
223.119.101.0/24 maxlen: 24
223.119.102.0/23 maxlen: 24
223.119.104.0/21 maxlen: 24
223.119.112.0/20 maxlen: 24
223.119.128.0/17 maxlen: 23
223.119.128.0/18 maxlen: 24
223.119.192.0/19 maxlen: 24
223.119.224.0/20 maxlen: 24
223.119.240.0/21 maxlen: 24
223.119.248.0/22 maxlen: 24
223.119.252.0/23 maxlen: 24
223.120.0.0/17 maxlen: 24
223.121.0.0/17 maxlen: 24
2402:4f00::/32 maxlen: 32
2402:4f00:1000::/36 maxlen: 36
2402:4f00:2000::/36 maxlen: 36
2402:4f00:4000:4::/64 maxlen: 64
2402:4f00:4001:100::/56 maxlen: 56
2402:4f00:4002:100::/56 maxlen: 56
2402:4f00:4003::/48 maxlen: 48
2402:4f00:8000::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2338 (0x922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Validity
Not Before: Mar 1 04:48:31 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=63fed91f-0078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:4e:9b:bc:b0:44:21:66:b6:bf:03:af:0a:
96:39:0c:83:fe:b8:e8:0a:80:a8:e6:75:16:ee:f8:
42:97:b1:f7:08:0d:7a:e5:27:ae:c4:fa:36:13:fc:
7e:7a:09:14:03:f6:47:75:2d:b6:f9:d4:85:39:9d:
e8:20:35:28:93:52:99:5a:2d:dc:11:83:5d:63:f2:
0e:09:59:21:2a:da:8f:a3:6c:51:72:dc:7a:53:4a:
43:e2:19:05:17:1f:d4:64:0a:16:04:1c:04:7b:72:
a0:90:74:2a:ff:bc:db:ad:7e:36:1c:90:3b:84:de:
4e:56:1e:44:c9:d2:22:56:42:26:27:48:17:54:f1:
d7:c3:bf:a7:76:54:a0:aa:16:ff:7f:4d:b4:62:91:
ad:f4:3a:00:a5:94:7a:92:ce:b1:43:3d:37:c0:04:
99:50:d8:4c:dc:69:f3:c0:41:27:0a:08:77:5f:ae:
df:6a:aa:16:c6:6d:64:38:eb:84:8b:86:7f:ab:54:
ee:03:1b:9f:54:6e:98:62:3d:5a:64:e3:28:80:21:
24:6a:20:7d:5b:0d:80:0a:b1:db:e6:2f:5c:7f:ec:
8f:32:f2:40:f8:eb:9d:aa:16:55:27:a3:3d:83:c4:
ab:b5:a0:5e:4f:fd:60:4d:1a:8c:df:a3:71:f9:c5:
bc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4B:AF:D1:72:A1:AE:5A:BB:E4:03:2B:DD:24:E6:A2:CD:E1:9C:69
X509v3 Authority Key Identifier:
keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/50A52920B7EC11ED9CF6A63EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.108.0/22
223.118.0.0-223.120.127.255
223.121.0.0/17
IPv6:
2402:4f00::/32
Signature Algorithm: sha256WithRSAEncryption
4a:0c:80:f4:b0:ec:bd:9a:3a:c8:d9:03:73:11:41:95:42:70:
93:66:06:35:51:56:4c:6b:88:a3:d8:06:b1:e7:0b:06:47:7d:
f7:b3:42:f8:cb:17:73:03:69:45:07:18:4f:81:1b:0e:39:11:
19:74:58:db:b7:db:c6:19:0c:90:39:3c:03:b3:52:b9:91:22:
56:b1:8f:83:71:64:79:1c:c7:3e:7a:65:af:60:eb:fd:65:68:
d7:4a:bd:d7:b4:2a:a5:e4:7d:aa:b3:8a:ed:27:c7:47:33:d7:
7b:d9:84:49:de:50:f4:36:4b:e4:dc:96:7c:f7:b9:c9:29:19:
c2:32:5c:29:69:22:b7:e0:ac:b3:81:f9:9f:55:23:c3:a5:84:
f4:70:60:9d:d9:65:1f:42:36:f1:22:77:01:d7:8e:91:3f:e2:
eb:5b:d3:c5:6e:c5:b2:df:6a:9f:a6:ea:23:09:eb:91:b1:bf:
e0:2d:a3:2f:93:78:9d:a9:4d:e9:90:ea:1d:79:b7:e9:6a:df:
aa:18:76:6b:08:49:c4:ef:c5:e5:b5:e5:9c:b8:d9:aa:4f:9a:
7c:b6:3a:71:92:68:b9:a2:4f:e5:57:15:39:17:0b:4e:cf:01:
07:37:c4:a8:74:a0:57:e5:fa:24:9b:4a:ec:2c:41:78:e1:5d:
6c:30:64:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 08:01:02 2023 by rpki-client on console-fra.rpki-client.org