Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/79533A0806D611EF9B5CF02EC4F9AE02.roa
File: 79533A0806D611EF9B5CF02EC4F9AE02.roa (raw, json)
Hash identifier: 0xJoQlCKe7iEdaHE6n8q26JC+/jcvzVvHs0iHxz7los=
Subject key identifier: 12:90:74:7D:71:3A:92:16:1A:4C:19:8E:1A:74:AD:24:E1:7F:E7:EA
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 114F
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/79533A0806D611EF9B5CF02EC4F9AE02.roa
Signing time: Tue 30 Apr 2024 09:46:10 +0000
ROA not before: Tue 30 Apr 2024 09:46:10 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 136030
IP address blocks: 103.151.26.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.65.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 09:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4431 (0x114f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 30 09:46:10 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6630bde2-7e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:da:e5:b7:60:14:09:b5:d8:fc:cf:34:5d:
76:31:42:cb:e7:c7:56:f4:62:6a:ae:8d:7e:04:64:
c5:f6:d0:99:49:27:53:bf:c1:59:a7:2e:76:51:43:
cc:59:6f:c2:ed:a9:4b:3a:87:0b:43:15:bb:02:16:
5f:95:46:28:9a:2b:b8:4b:91:44:be:2f:ad:2c:4b:
9b:51:58:0c:60:ef:7c:83:a9:c7:03:98:15:15:ab:
d7:16:69:5b:a3:9a:29:64:9c:96:81:3f:64:03:ab:
b5:ba:3b:f1:95:18:d7:98:1e:71:14:0d:92:bd:83:
ef:05:79:c5:34:09:77:6f:ce:1e:ed:cf:d0:6d:5e:
44:5b:55:5c:40:de:1a:ca:e2:ab:26:33:6c:48:4f:
be:f2:dd:f2:b9:e3:53:b8:b0:62:1b:e7:99:2c:3a:
f9:52:3a:6f:a4:64:eb:5b:91:7f:25:4d:fb:72:a8:
df:4e:f7:9b:51:4a:eb:9b:f3:75:02:d9:f6:0c:17:
db:3a:a8:dd:18:0b:28:9e:a1:b8:af:79:99:f4:06:
c0:fc:9e:3c:49:2c:f2:cd:33:eb:ec:2e:17:bf:66:
4e:87:88:2b:e9:3c:9e:3c:f7:8d:17:30:d1:5a:cb:
13:6d:83:df:28:13:f7:a7:e6:46:07:42:c0:10:d6:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:90:74:7D:71:3A:92:16:1A:4C:19:8E:1A:74:AD:24:E1:7F:E7:EA
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/79533A0806D611EF9B5CF02EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.26.0/24
113.203.241.0/24
115.167.50.0/24
115.167.64.0/23
115.167.76.0/24
115.167.124.0/23
Signature Algorithm: sha256WithRSAEncryption
27:bd:5a:6f:65:00:47:05:01:34:08:5c:ea:02:d8:92:99:83:
bf:28:c8:02:bf:f4:31:de:0f:23:67:45:fe:c5:34:e8:6b:3b:
f9:3f:76:1c:2b:72:6b:08:de:23:98:17:cb:a6:15:1b:05:4d:
35:c2:6d:e8:30:8d:e2:c9:06:3b:1d:55:2a:9e:63:eb:9d:85:
0a:38:3b:39:42:c5:dd:f5:69:38:6a:42:8a:08:14:3d:ca:bb:
61:bd:ae:39:99:a5:6b:29:ce:8b:88:86:eb:a1:e8:91:b2:73:
e0:77:da:c2:79:f3:9f:59:86:8e:28:84:31:cc:03:53:dc:f1:
7a:48:0a:29:cc:35:59:77:07:91:9b:ef:cf:fc:26:0c:eb:e5:
bb:3c:50:e8:78:3e:01:aa:57:77:0e:ba:63:c0:1e:fa:e5:07:
65:81:ab:9d:cc:95:71:f7:53:dd:a1:ca:7a:c9:e5:1d:83:15:
5d:6c:6c:88:9e:20:b1:d0:05:eb:09:3f:2b:f1:b6:40:8f:bf:
b9:c3:74:58:b6:c5:0e:24:ac:81:8d:18:0c:99:83:21:0b:81:
08:79:60:a9:9e:fe:e9:6b:99:01:b0:1d:1e:75:78:1d:be:f9:
1e:0a:05:5f:eb:ca:2d:bc:ac:5d:e4:6f:d1:28:2f:da:e8:22:
7a:eb:92:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 15:11:54 2024 by rpki-client on console-fra.rpki-client.org