Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1B1C4EC4B0B411EFA9591272C4F9AE02.roa
File: 1B1C4EC4B0B411EFA9591272C4F9AE02.roa (raw, json)
Hash identifier: Y8c0EHNZygHGDy1E040Gj3I7Nz4Dy27pHxQD3YJeirU=
Subject key identifier: B2:47:C6:F9:40:FF:57:8D:CF:77:84:B9:91:36:F5:6B:09:07:A1:40
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1E74
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1B1C4EC4B0B411EFA9591272C4F9AE02.roa
Signing time: Mon 02 Dec 2024 13:52:43 +0000
ROA not before: Mon 02 Dec 2024 13:52:43 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 3356
IP address blocks: 43.226.224.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Dec 2024 06:13:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7796 (0x1e74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 2 13:52:43 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=674dbbaa-2b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:9f:e5:61:fa:61:bf:6c:65:39:3b:b9:11:
23:77:fd:f4:b1:07:04:9a:c4:da:a6:f0:7a:72:69:
f8:4e:75:29:b5:3d:07:2e:76:56:10:87:f6:36:30:
16:59:5e:43:30:ba:24:a8:45:59:30:2e:4f:7b:b3:
4a:83:a3:a4:f7:bb:20:41:f4:97:42:3c:73:b1:5f:
a7:9f:0f:c5:04:e4:e4:25:6e:36:90:2f:40:43:1d:
07:47:90:ce:69:be:9e:03:a6:42:e8:a8:1d:ee:c1:
68:b5:f8:4d:0f:2e:44:95:cc:d3:47:81:f8:8c:d9:
b4:1b:a0:07:cb:07:d4:80:71:09:ca:ab:b9:16:a0:
b3:ff:9a:c2:02:eb:3f:38:2a:5a:9b:75:de:5b:ac:
cd:e7:e5:b2:cb:12:a0:87:88:4d:c4:16:79:e6:c5:
2b:b2:35:75:c4:6f:2e:11:c8:0c:90:e1:46:50:8a:
d3:d7:29:2e:4f:3c:ed:40:d7:63:5a:41:e0:7b:ec:
bf:4f:ee:b1:27:bc:a2:8a:e0:fb:8a:9c:5e:76:94:
c1:5c:10:29:6c:a5:4c:35:ce:60:a9:a3:5d:82:69:
19:04:66:53:8f:19:ca:03:3b:2d:30:6f:6a:63:1c:
42:2a:dd:24:ac:b7:f5:bb:90:9d:b5:06:15:a5:7f:
fe:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:47:C6:F9:40:FF:57:8D:CF:77:84:B9:91:36:F5:6B:09:07:A1:40
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1B1C4EC4B0B411EFA9591272C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/24
115.167.78.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:d8:80:1e:20:c1:ab:ba:03:6c:f2:82:b4:e0:92:7c:99:d1:
c1:72:5f:15:28:95:75:73:ab:9a:0b:10:5b:65:e5:0e:03:69:
b1:34:96:fd:b6:bc:10:59:01:3a:43:83:49:62:54:0c:4f:e2:
8a:80:d4:d7:b1:28:8a:87:92:db:e7:63:cd:e1:48:66:13:ac:
58:a2:b2:24:f5:2c:af:52:d2:08:77:55:d3:cc:52:3f:1e:88:
fd:91:97:75:e6:db:bd:44:5a:3a:ed:36:8b:b2:42:0e:01:06:
83:dc:a1:25:54:02:57:69:9c:e1:ba:ef:6f:76:a6:e8:ea:a5:
5e:a1:9d:11:40:31:6e:93:34:7d:c6:20:57:a0:a7:89:2b:d0:
2c:ca:2b:a0:fc:a7:42:7d:52:fa:6f:58:66:3c:45:8c:36:36:
c3:f3:de:d2:7c:6f:0b:52:45:1d:8e:64:b6:b5:2e:c6:66:8f:
9f:b4:5c:68:6d:6c:ea:00:8a:53:3f:c2:cd:86:20:db:12:97:
44:ac:15:9a:51:73:ce:46:37:af:4f:5e:f1:16:ad:49:f9:96:
69:4c:ec:11:d5:13:1c:92:55:73:18:d0:fb:a2:71:6b:c2:f3:
b5:92:a5:72:3d:30:72:3b:24:a4:65:1b:85:1f:32:f4:51:e2:
6b:15:b1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:21:46 2025 by rpki-client