Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2C367CECE60711EFB787831DC4F9AE02.roa
File: 2C367CECE60711EFB787831DC4F9AE02.roa (raw, json)
Hash identifier: KKvlW7mdWrg8PJ2qFSZ0aauvgLPdPjzX23B49UvhYHI=
Subject key identifier: C8:0F:9B:47:63:15:8D:83:55:46:37:EB:0D:CD:57:91:96:4B:71:AB
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2296
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2C367CECE60711EFB787831DC4F9AE02.roa
Signing time: Sat 08 Feb 2025 10:26:35 +0000
ROA not before: Sat 08 Feb 2025 10:26:35 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 214111
IP address blocks: 223.29.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 07:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8854 (0x2296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Feb 8 10:26:35 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67a7315b-37ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:38:02:15:08:17:c7:f5:15:ed:68:33:53:
08:22:72:dc:22:96:49:e2:36:75:d4:4f:79:6a:20:
8c:a2:ab:bf:7c:84:29:a1:ce:18:49:18:00:d7:57:
fa:5d:42:8a:d9:f7:12:eb:e5:02:13:49:e2:ec:92:
b7:3f:a3:1c:16:64:c0:ce:34:5d:b4:f5:d5:f2:1f:
cf:35:dc:63:55:10:de:59:a2:b2:e8:b2:b7:c3:84:
11:de:8f:84:6c:80:67:c8:15:a7:04:03:93:77:9d:
93:6e:08:53:ce:f3:9a:62:11:61:5a:3a:7b:2f:57:
35:22:67:19:00:a5:09:49:37:a2:3c:c4:ab:82:fc:
ba:56:ae:1d:09:57:79:d8:7d:ce:71:00:0d:59:9c:
23:84:44:8b:3f:7d:86:c1:7f:6a:d1:1a:7e:17:28:
df:75:1b:6b:b4:22:c4:6b:81:9a:25:76:9a:9f:8b:
d7:72:77:0c:df:85:73:d7:e4:46:97:b4:40:53:a4:
55:16:4e:c5:92:bb:3f:27:95:0c:4f:36:bf:46:52:
49:2c:7f:50:5c:0a:41:06:26:e3:a0:09:29:df:bf:
68:31:50:be:2c:98:ba:48:5a:70:37:2f:6b:7c:48:
4e:6c:1f:83:83:2f:ef:0f:9e:de:d5:e0:6a:9b:8f:
4a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0F:9B:47:63:15:8D:83:55:46:37:EB:0D:CD:57:91:96:4B:71:AB
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2C367CECE60711EFB787831DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.236.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:4f:7e:4c:4c:6a:5b:11:33:47:2d:23:fc:3a:05:8b:f9:8f:
dc:87:69:b4:3c:d8:04:47:e9:f1:27:d4:6e:06:26:d8:6c:be:
90:f6:1f:65:12:a3:2f:7f:55:bb:18:a8:01:a4:67:b0:c2:ea:
e3:db:58:68:ac:7d:01:7b:1c:03:4f:c6:07:2e:99:27:bc:a7:
19:3a:55:77:c4:71:84:48:b4:23:8d:c4:03:38:b3:73:8d:51:
4e:fd:58:65:4b:3e:de:ba:2f:8b:a6:2e:e1:68:1e:81:ef:e5:
13:d6:59:fc:dd:88:e8:c5:47:39:a0:79:26:de:4f:86:e5:94:
10:05:a7:a1:86:93:38:14:8e:5e:f6:3a:3d:3f:dc:c7:7a:9b:
d9:34:c7:74:e5:76:ab:9a:35:7f:61:8f:5c:63:ee:30:4f:b6:
f4:3c:0c:80:98:dc:1c:e3:e8:1b:3a:5e:f8:30:7c:43:68:df:
cf:ac:18:e6:6c:59:3b:30:b7:9b:0e:a1:5e:c6:d8:5c:37:23:
56:53:bc:f6:af:69:9f:61:00:96:bf:4f:16:05:bb:dc:33:ee:
8c:23:f1:d5:16:2d:1b:dc:43:96:f4:4d:b4:b0:f9:85:81:e8:
96:c0:56:2d:f2:fd:14:5d:9e:95:da:e2:75:76:08:bd:7a:64:
65:4d:6f:1c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICIpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjUwMjA4MTAyNjM1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2E3MzE1Yi0zN2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2tA4AhUIF8f1Fe1oM1MIInLcIpZJ4jZ11E95aiCMoqu/fIQpoc4YSRgA11f6
XUKK2fcS6+UCE0ni7JK3P6McFmTAzjRdtPXV8h/PNdxjVRDeWaKy6LK3w4QR3o+E
bIBnyBWnBAOTd52TbghTzvOaYhFhWjp7L1c1ImcZAKUJSTeiPMSrgvy6Vq4dCVd5
2H3OcQANWZwjhESLP32GwX9q0Rp+FyjfdRtrtCLEa4GaJXaan4vXcncM34Vz1+RG
l7RAU6RVFk7Fkrs/J5UMTza/RlJJLH9QXApBBibjoAkp379oMVC+LJi6SFpwNy9r
fEhObB+Dgy/vD57e1eBqm49KIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMgPm0dj
FY2DVUY36w3NV5GWS3GrMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMkMzNjdDRUNF
NjA3MTFFRkI3ODc4MzFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADfHewwDQYJKoZIhvcNAQELBQADggEBALtPfkxMalsRM0ct
I/w6BYv5j9yHabQ82ARH6fEn1G4GJthsvpD2H2USoy9/VbsYqAGkZ7DC6uPbWGis
fQF7HANPxgcumSe8pxk6VXfEcYRItCONxAM4s3ONUU79WGVLPt66L4umLuFoHoHv
5RPWWfzdiOjFRzmgeSbeT4bllBAFp6GGkzgUjl72Oj0/3Md6m9k0x3TldquaNX9h
j1xj7jBPtvQ8DICY3Bzj6Bs6XvgwfENo38+sGOZsWTswt5sOoV7G2Fw3I1ZTvPav
aZ9hAJa/TxYFu9wz7owj8dUWLRvcQ5b0TbSw+YWB6JbAVi3y/RRdnpXa4nV2CL16
ZGVNbxw=
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:45:59 2025 by rpki-client