Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8ED3987CDFC111EF90201C7FC4F9AE02.roa
File: 8ED3987CDFC111EF90201C7FC4F9AE02.roa (raw, json)
Hash identifier: Qh8K6yJSpFg1z4BxbqLe91pBv5U+zd5GiNelwE4IbeQ=
Subject key identifier: B4:36:EF:20:A7:B0:D9:DB:0E:DB:B6:A6:E2:A2:28:C5:C9:DA:4F:CB
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2278
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8ED3987CDFC111EF90201C7FC4F9AE02.roa
Signing time: Fri 31 Jan 2025 10:55:31 +0000
ROA not before: Fri 31 Jan 2025 10:55:31 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 60117
IP address blocks: 115.167.6.0/24 maxlen: 24
115.167.15.0/24 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 06:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8824 (0x2278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 31 10:55:31 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=679cac23-e1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:42:c2:23:f5:fb:d2:e3:26:65:60:d6:fa:
2e:4e:13:f3:32:37:5b:25:9b:1e:3f:a2:1f:27:22:
18:11:2d:7b:65:34:55:3f:76:c1:de:0b:13:ef:5f:
9d:20:36:eb:a8:ac:dd:23:81:1c:6f:c4:b1:47:43:
b0:2a:36:b5:c3:db:48:a0:cc:66:85:a6:6f:5c:70:
98:24:6f:da:55:ae:4c:63:17:ad:24:f8:31:7e:52:
25:43:61:28:20:90:d5:d2:cd:4b:13:cf:71:4e:ac:
72:64:c1:78:e4:dc:50:be:ae:68:3d:47:c2:f3:e6:
42:97:e8:c1:ba:91:fe:07:29:3a:ee:4f:ff:02:77:
91:c8:c1:cb:e4:0d:a7:f6:e5:5d:e2:f5:77:89:b5:
df:48:81:90:f6:eb:41:92:ae:0f:24:43:8b:8d:d6:
5f:ba:3f:6a:28:cd:10:1a:a7:25:69:e2:82:fe:2b:
76:1f:bb:db:95:2c:1c:bd:c1:b0:5a:66:6a:5d:c5:
62:87:23:2b:4a:6f:c0:a4:52:27:f1:f5:a0:f6:2a:
e2:6a:2b:e5:e6:9b:5e:6f:3e:40:d5:80:79:5b:97:
58:02:68:f2:cc:ce:f7:b3:fe:60:f8:e5:7f:60:bd:
4e:39:6a:e3:a2:93:3b:00:5c:c5:3c:7a:20:97:e6:
d1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:36:EF:20:A7:B0:D9:DB:0E:DB:B6:A6:E2:A2:28:C5:C9:DA:4F:CB
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8ED3987CDFC111EF90201C7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.6.0/24
115.167.15.0/24
115.167.101.0-115.167.103.255
115.167.118.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ed:a9:d7:5b:fe:6e:80:80:e1:3c:c9:67:dd:5e:4e:5c:31:
d8:90:60:00:b6:7f:9e:7d:af:65:fd:40:35:ea:47:42:a4:1c:
d8:bc:3d:eb:a4:9b:49:ee:fd:0e:ab:3e:97:44:7b:02:b0:40:
40:33:8b:6e:2d:c5:75:a2:25:3d:f3:0a:bc:63:ef:a6:14:f1:
63:9c:da:83:c5:fd:12:cb:3f:91:b2:b6:54:1a:f6:8f:af:d5:
f7:8a:bf:26:83:f2:85:57:72:55:b9:54:9b:34:6a:24:ea:0d:
61:0f:ab:51:7f:2f:36:c4:b9:11:39:43:cb:73:03:29:96:0a:
e7:91:76:38:64:ed:56:e4:2a:e3:7f:df:fb:62:7e:80:2d:a0:
32:d5:86:83:32:45:d8:fe:88:ed:42:f1:6c:ac:9a:83:26:c2:
6a:87:dd:73:c4:de:2b:fb:01:71:3c:6e:02:45:ca:20:4e:3c:
e8:da:bb:a6:73:4b:c0:c4:1f:c9:c0:1a:67:fe:1b:4e:7d:82:
98:06:42:9f:d7:b0:af:13:8c:51:fd:3b:f6:9e:a4:4d:cd:a8:
ea:a1:bb:9d:15:a4:75:3e:98:77:25:15:82:a6:57:7d:95:ab:
b5:e5:0d:ea:24:7b:0b:1e:b6:d1:97:d4:d4:c9:7f:10:bb:4c:
b3:15:34:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:43:42 2025 by rpki-client