Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/83A8DBE6391E11EFB37CDF45C4F9AE02.roa
File: 83A8DBE6391E11EFB37CDF45C4F9AE02.roa (raw, json)
Hash identifier: TZP1I9KQtYz2zxTVL+wmpoqHWLbIrYZNzlbAafIUKOY=
Subject key identifier: 42:04:73:62:FE:CE:2D:61:D7:33:D6:00:65:18:0D:6E:9D:1A:D0:11
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1402
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/83A8DBE6391E11EFB37CDF45C4F9AE02.roa
Signing time: Wed 03 Jul 2024 09:27:49 +0000
ROA not before: Wed 03 Jul 2024 09:27:49 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 113.203.239.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.60.0/22 maxlen: 22
115.167.65.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
175.110.68.0/22 maxlen: 22
175.110.80.0/22 maxlen: 22
180.178.142.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 12:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5122 (0x1402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 3 09:27:49 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66851995-eb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:2b:42:4c:a7:33:61:05:e5:8c:de:ba:ea:
46:87:24:48:45:47:b2:e6:01:8d:ec:aa:35:10:c1:
c5:64:4f:29:e4:9f:bb:66:d8:55:f9:a4:e6:83:d2:
76:38:ae:da:ed:7e:9b:61:71:60:6d:b0:49:83:e5:
75:9b:f6:7a:79:35:dc:39:99:cd:09:6b:7d:12:ab:
63:6b:43:99:ea:21:6e:5d:e1:cf:ad:f7:d0:7d:a7:
e7:e5:44:5b:fa:e9:c0:7c:46:fa:ae:3e:cf:d3:5f:
e3:f7:91:20:83:e8:9c:25:ee:d4:45:da:80:c2:10:
11:86:98:ac:58:79:17:c1:a0:22:98:85:93:b5:4e:
24:12:ee:eb:c2:7a:4f:bc:eb:91:4b:50:7c:06:51:
fe:39:eb:e8:94:93:ee:45:20:8f:3f:0f:10:c3:14:
38:ef:96:8a:4b:65:6b:fa:14:e5:69:0a:fb:54:a8:
a3:14:34:3b:63:7f:95:7c:b6:27:3a:e3:66:fa:1d:
4d:53:bc:77:e8:76:5f:f1:90:6a:a3:63:fc:9d:9a:
5e:d7:c3:1c:5d:3a:f2:be:e6:bb:86:8e:6b:dc:92:
e9:82:c5:20:51:d2:57:7e:dd:2a:93:b3:3d:0b:88:
9a:31:a7:ab:47:34:45:ef:df:52:4c:56:38:e3:e5:
07:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:04:73:62:FE:CE:2D:61:D7:33:D6:00:65:18:0D:6E:9D:1A:D0:11
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/83A8DBE6391E11EFB37CDF45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.239.0/24
115.167.49.0/24
115.167.60.0/22
115.167.65.0/24
115.167.124.0/24
175.110.68.0/22
175.110.80.0/22
180.178.142.0/24
223.29.225.0/24
223.29.227.0/24
Signature Algorithm: sha256WithRSAEncryption
90:6e:b9:c8:2f:80:04:86:02:88:2d:7d:d3:ff:f5:85:bc:ae:
2b:0e:8d:a2:19:88:be:92:63:20:97:be:38:01:1d:a4:60:a6:
a5:bd:f0:32:73:38:46:99:37:3f:16:d2:46:11:e8:01:40:f8:
fc:2d:09:d7:99:17:2d:03:45:64:3b:53:bc:27:92:ef:68:18:
a1:3b:21:0d:6a:52:56:62:18:d0:69:93:12:80:09:22:5a:40:
e3:7e:49:21:6f:54:57:52:1a:a3:2d:95:9e:c9:1f:3f:d6:ec:
32:d6:50:f1:7f:5e:9e:f4:c0:1d:a9:08:e3:2f:42:90:a4:09:
c3:d1:da:d3:d9:a5:a3:7b:ff:49:a9:b7:9f:3d:58:ee:08:8a:
7d:c9:47:73:21:28:13:68:0a:e2:81:ac:3e:82:e9:ae:57:d8:
7b:65:3f:17:7a:90:8e:0f:b9:8d:80:6c:58:f6:db:c5:69:ae:
76:31:3c:91:47:e7:c4:c5:73:6d:80:e8:2f:fd:5b:9e:4a:5a:
76:5c:d5:f2:3f:8e:f3:c0:41:e9:98:ac:8e:91:1c:42:84:b0:
be:c2:21:e7:fb:6f:82:dc:1d:85:24:16:ce:df:1e:5c:9a:ad:
7f:76:dd:a4:14:79:31:e7:02:f1:d2:38:65:c7:3e:87:8b:f0:
f2:f2:88:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:41:12 2025 by rpki-client