Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9993BCA8FA1511ED8FAE8B1BC4F9AE02.roa
File: 9993BCA8FA1511ED8FAE8B1BC4F9AE02.roa (raw, json)
Hash identifier: U3vVZkxaZxACEYWMmd7wRHrPOiL1LP7L81mwzZ31Gkc=
Subject key identifier: 51:34:CF:BA:86:63:A2:F4:E2:7D:54:81:B3:9F:0C:C2:D3:20:62:95
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0BD2
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9993BCA8FA1511ED8FAE8B1BC4F9AE02.roa
Signing time: Wed 24 May 2023 23:25:52 +0000
ROA not before: Wed 24 May 2023 23:25:52 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 113.203.227.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
115.167.68.0/22 maxlen: 24
115.167.108.0/22 maxlen: 24
175.110.76.0/22 maxlen: 24
175.110.92.0/22 maxlen: 24
175.110.98.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3026 (0xbd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 23:25:52 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646e9d00-7580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:2f:70:94:18:19:6e:54:fa:ca:7c:e0:16:
33:0e:50:24:43:b2:c5:41:d0:ff:90:9f:26:39:0c:
09:26:c2:2c:21:8a:4c:02:9a:0e:aa:39:bf:ea:4f:
16:e6:90:71:5b:69:ac:2d:74:89:35:b8:f6:f7:7b:
ec:70:ec:13:27:fc:1f:a4:15:9a:62:a0:02:ae:21:
c6:8b:98:6d:2f:66:7b:ec:12:71:0e:46:ae:78:33:
9c:ed:f2:65:85:28:de:fd:e6:75:c6:1d:24:4b:b8:
bd:06:de:55:d2:c4:0b:a1:fe:4e:fe:d5:7c:82:a7:
aa:1f:a0:ec:1b:89:f5:7d:cd:23:58:91:6a:37:a1:
85:f9:a8:be:61:4c:ec:79:89:02:29:f1:c7:a3:cc:
0c:1b:63:08:6d:f3:d4:2a:89:a2:e1:bf:43:dd:9a:
d2:44:e1:9e:71:5b:19:77:7e:fb:fe:74:f3:65:a0:
6b:82:a2:a7:24:09:69:3f:2c:72:38:ee:1e:cf:ea:
aa:23:6b:ef:af:22:f7:13:9a:cb:f7:c7:53:9b:29:
70:9a:e2:47:7c:89:11:50:b2:9e:9d:e4:44:9d:0a:
bc:b2:04:68:c1:2c:15:8a:09:9a:75:14:92:2c:94:
e4:c8:da:be:79:d0:64:c8:86:9a:f7:b3:be:4b:7c:
19:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:34:CF:BA:86:63:A2:F4:E2:7D:54:81:B3:9F:0C:C2:D3:20:62:95
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9993BCA8FA1511ED8FAE8B1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.227.0/24
113.203.233.0/24
113.203.245.0/24
115.167.68.0/22
115.167.108.0/22
175.110.76.0/22
175.110.92.0/22
175.110.98.0/24
180.178.151.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a4:1b:fb:39:4e:95:d0:4f:ea:b2:7b:3d:86:e2:9b:d0:a1:
28:bc:94:6e:db:d5:f7:3c:6e:c6:3d:14:39:8c:fc:78:c9:82:
7c:36:30:be:ca:db:93:a5:08:ec:fc:d4:ea:da:a1:be:51:97:
be:5f:2a:e8:7b:40:52:fb:79:dc:de:cd:17:4f:ae:ff:f8:7f:
56:33:9c:9e:e4:5e:9c:a1:8c:5a:ad:8b:29:36:4e:18:41:4a:
b2:b6:a3:62:b0:32:c0:27:bc:27:c7:ad:e7:3e:11:53:98:14:
07:e2:26:ec:94:35:a1:ed:50:62:6f:a4:ba:d2:a8:35:4b:b8:
77:9c:24:7a:4c:0c:6b:7c:d4:5c:4f:20:bc:e0:2b:1e:90:01:
ec:36:3d:99:54:c2:42:4b:0d:dd:a3:84:ad:fc:a4:53:38:0e:
24:d0:83:3a:96:db:f8:4e:48:5e:23:2c:ca:51:2f:d8:3c:bc:
15:4b:96:42:18:d9:51:57:78:89:62:68:4e:e7:f4:95:54:8e:
2e:4a:eb:ec:06:0b:b9:da:fd:68:04:b7:fa:8b:73:fe:11:74:
a2:b5:70:fa:30:0e:8d:1a:85:08:4d:63:83:f2:54:42:4a:e9:
cf:32:3d:72:7b:ce:c2:8b:68:a0:b6:da:d0:c6:96:28:6c:6a:
c9:25:59:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:44 2023 by rpki-client on console.sobornost.net