Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/26F3285A814611EFB4CAB162C4F9AE02.roa
File: 26F3285A814611EFB4CAB162C4F9AE02.roa (raw, json)
Hash identifier: Eh06mL4StyE0xwnw/pDJmsGTiNlredhhYY0Dsi7ALzw=
Subject key identifier: 75:66:18:8B:30:0E:47:07:C9:F3:BE:31:D4:5E:D6:63:0F:86:BF:32
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1702
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/26F3285A814611EFB4CAB162C4F9AE02.roa
Signing time: Thu 03 Oct 2024 05:12:58 +0000
ROA not before: Thu 03 Oct 2024 05:12:58 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 199760
IP address blocks: 175.110.97.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 10:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5890 (0x1702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 3 05:12:58 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66fe27d9-dc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:06:67:d5:75:c4:37:e9:dd:45:94:cd:46:6f:
6a:f3:6a:c6:51:6c:79:bf:bf:26:98:52:a8:5b:8f:
18:62:c5:57:35:37:09:f8:7b:1f:2c:6c:92:ac:79:
c9:16:62:f4:f5:4d:fe:22:c9:5f:4a:fd:53:c1:b0:
3b:06:2f:cc:75:61:cd:c9:2b:9e:b6:35:21:51:fc:
44:59:c3:a2:7c:bd:45:77:cb:76:93:a7:37:14:38:
89:35:33:f1:f5:54:05:0a:67:b3:f5:3e:9c:96:54:
a8:ba:8c:0c:24:f9:6b:27:8c:3b:c2:ee:47:85:a1:
39:6a:64:b6:cd:0a:d6:26:60:85:24:4d:3a:8b:46:
57:4b:15:9d:46:49:79:dd:0e:3b:2f:2e:6b:b3:9a:
ad:07:f8:4c:a5:45:55:65:f7:ac:e0:1c:11:96:4b:
8e:75:56:c7:b0:bb:d9:66:18:63:83:77:b2:21:10:
22:fe:e6:ec:14:7b:9f:6e:ac:55:6d:ac:83:ae:33:
cc:32:70:79:48:23:48:eb:3e:ff:28:95:4f:8d:93:
b5:d9:c9:2c:25:ad:84:c9:be:4c:b2:c7:8a:86:d5:
92:8b:dd:42:c9:79:dd:d6:9f:07:ec:65:42:f4:e5:
f4:ca:0e:26:8f:ca:79:0e:99:c5:be:27:75:71:9d:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:66:18:8B:30:0E:47:07:C9:F3:BE:31:D4:5E:D6:63:0F:86:BF:32
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/26F3285A814611EFB4CAB162C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.110.97.0/24
175.110.105.0-175.110.106.255
Signature Algorithm: sha256WithRSAEncryption
45:dc:df:1c:e8:fa:c0:c2:be:0a:0c:36:70:f7:7e:25:6d:1d:
c8:ac:90:c3:d5:e1:ac:d7:c5:0c:40:30:7f:55:9a:95:e0:20:
71:d3:55:94:78:a0:33:82:f5:73:cd:cb:7e:a5:91:33:77:fa:
82:c4:b4:0a:a0:74:ec:0e:90:cf:b5:75:95:51:fb:ad:fa:1c:
12:5c:03:56:47:53:29:85:8c:71:20:d3:4b:c2:04:b6:7e:85:
2a:34:16:a3:3c:b2:70:c4:26:16:29:09:be:72:fa:84:bb:bb:
2f:a0:26:7e:e2:fc:84:ac:d3:9a:36:0c:e4:3c:a7:fa:fc:da:
3b:f0:19:c8:58:11:5f:43:66:d7:16:4f:5b:a6:34:36:fd:9d:
a7:71:25:bc:78:a0:e5:cb:02:16:32:69:34:44:36:bf:68:8f:
16:20:04:93:1d:fb:5c:a2:3b:8a:5d:48:bc:82:4d:e7:e8:6d:
19:c9:b2:b7:88:e7:14:99:8a:7e:fc:d9:ee:8e:9f:de:02:69:
35:b5:14:3e:d4:4d:d3:dd:70:3d:6d:69:f8:6c:d3:fa:ab:11:
3e:8b:39:91:bd:fb:dd:52:eb:6c:15:14:af:66:5d:b2:d4:39:
3f:18:ca:b4:da:3d:75:a0:07:a4:9b:98:0e:e7:50:34:79:d1:
d5:4c:3f:0d
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICFwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQxMDAzMDUxMjU4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmZlMjdkOS1kYzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAywZn1XXEN+ndRZTNRm9q82rGUWx5v78mmFKoW48YYsVXNTcJ+HsfLGySrHnJ
FmL09U3+IslfSv1TwbA7Bi/MdWHNySuetjUhUfxEWcOifL1Fd8t2k6c3FDiJNTPx
9VQFCmez9T6cllSouowMJPlrJ4w7wu5HhaE5amS2zQrWJmCFJE06i0ZXSxWdRkl5
3Q47Ly5rs5qtB/hMpUVVZfes4BwRlkuOdVbHsLvZZhhjg3eyIRAi/ubsFHufbqxV
bayDrjPMMnB5SCNI6z7/KJVPjZO12cksJa2Eyb5MsseKhtWSi91CyXnd1p8H7GVC
9OX0yg4mj8p5DpnFvid1cZ2y2wIDAQABo4ICozCCAp8wHQYDVR0OBBYEFHVmGIsw
DkcHyfO+MdRe1mMPhr8yMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMjZGMzI4NUE4
MTQ2MTFFRkI0Q0FCMTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E
HjAcMBoEAgABMBQDBACvbmEwDAMEAK9uaQMEAK9uajANBgkqhkiG9w0BAQsFAAOC
AQEARdzfHOj6wMK+Cgw2cPd+JW0dyKyQw9XhrNfFDEAwf1WaleAgcdNVlHigM4L1
c83LfqWRM3f6gsS0CqB07A6Qz7V1lVH7rfocElwDVkdTKYWMcSDTS8IEtn6FKjQW
ozyycMQmFikJvnL6hLu7L6AmfuL8hKzTmjYM5Dyn+vzaO/AZyFgRX0Nm1xZPW6Y0
Nv2dp3ElvHig5csCFjJpNEQ2v2iPFiAEkx37XKI7il1IvIJN5+htGcmyt4jnFJmK
fvzZ7o6f3gJpNbUUPtRN091wPW1p+GzT+qsRPos5kb373VLrbBUUr2ZdstQ5PxjK
tNo9daAHpJuYDudQNHnR1Uw/DQ==
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:05:04 2025 by rpki-client