Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/109E78D8F4E211EF9C6B0B6CC4F9AE02.roa
File: 109E78D8F4E211EF9C6B0B6CC4F9AE02.roa (raw, json)
Hash identifier: gdL5ISeIJwUQJG7hIe11hcD6CWIqPWj4Mo9t+Q8gnBI=
Subject key identifier: 12:C7:DE:E4:AF:40:B7:8F:04:D9:1F:57:17:78:8A:0B:17:4A:42:A1
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2405
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/109E78D8F4E211EF9C6B0B6CC4F9AE02.roa
Signing time: Thu 27 Feb 2025 08:08:45 +0000
ROA not before: Thu 27 Feb 2025 08:08:45 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 213652
IP address blocks: 223.29.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 08:21:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9221 (0x2405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Feb 27 08:08:45 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67c01d8d-b065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a0:b2:c2:92:79:6c:75:33:4f:b4:5a:0a:cf:
63:ce:c1:83:02:60:dd:bc:79:00:88:1f:75:5c:e9:
20:ad:b0:10:44:0b:af:91:cd:57:fc:b1:44:bb:f3:
9b:da:60:4a:4e:f0:00:2d:e1:6c:47:36:93:0a:59:
bb:7a:5f:5e:26:a0:37:d8:6f:d8:8e:48:0a:d0:a3:
0b:ff:c1:76:b0:20:aa:7f:a6:b9:71:ba:9d:36:7a:
4a:5f:3d:8e:29:95:1f:e8:7f:ea:9b:43:b3:a4:75:
3e:72:00:ad:2e:3c:1c:44:7a:31:dd:22:38:19:a8:
ec:c6:ea:a1:41:1e:f8:c3:50:b3:71:d5:5e:cf:a3:
fd:b5:9b:97:b0:26:7c:69:43:9d:d2:cb:93:d5:ae:
9e:a2:b8:86:41:da:0d:34:dc:12:8a:41:a5:ad:3d:
78:c8:17:43:83:5a:08:41:ae:c8:ab:24:51:f3:e2:
a0:ea:3b:30:9d:20:d1:87:e5:91:d1:ec:e0:16:0e:
76:af:87:53:55:2a:32:d0:07:88:89:58:06:89:15:
f0:ae:d0:c6:34:17:47:c1:8d:b9:1f:75:a7:9f:e5:
12:c7:21:41:9c:eb:99:80:ee:20:70:5f:db:ec:a8:
c4:12:ca:ed:dc:10:fe:31:d5:7b:06:b9:b4:22:50:
44:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C7:DE:E4:AF:40:B7:8F:04:D9:1F:57:17:78:8A:0B:17:4A:42:A1
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/109E78D8F4E211EF9C6B0B6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.236.0/24
Signature Algorithm: sha256WithRSAEncryption
09:7d:62:fb:9c:69:dd:28:87:64:bf:58:46:fa:a0:3e:ea:11:
a7:b6:b9:29:9b:85:e4:5d:2f:2a:44:a5:22:40:d2:67:f4:93:
27:3a:3e:e5:a3:69:0a:80:39:48:23:19:3a:e3:0e:b5:12:74:
4a:66:5b:8c:e9:3a:39:c4:3e:29:b3:f1:96:63:37:bd:9b:9f:
41:85:db:8f:0c:82:8a:de:3f:56:c5:ba:27:94:6d:b6:6d:e6:
a1:b0:b8:0a:0f:5e:b7:be:2f:79:77:ae:99:bb:04:50:ea:ad:
65:f8:8c:86:99:d1:ad:4a:c0:46:c9:80:11:cf:71:be:4c:95:
f9:a6:08:0b:2b:6a:b5:54:5a:aa:a5:2d:c8:0a:03:50:ff:74:
a0:ed:eb:27:0d:8c:a6:c4:db:0f:95:58:00:90:66:dc:43:78:
3a:ef:f3:7a:ec:d4:a9:a9:03:ec:cb:dc:51:8a:89:a4:54:76:
b1:21:82:0e:49:79:82:ed:50:d7:09:40:8e:25:87:1d:95:46:
04:8c:3f:c7:3c:a9:32:42:82:eb:f6:13:f2:77:90:78:9a:17:
05:62:a5:43:54:69:35:b3:c8:fc:77:b0:df:1c:5b:ed:36:93:
c4:01:95:ef:84:93:2c:3c:79:73:6f:be:96:27:45:03:82:d5:
f5:80:fe:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:05:01 2025 by rpki-client