Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D2A921D0FA3E11EDB61C2921C4F9AE02.roa
File: D2A921D0FA3E11EDB61C2921C4F9AE02.roa (raw, json)
Hash identifier: k7iKngnoc1Z6tmFI9y+ZC0moWwJYEIlZo3WYlJr07J4=
Subject key identifier: DE:43:71:DB:9A:16:28:E5:92:DF:8D:90:66:D8:F7:B6:03:1B:E8:E0
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0BD6
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D2A921D0FA3E11EDB61C2921C4F9AE02.roa
Signing time: Wed 24 May 2023 23:25:56 +0000
ROA not before: Wed 24 May 2023 23:25:56 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 9387
IP address blocks: 43.254.12.0/22 maxlen: 24
103.11.60.0/24 maxlen: 24
103.11.61.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.173.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.176.0/24 maxlen: 24
180.178.177.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.179.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3030 (0xbd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 23:25:56 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646e9d04-de44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:ea:90:00:6b:ff:10:f2:df:d3:8b:e0:54:
30:02:8a:83:55:cb:46:f0:d9:84:3e:3d:8a:5c:05:
df:66:13:5b:11:b6:1e:c5:15:b9:e2:bc:9f:ed:25:
3c:4a:b8:d5:e9:3f:ff:ad:8c:62:03:62:55:3b:ac:
46:c5:8f:6c:e2:84:9e:3b:78:ea:31:63:35:d3:ef:
5e:9a:25:8d:9a:0f:47:e7:b0:0f:06:0b:72:fb:fc:
8b:ba:54:c2:fb:64:96:51:b1:c4:d8:06:55:02:01:
71:59:3e:ae:45:b5:02:81:f8:20:6d:07:b4:c2:40:
68:c9:c3:69:2b:49:19:9d:96:92:17:11:a0:3c:8b:
e0:be:cc:25:b9:9f:ee:49:8e:b5:57:0a:c1:31:a4:
e5:44:f8:b6:7c:5d:c9:38:23:a6:ed:8f:08:87:6d:
79:29:ea:cb:dc:fd:f6:dd:91:a7:ec:99:9e:b8:1d:
7e:17:a7:a1:1e:87:c4:56:d8:80:3a:63:72:f6:e5:
23:14:9a:83:a4:a0:43:49:ac:e4:58:a3:cb:5c:d9:
92:42:b0:d0:7b:b0:94:51:a6:b7:00:d0:e1:f2:d2:
f3:49:82:f1:9b:8d:de:a4:85:99:c4:0a:0f:ae:61:
38:8d:ef:bc:b2:06:cf:26:0d:04:21:97:3e:62:95:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:43:71:DB:9A:16:28:E5:92:DF:8D:90:66:D8:F7:B6:03:1B:E8:E0
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D2A921D0FA3E11EDB61C2921C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.12.0/22
103.11.60.0/23
113.203.208.0/24
113.203.210.0-113.203.216.255
113.203.218.0-113.203.220.255
113.203.222.0-113.203.225.255
113.203.228.0/22
113.203.234.0-113.203.240.255
113.203.243.0/24
113.203.252.0/22
180.178.128.0/23
180.178.132.0-180.178.139.255
180.178.148.0/23
180.178.162.0/24
180.178.164.0-180.178.168.255
180.178.170.0-180.178.183.255
180.178.188.0/22
223.29.226.0-223.29.231.255
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
2c:89:a3:fb:46:ff:5e:24:10:60:6a:b1:f1:08:1d:91:2a:3e:
2d:0d:e5:8a:7e:1c:ec:3d:67:29:7a:e8:21:6c:09:ca:a5:ba:
c1:3e:19:36:db:d2:a0:de:c3:32:26:a6:7b:c5:76:03:74:7e:
b4:4b:d5:6f:0c:2d:d2:5e:32:23:06:72:84:c2:1e:5d:26:3e:
15:1a:38:38:5d:99:cd:52:69:4f:3a:fb:50:0e:46:fb:20:a9:
16:82:95:97:ed:c4:65:b5:d0:f9:0c:3d:fb:6d:5f:dc:47:f1:
75:27:c8:c6:9e:b5:26:5d:ad:eb:9b:3b:4f:ce:a4:9b:04:b8:
08:c2:50:01:93:d0:7b:87:18:20:99:e5:3f:e1:cd:6a:86:a9:
13:4e:c5:d9:96:9e:0b:d3:96:5b:dd:20:6d:f8:1f:12:d4:c6:
39:68:48:4d:bb:88:31:a2:80:29:7c:3c:38:df:f9:81:10:14:
61:74:5a:85:af:dd:0b:d6:76:49:1b:59:be:7e:23:6b:65:24:
bd:0f:cc:ea:2f:f1:0c:19:cc:af:89:f5:3f:84:61:33:d2:40:
eb:37:5b:7c:97:f5:27:5c:4d:b6:66:3e:94:39:20:58:ca:38:
67:e2:55:5f:d3:11:b5:3c:9a:6b:19:61:22:eb:89:6a:c8:a4:
a0:f3:1f:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:46 2023 by rpki-client on console.sobornost.net