Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5FFDA9BCCEDD11ED86A31E7FC4F9AE02.roa
File: 5FFDA9BCCEDD11ED86A31E7FC4F9AE02.roa (raw, json)
Hash identifier: bWalI2wu+iBGM7+r0yrR59gju4ZREJjNEL9i1vk/72s=
Subject key identifier: 55:B0:4D:3A:D8:B3:BC:CF:AC:CB:A0:1F:17:76:48:7A:6D:8C:AF:D7
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0C4C
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5FFDA9BCCEDD11ED86A31E7FC4F9AE02.roa
Signing time: Thu 13 Jul 2023 04:02:26 +0000
ROA not before: Thu 13 Jul 2023 04:02:26 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 115.167.120.0/22 maxlen: 24
180.178.147.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 13:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3148 (0xc4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 13 04:02:26 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64af7751-3794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b1:47:86:fe:df:a3:11:d8:b1:6e:ad:e4:1e:
d6:6d:21:39:80:0d:79:c6:1c:95:5b:9b:3e:48:c9:
2c:ea:f2:52:55:bf:83:6a:ef:11:1c:41:e0:a8:2d:
ee:6f:bb:0d:aa:43:9e:1d:11:4e:bc:6d:fc:e2:11:
3c:df:38:11:dc:dd:3e:3c:a1:ed:38:20:87:4e:1c:
38:9b:94:08:94:06:6d:6d:7c:fc:43:b6:c8:fe:c9:
ad:56:5d:4c:d3:56:0d:1c:08:02:fe:c8:89:a6:23:
33:4f:47:17:47:08:1a:f5:20:85:ce:77:f9:73:17:
f4:ac:6c:a1:f5:45:a2:bd:57:20:9c:ec:f6:06:e2:
8b:90:85:64:9a:68:a0:a7:6b:fd:33:69:98:3e:39:
8b:00:ab:cf:ae:7a:db:64:ab:5c:c2:f7:d7:07:ee:
84:ef:a5:db:86:14:da:a8:ee:da:0e:80:e2:5a:68:
86:a6:f0:7f:72:c1:cf:15:6d:4a:30:f3:09:b6:73:
b2:6f:e0:f2:02:7d:76:3b:83:1e:03:9b:b9:95:d6:
e2:33:48:5e:df:1a:ae:2a:e1:c2:4b:ac:33:e3:05:
d7:0d:8b:03:ab:ea:23:c8:e8:19:46:bc:40:a2:af:
2c:d8:dd:a3:39:4d:c7:11:78:dc:a4:a3:f6:b9:4d:
31:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B0:4D:3A:D8:B3:BC:CF:AC:CB:A0:1F:17:76:48:7A:6D:8C:AF:D7
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5FFDA9BCCEDD11ED86A31E7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.120.0/22
180.178.147.0/24
202.92.18.0/24
202.92.21.0/24
Signature Algorithm: sha256WithRSAEncryption
09:1f:d9:f9:58:04:70:ed:2d:81:63:3e:ed:5d:57:e1:5e:18:
ae:e8:91:6e:86:1d:f6:4b:3d:0f:85:5e:c7:99:33:2f:92:24:
01:5b:4a:bf:be:be:82:3a:8d:82:58:e9:e6:70:61:c0:92:65:
ba:5a:a9:fa:ef:3c:7b:de:18:be:41:a9:0d:c3:fc:1c:c1:48:
54:d6:f5:69:7a:cb:90:25:75:15:60:49:da:0e:bf:a4:e2:70:
d7:4f:75:bf:ac:58:4d:9f:ec:fd:d1:06:9c:28:67:a4:39:fa:
c5:15:06:53:43:0e:0c:57:09:25:98:85:59:33:9a:37:e9:13:
7b:2f:15:67:02:81:01:14:54:60:96:b0:93:99:a0:9c:f3:37:
31:f8:de:77:38:2a:06:f6:a7:f2:2f:60:03:8d:ce:79:c0:d9:
38:6f:94:cb:fd:33:ee:c5:45:47:43:c9:2f:7f:15:12:d1:06:
c9:03:29:28:fd:f5:da:b1:ab:47:8b:d8:f7:10:f1:21:50:5c:
e7:1e:4e:90:72:e4:35:de:27:99:ac:a3:d7:0c:97:a4:6c:a7:
80:bf:03:0f:20:78:b0:ad:a1:60:65:c0:31:93:6b:22:98:f9:
8d:0c:3a:06:c1:d7:b8:53:09:05:de:13:8c:55:f6:ec:4e:05:
5d:22:a9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:34 2024 by rpki-client on console-ams.rpki-client.org