Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/762A19E2BB8911EFB49D4D72C4F9AE02.roa
File: 762A19E2BB8911EFB49D4D72C4F9AE02.roa (raw, json)
Hash identifier: g9gNpKCiOwGu8YL3vPtMpyGF+3Dz+2H0X/44Pp4PUVc=
Subject key identifier: EA:C5:20:75:45:67:FD:43:D5:31:32:46:F4:E8:1B:53:C0:CA:3F:3A
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2113
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/762A19E2BB8911EFB49D4D72C4F9AE02.roa
Signing time: Mon 30 Dec 2024 12:22:48 +0000
ROA not before: Mon 30 Dec 2024 12:22:48 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 213993
IP address blocks: 115.167.5.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.12.0/24 maxlen: 24
115.167.13.0/24 maxlen: 24
115.167.14.0/24 maxlen: 24
115.167.52.0/24 maxlen: 24
115.167.53.0/24 maxlen: 24
115.167.54.0/24 maxlen: 24
115.167.55.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 07:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8467 (0x2113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 30 12:22:48 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67729098-95d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:e4:4b:85:ad:ec:eb:14:6a:d7:89:c8:db:
3a:67:69:96:d8:4a:c5:d9:59:17:3c:8a:7a:dc:82:
cb:ca:90:90:2f:55:34:cb:c0:57:bd:ae:7c:ee:4a:
c3:db:3b:3d:44:34:ce:d0:25:93:6d:d5:dc:b7:92:
c4:fc:20:5a:39:4c:4c:6b:55:87:95:28:e6:aa:35:
ca:26:c4:03:4c:c7:26:20:ba:72:18:87:f9:30:d0:
57:e5:76:ef:04:e7:b0:d5:34:23:7a:fe:8d:1f:3b:
85:cb:84:06:dd:7a:9b:c5:5b:fe:11:31:82:95:5e:
dc:6c:a4:f1:00:80:e5:5b:df:20:c6:75:18:87:8b:
59:e7:cf:fe:07:6c:05:e3:ac:a9:55:dd:47:09:0e:
c1:1d:9e:15:b5:ec:e7:cc:63:fc:8e:df:bc:1b:3a:
b3:9f:86:9b:03:91:a0:94:6d:3f:03:47:e4:0f:39:
72:40:0e:af:04:f6:5d:f9:46:03:b9:a2:3d:9e:d0:
a7:56:ad:bb:51:bc:93:02:55:af:bc:60:aa:9c:60:
4d:a8:08:a1:87:16:ac:a5:8b:12:1e:c3:0e:0d:62:
4b:6b:87:56:7b:8e:17:4a:31:7e:a6:b6:4a:4f:d5:
2b:3c:84:d2:7e:0a:c8:c2:70:aa:f2:e8:a2:c8:93:
34:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C5:20:75:45:67:FD:43:D5:31:32:46:F4:E8:1B:53:C0:CA:3F:3A
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/762A19E2BB8911EFB49D4D72C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.5.0/24
115.167.9.0/24
115.167.12.0-115.167.14.255
115.167.52.0/22
115.167.125.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e7:f3:4b:88:87:75:2e:09:24:b0:3f:d0:87:c1:e0:9e:48:
dc:ba:80:3b:17:e7:a9:d6:96:1c:6d:80:ad:ac:1c:0a:35:ce:
28:13:24:85:fe:57:12:ad:8c:a3:32:31:cf:6f:f2:24:83:5a:
3c:93:a7:c8:c9:45:b1:2c:53:45:37:bd:6d:b2:0c:f6:ce:91:
53:2b:c4:a1:ce:99:7b:06:f4:96:d0:46:56:e9:8d:68:1b:1b:
7e:bb:f2:ad:dc:03:a5:6d:59:91:b2:aa:f0:a3:38:e8:3c:0c:
5e:cf:39:0d:38:5c:f9:78:95:bd:97:1d:35:10:8d:cc:c8:8d:
00:44:f0:e7:54:05:84:fc:75:17:b2:eb:99:64:a7:a4:f1:c2:
a9:d4:22:ed:d9:80:0c:0a:d1:00:c1:a9:8b:3f:10:35:98:86:
70:d4:9f:30:78:86:64:99:2d:a8:e9:73:a2:cd:90:80:cd:f0:
0a:8b:10:32:ac:67:97:ab:eb:d9:8a:9f:c2:68:8c:4e:1c:36:
ad:2b:c0:92:75:65:aa:6e:ef:65:63:b3:7d:93:3d:82:93:ab:
7c:71:de:9d:79:b4:47:3f:15:9c:d0:c9:6b:70:2f:5e:55:5d:
86:fa:1e:1e:c0:1d:0b:15:a9:ed:b0:e0:c3:d3:f5:cc:9d:5b:
37:4d:e4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:53:22 2025 by rpki-client