Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/504AF166F64E11EEAF702479C4F9AE02.roa
File: 504AF166F64E11EEAF702479C4F9AE02.roa (raw, json)
Hash identifier: 687oBba133Jc/z7WUF59rF/1JwkDhXwlAi4YalTHqk8=
Subject key identifier: 69:38:1F:8F:E6:1F:AD:5B:8B:47:90:E4:C1:1A:9A:AD:67:EA:50:8E
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1047
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/504AF166F64E11EEAF702479C4F9AE02.roa
Signing time: Tue 09 Apr 2024 08:55:11 +0000
ROA not before: Tue 09 Apr 2024 08:55:11 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 54702
IP address blocks: 115.167.3.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 05:41:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4167 (0x1047)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 9 08:55:11 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6615026f-b8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f3:0f:fe:d5:6a:95:cd:0d:35:e5:a3:b0:a3:
9f:dc:36:bf:a2:d8:be:a5:c8:55:ee:43:93:11:fb:
cb:d4:14:79:aa:66:5b:f9:da:60:aa:ca:9d:b2:5a:
25:11:33:3b:2f:59:81:df:43:37:09:14:46:df:33:
d3:49:e3:ba:6f:76:f6:cd:49:a0:8b:45:f7:58:2f:
45:50:40:e7:d4:88:93:06:7a:d9:ac:ed:41:1b:a0:
2c:7d:a4:2a:f3:48:a6:28:63:9a:72:77:8d:e1:89:
23:5e:72:e1:a4:eb:32:4c:a5:3e:d9:53:c3:f8:04:
1c:f9:67:c1:c6:b5:76:53:4d:93:5b:45:bb:05:f8:
e2:ce:c9:00:72:34:cb:70:5a:9c:41:fc:ce:d2:32:
be:c4:51:b1:cb:90:ff:13:c6:90:44:d3:67:5e:5e:
b8:ee:49:c5:ae:af:4f:b1:f9:5f:2e:52:16:a6:88:
77:4f:ba:de:e0:8e:8b:f6:f7:29:91:a0:e1:8e:a9:
c9:81:29:16:0b:dd:89:9a:79:c8:47:5f:db:ee:83:
60:ba:f0:9c:93:8d:51:2d:38:a0:c3:61:e3:c6:aa:
bd:44:89:2e:fc:75:42:8d:b5:e7:9a:f2:cf:2e:f4:
33:54:66:74:62:73:d1:1f:f2:33:86:0d:a3:ac:43:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:38:1F:8F:E6:1F:AD:5B:8B:47:90:E4:C1:1A:9A:AD:67:EA:50:8E
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/504AF166F64E11EEAF702479C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.3.0/24
115.167.12.0-115.167.23.255
Signature Algorithm: sha256WithRSAEncryption
0f:d1:73:0e:4b:5d:bc:86:f0:4e:02:50:e5:7f:e4:da:1a:54:
88:dc:20:02:e1:4f:db:52:a9:be:c9:d2:8b:15:d8:07:f3:fe:
57:1b:f3:f7:8c:4d:b8:c1:ac:ee:ed:e3:a7:a1:bf:0e:5f:11:
6b:f2:20:51:e1:65:8f:be:fc:3a:7f:6e:a3:a0:fc:53:4a:e7:
88:a5:98:e3:6c:88:1b:4e:9c:65:11:e0:0c:b2:7a:46:f6:d6:
a7:c2:41:a8:9d:89:92:6a:71:94:de:dc:ca:ed:f5:d8:23:bb:
3e:e1:ad:3e:2c:45:e3:dc:c6:fb:19:f6:57:99:58:47:41:be:
5e:19:18:72:9d:27:51:63:1a:b8:99:39:6b:3b:c2:9a:2d:bb:
c5:d2:1f:77:e2:90:0a:d6:55:d8:b7:b6:fb:4c:16:73:b1:84:
10:9a:6b:48:fb:07:d2:f7:4d:69:58:4f:62:d3:ae:a3:a4:c0:
72:2a:88:9a:c8:d3:7b:7e:e5:89:18:76:be:8e:c2:2b:1c:25:
af:09:ba:16:6f:a6:c4:35:de:80:9a:bf:f4:9f:07:89:8b:ee:
bf:07:70:15:fe:37:12:44:d9:91:dd:18:80:cb:d1:be:6c:16:
32:49:7c:70:69:39:56:52:5a:f2:3c:fb:1e:f5:e6:70:48:2b:
3a:0b:95:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 09:34:03 2024 by rpki-client on console-fra.rpki-client.org