Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2D54530C6B9F11EFB2736E6FC4F9AE02.roa
File: 2D54530C6B9F11EFB2736E6FC4F9AE02.roa (raw, json)
Hash identifier: h00yz5hZZjGAVrwmaa1D34LK3pndzaMsdLK6FlvPgsI=
Subject key identifier: 8B:81:30:CD:07:35:A2:C9:40:C6:11:1A:05:9B:6F:C0:3E:43:BC:98
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1573
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2D54530C6B9F11EFB2736E6FC4F9AE02.roa
Signing time: Thu 05 Sep 2024 15:54:47 +0000
ROA not before: Thu 05 Sep 2024 15:54:47 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 115.167.0.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.108.0/22 maxlen: 24
115.167.126.0/24 maxlen: 24
115.167.127.0/24 maxlen: 24
175.110.68.0/22 maxlen: 24
175.110.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Oct 2024 10:36:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5491 (0x1573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 5 15:54:47 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66d9d447-ec2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:01:1c:29:d1:6f:ab:22:bb:44:ea:6f:7d:a3:
ae:61:6d:a0:ef:02:4d:1e:1f:8e:81:9f:eb:87:aa:
1a:18:da:48:37:a6:bf:0b:55:51:01:59:e8:f9:07:
02:02:2b:66:a2:65:1c:85:85:58:f7:fb:a3:5a:71:
3a:c2:69:48:4e:7f:7c:0f:c5:fe:93:8b:ce:a5:ef:
c0:ba:46:8a:2f:b6:12:d6:93:ad:5a:6a:ad:fe:a6:
16:eb:c3:02:c6:52:0f:2b:e2:39:8e:42:c6:64:69:
9a:dc:57:38:f9:ac:53:fb:6d:6c:eb:5b:7f:db:a7:
4d:56:a3:dc:34:a1:bb:5e:ac:2e:0e:f7:e9:19:70:
ee:17:6f:07:ac:78:40:c9:7c:83:ce:79:55:ce:6e:
4d:b7:e9:2b:0e:2b:9f:87:47:04:52:8e:a9:28:e2:
b1:d2:7a:90:ff:10:1d:05:a4:36:1a:26:3c:16:7d:
f1:9f:c6:1a:41:a6:70:d6:b0:49:da:44:b5:9a:66:
a5:3a:56:3c:99:20:49:9e:e6:32:fc:34:20:94:09:
46:0c:ea:1e:ec:b3:b1:72:95:c6:d9:2b:ad:13:2f:
e1:3f:8c:c1:88:2b:d4:92:df:02:3d:68:c8:3d:de:
69:8c:3c:59:9a:b6:bf:a4:af:69:50:01:e4:3b:46:
4e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:81:30:CD:07:35:A2:C9:40:C6:11:1A:05:9B:6F:C0:3E:43:BC:98
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2D54530C6B9F11EFB2736E6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.0.0/24
115.167.4.0/24
115.167.108.0/22
115.167.126.0/23
175.110.68.0/22
175.110.80.0/22
Signature Algorithm: sha256WithRSAEncryption
45:85:b9:6b:c9:36:71:7a:c3:41:d4:a3:c8:01:a2:e6:d1:ea:
b9:f8:6c:e3:aa:d8:c2:a4:8c:6b:2c:c6:6a:84:fc:56:2f:64:
6c:90:9e:db:cb:7e:dd:76:2a:01:00:89:9c:42:9b:3e:ed:25:
9d:f2:09:9b:f7:8a:db:83:59:61:30:43:0c:7d:bc:f3:a1:c5:
57:62:2c:9c:bb:08:0a:a3:b7:7e:dd:e7:ea:42:d7:d1:93:f1:
38:44:1e:ac:98:32:7b:67:06:7f:b3:63:6e:ad:53:8a:c2:e7:
40:b1:85:ee:e8:1a:21:9e:74:30:f4:da:bb:ce:47:cb:42:fe:
e8:24:da:d4:89:37:96:d6:3b:49:88:7e:45:92:20:24:70:d8:
b9:75:d0:9e:43:8e:fb:77:a7:36:fa:21:fc:9e:20:70:0b:fe:
ee:60:d0:2f:0d:74:be:77:dc:18:fa:d6:7d:35:dd:81:19:a5:
70:37:5f:8f:a6:f9:22:ee:e2:83:55:bd:58:a8:f9:3a:e7:59:
cc:63:18:c6:8d:5d:f5:71:cc:70:e3:54:ae:33:7b:1a:9a:cb:
a6:7f:f1:8f:4c:18:30:97:9a:e2:08:e8:de:99:1a:ac:3e:b9:
e0:a6:b5:dd:ee:58:36:24:53:c3:7b:83:9f:bf:1d:77:bb:22:
89:70:b4:fa
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgICFXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQwOTA1MTU1NDQ3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5ZDQ0Ny1lYzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6gEcKdFvqyK7ROpvfaOuYW2g7wJNHh+OgZ/rh6oaGNpIN6a/C1VRAVno+QcC
AitmomUchYVY9/ujWnE6wmlITn98D8X+k4vOpe/AukaKL7YS1pOtWmqt/qYW68MC
xlIPK+I5jkLGZGma3Fc4+axT+21s61t/26dNVqPcNKG7XqwuDvfpGXDuF28HrHhA
yXyDznlVzm5Nt+krDiufh0cEUo6pKOKx0nqQ/xAdBaQ2GiY8Fn3xn8YaQaZw1rBJ
2kS1mmalOlY8mSBJnuYy/DQglAlGDOoe7LOxcpXG2SutEy/hP4zBiCvUkt8CPWjI
Pd5pjDxZmra/pK9pUAHkO0ZOhQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFIuBMM0H
NaLJQMYRGgWbb8A+Q7yYMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMkQ1NDUzMEM2
QjlGMTFFRkIyNzM2RTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E
LjAsMCoEAgABMCQDBABzpwADBABzpwQDBAJzp2wDBAFzp34DBAKvbkQDBAKvblAw
DQYJKoZIhvcNAQELBQADggEBAEWFuWvJNnF6w0HUo8gBoubR6rn4bOOq2MKkjGss
xmqE/FYvZGyQntvLft12KgEAiZxCmz7tJZ3yCZv3ituDWWEwQwx9vPOhxVdiLJy7
CAqjt37d5+pC19GT8ThEHqyYMntnBn+zY26tU4rC50Cxhe7oGiGedDD02rvOR8tC
/ugk2tSJN5bWO0mIfkWSICRw2Ll10J5Djvt3pzb6IfyeIHAL/u5g0C8NdL533Bj6
1n013YEZpXA3X4+m+SLu4oNVvVio+TrnWcxjGMaNXfVxzHDjVK4zexqay6Z/8Y9M
GDCXmuII6N6ZGqw+ueCmtd3uWDYkU8N7g5+/HXe7IolwtPo=
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:34:00 2025 by rpki-client