Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/79E880C2E35511EDA63D5182C4F9AE02.roa
File: 79E880C2E35511EDA63D5182C4F9AE02.roa (raw, json)
Hash identifier: PushJRylBJ0fgVFj8s6reKVrPepUTjxKXN8Sn1ZaJrY=
Subject key identifier: 54:D7:FD:2E:EC:72:B6:18:61:97:D8:B1:12:BF:F3:20:18:27:1F:86
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0BB0
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/79E880C2E35511EDA63D5182C4F9AE02.roa
Signing time: Wed 24 May 2023 23:25:12 +0000
ROA not before: Wed 24 May 2023 23:25:12 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 131275
IP address blocks: 223.29.232.0/24 maxlen: 24
223.29.233.0/24 maxlen: 24
223.29.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2992 (0xbb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 23:25:12 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646e9cd8-6b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:cd:c9:26:69:e6:24:e6:3d:f3:4d:3e:0c:
8a:e3:75:a4:35:d6:28:83:f7:81:eb:c7:4e:a4:b1:
64:9c:c1:63:f7:53:92:54:ef:e9:a7:a2:85:d5:b5:
22:68:02:db:75:4c:a1:5a:c7:88:21:3e:51:4b:a8:
67:c4:ad:db:8f:7f:b2:89:80:c8:72:34:99:b5:a0:
d1:a9:56:49:38:5d:2a:b1:f0:92:f1:35:d0:1b:7e:
64:f7:1e:ce:96:02:fe:36:c5:63:b0:49:b8:00:47:
04:b2:80:f4:bd:59:cc:78:65:4d:ac:fc:1a:a8:79:
01:18:aa:cc:26:3e:cd:e6:a6:98:d5:9e:5a:3e:87:
6b:2c:22:d4:3a:8e:3e:75:88:5a:66:5e:e6:d0:a6:
26:0b:14:a8:84:50:5d:c3:96:3e:19:10:0d:c2:95:
14:87:cf:87:7c:b6:f4:6f:98:4e:f9:7f:fa:d2:a1:
f3:16:ab:1a:75:2c:02:b6:e7:05:33:ae:56:53:f4:
be:3c:d5:35:6f:e4:7f:23:73:9f:ee:6a:ee:00:89:
2f:d4:f4:34:00:df:53:91:cb:bc:96:b7:f2:48:99:
54:27:fd:0c:f2:51:1d:43:ba:7d:32:4c:ce:0c:ee:
ec:fa:c1:42:ba:6b:f4:c5:6e:b9:cc:9c:e5:a7:8f:
8b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D7:FD:2E:EC:72:B6:18:61:97:D8:B1:12:BF:F3:20:18:27:1F:86
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/79E880C2E35511EDA63D5182C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.232.0-223.29.234.255
Signature Algorithm: sha256WithRSAEncryption
0d:44:48:9d:9c:cc:8b:e3:31:33:d6:7f:1e:3b:4e:45:e7:73:
53:c6:48:e2:49:2b:fc:38:6d:5d:fa:5f:b6:5d:b9:2d:4d:fc:
08:a4:3a:e5:90:2a:58:2b:37:7e:53:a3:dc:cd:e4:1c:69:24:
11:d4:a0:fd:22:79:6a:9b:0e:d0:bc:98:51:42:80:ae:74:b6:
82:92:22:f9:59:f5:22:68:f1:9c:61:b2:b2:f7:6f:e8:4b:02:
b8:2c:55:1a:5f:97:58:a2:80:b6:32:fc:d3:37:48:45:86:8d:
5d:e8:b4:4f:29:01:16:35:cf:21:ec:ef:7c:4a:7f:f9:40:db:
f5:ab:f2:16:d8:75:d7:61:13:f7:f6:e8:bf:a0:a9:d6:b1:ca:
47:c4:b6:a9:56:e3:c0:51:5c:1d:ec:a2:2f:c2:c2:c1:ba:5d:
8e:a3:72:45:a0:37:1e:b7:8c:76:46:5b:73:f9:c0:76:02:0d:
ce:f9:1f:df:49:f0:91:c0:97:b7:4e:56:fb:47:b2:8f:ad:f8:
11:e3:0b:82:d6:8f:c5:0c:86:c0:cd:ec:6b:10:ef:d9:36:53:
4a:36:3c:1f:e3:a0:17:87:8b:96:60:b5:e4:18:d6:21:6c:96:
8d:98:e8:a2:6c:53:eb:af:cc:66:aa:83:90:15:a7:8f:38:92:
e2:d0:7f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 08:54:49 2023 by rpki-client on console-fra.rpki-client.org