Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2E7C75729AA011EFA11A2159C4F9AE02.roa
File: 2E7C75729AA011EFA11A2159C4F9AE02.roa (raw, json)
Hash identifier: dkyAhmMzKleZsx6aFYT5u+c/KVxLVgbwCFzSahplI18=
Subject key identifier: F2:F4:E9:65:89:BA:CF:23:BE:F8:E7:29:CA:EA:C6:A5:5F:88:21:7E
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1B83
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2E7C75729AA011EFA11A2159C4F9AE02.roa
Signing time: Wed 06 Nov 2024 10:27:02 +0000
ROA not before: Wed 06 Nov 2024 10:27:02 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 11:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7043 (0x1b83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 6 10:27:02 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=672b4476-2937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:ba:1e:51:1a:9a:26:12:05:76:f9:15:c9:
a9:c2:62:dd:61:be:a3:bd:a8:d7:9d:cd:7e:48:69:
1c:20:68:62:70:75:e5:a0:6c:8b:96:ea:f4:1f:ac:
f8:9c:1d:d8:cf:40:78:3d:23:32:e5:fe:d2:c9:3f:
43:88:44:34:c9:5d:7f:7b:a4:5d:3d:09:57:a8:11:
e0:20:59:fb:75:e0:b1:a4:8c:aa:54:c9:e1:8a:62:
49:a1:70:a5:3d:06:ca:43:ae:c5:3d:0c:65:0d:f7:
3f:78:8d:c7:b5:65:66:f3:06:2b:07:f7:bc:d0:fc:
e1:c6:06:41:9d:27:7c:ac:ea:60:92:b8:82:b7:2f:
a4:cd:e6:2e:5a:90:1e:c4:f3:7e:f1:e7:84:6d:6d:
0b:c3:e4:c3:68:76:65:99:f4:85:2f:86:37:bd:e6:
7b:d7:30:84:2d:10:11:37:5c:68:c4:da:46:81:b3:
72:22:be:65:41:fd:3f:07:2b:7a:1d:6b:7c:b3:dc:
4c:df:e7:1f:19:71:fd:3f:de:97:6b:b1:05:68:69:
9f:8e:77:94:93:30:43:a2:15:3d:00:5e:fe:fd:df:
f0:1d:68:fe:42:db:d2:f3:44:e9:aa:0b:03:7e:91:
b8:8f:45:35:1f:c6:70:87:6d:df:a8:ef:59:29:1d:
72:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F4:E9:65:89:BA:CF:23:BE:F8:E7:29:CA:EA:C6:A5:5F:88:21:7E
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2E7C75729AA011EFA11A2159C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.29.0-115.167.31.255
115.167.48.0/24
115.167.64.0/24
115.167.66.0/24
115.167.73.0/24
115.167.77.0/24
115.167.125.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:8d:15:c3:f0:b8:c7:7b:03:e9:c7:81:02:cf:55:d0:22:fd:
0e:5f:d0:5f:2d:63:f8:a9:1f:f7:fb:f6:d7:1a:c3:17:8e:ec:
5d:d1:09:bb:5c:54:73:4e:3c:27:ea:f3:58:d8:36:95:d7:30:
30:54:c1:20:91:86:2d:f3:49:ef:e7:a9:d8:ae:f0:49:76:ef:
b1:5e:33:a3:91:3e:de:69:5c:ba:e3:12:35:f9:82:33:56:73:
85:83:31:18:ac:94:57:76:15:25:f5:7f:f7:35:03:08:5d:40:
8e:4b:61:b2:a1:37:ab:a3:20:9e:3a:11:d0:10:e4:ab:db:09:
9c:42:61:20:75:32:36:ba:98:b4:bb:1c:21:aa:b8:7d:c9:91:
f3:32:5b:c5:3b:44:2b:31:78:59:08:ac:e7:0f:1a:32:93:34:
24:d3:32:73:29:25:74:15:b4:91:aa:c7:5d:b6:3a:c5:4b:8f:
3a:69:24:74:b9:84:d4:1f:c6:04:cd:de:35:cd:ba:4d:d8:21:
78:19:7a:93:40:52:f2:53:3c:a4:20:30:7f:68:78:23:36:05:
16:32:3d:95:22:0a:b2:f1:7c:b8:97:ed:29:94:a0:e4:3d:2f:
04:0a:ee:c1:c2:ec:b9:cb:9a:27:de:40:1d:8e:51:d0:c8:ab:
c1:7c:b9:f3
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgICG4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQxMTA2MTAyNzAyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzJiNDQ3Ni0yOTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAshe6HlEamiYSBXb5FcmpwmLdYb6jvajXnc1+SGkcIGhicHXloGyLlur0H6z4
nB3Yz0B4PSMy5f7SyT9DiEQ0yV1/e6RdPQlXqBHgIFn7deCxpIyqVMnhimJJoXCl
PQbKQ67FPQxlDfc/eI3HtWVm8wYrB/e80PzhxgZBnSd8rOpgkriCty+kzeYuWpAe
xPN+8eeEbW0Lw+TDaHZlmfSFL4Y3veZ71zCELRARN1xoxNpGgbNyIr5lQf0/Byt6
HWt8s9xM3+cfGXH9P96Xa7EFaGmfjneUkzBDohU9AF7+/d/wHWj+QtvS80TpqgsD
fpG4j0U1H8Zwh23fqO9ZKR1y5QIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFPL06WWJ
us8jvvjnKcrqxqVfiCF+MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMkU3Qzc1NzI5
QUEwMTFFRkExMUEyMTU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSwYIKwYBBQUHAQcBAf8E
PDA6MDgEAgABMDIwDAMEAHOnHQMEBXOnAAMEAHOnMAMEAHOnQAMEAHOnQgMEAHOn
SQMEAHOnTQMEAHOnfTANBgkqhkiG9w0BAQsFAAOCAQEAbo0Vw/C4x3sD6ceBAs9V
0CL9Dl/QXy1j+Kkf9/v21xrDF47sXdEJu1xUc048J+rzWNg2ldcwMFTBIJGGLfNJ
7+ep2K7wSXbvsV4zo5E+3mlcuuMSNfmCM1ZzhYMxGKyUV3YVJfV/9zUDCF1Ajkth
sqE3q6MgnjoR0BDkq9sJnEJhIHUyNrqYtLscIaq4fcmR8zJbxTtEKzF4WQis5w8a
MpM0JNMycykldBW0karHXbY6xUuPOmkkdLmE1B/GBM3eNc26TdgheBl6k0BS8lM8
pCAwf2h4IzYFFjI9lSIKsvF8uJftKZSg5D0vBAruwcLsucuaJ95AHY5R0MirwXy5
8w==
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:16:52 2025 by rpki-client