Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9342A64626FD11EFBD8EDA54C4F9AE02.roa
File: 9342A64626FD11EFBD8EDA54C4F9AE02.roa (raw, json)
Hash identifier: kv93J3SWMeG5TkZ9lSN5BoW6JhIi/Oj+JxxJ3dndyws=
Subject key identifier: 5E:1E:5B:70:99:92:DE:2B:06:81:43:9D:AE:7A:0C:02:80:2A:08:5D
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 13D8
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9342A64626FD11EFBD8EDA54C4F9AE02.roa
Signing time: Wed 19 Jun 2024 16:53:45 +0000
ROA not before: Wed 19 Jun 2024 16:53:45 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 115.167.49.0/24 maxlen: 24
115.167.65.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 13:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5080 (0x13d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jun 19 16:53:45 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66730d19-185e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:1c:db:16:c1:90:cf:53:16:9c:70:a1:90:
e8:67:70:cf:e6:59:ee:74:a9:37:b1:17:c6:94:14:
28:96:6d:04:24:fa:b9:50:58:96:99:ae:cc:b1:e2:
92:de:05:3f:1c:4b:14:8c:d6:f6:b3:df:9c:39:de:
17:56:1a:c8:05:a5:3e:53:4a:5b:3a:a5:b8:43:0c:
32:90:2a:6f:a9:61:83:83:8c:57:5c:22:ec:54:b9:
5b:df:73:a2:42:a8:b9:cb:f4:08:89:19:3c:7c:e4:
42:1a:4d:64:e1:9a:b3:b9:38:f5:bc:3e:c6:b5:bc:
6a:43:7d:15:e2:06:8f:05:49:47:6a:6b:4d:31:b7:
a0:89:51:1e:c9:d2:22:7f:4a:74:ad:50:ca:10:56:
6f:79:8a:da:d1:fd:8b:7f:e7:c0:0f:f0:70:8e:22:
5e:53:c2:a7:1a:27:f9:54:41:e5:5f:3e:ec:aa:5d:
97:9f:61:ed:45:9d:86:c6:05:f6:61:9a:85:e9:63:
fa:a9:b3:07:5a:77:39:c7:ac:19:84:89:fa:bb:82:
f1:1b:ca:e2:4f:90:3a:38:11:e8:2d:3b:b4:3d:4e:
0e:89:32:1a:5f:ef:60:03:e5:69:30:c4:17:e6:45:
2e:0b:1e:0e:de:be:ef:4d:5c:4a:af:ce:6f:1f:c3:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1E:5B:70:99:92:DE:2B:06:81:43:9D:AE:7A:0C:02:80:2A:08:5D
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9342A64626FD11EFBD8EDA54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.49.0/24
115.167.65.0/24
115.167.124.0/24
180.178.142.0/24
223.29.225.0/24
223.29.227.0/24
223.29.234.0/24
Signature Algorithm: sha256WithRSAEncryption
87:53:44:ad:a0:d1:11:1e:17:cb:5b:c4:af:b9:ce:c0:ee:2e:
5f:e7:b1:c0:2b:c1:d1:a7:a7:48:36:6d:d4:04:33:38:ae:49:
03:6f:0c:a9:1e:43:1b:51:ae:c2:1e:c4:97:4e:87:07:a0:3f:
2f:9f:c8:d6:be:4d:cb:bf:a0:c8:bf:15:21:5c:3b:a6:41:6b:
bb:a7:6c:0b:d1:77:60:d5:40:16:8d:f1:7a:1f:e4:80:f2:4d:
41:c3:d7:ce:d4:54:9e:de:5f:a9:ef:ec:55:29:b4:fd:2f:ab:
51:69:9e:66:09:6b:dd:ac:19:a1:35:81:a1:39:0f:1c:3f:9e:
d5:d7:bb:7c:79:fe:8a:e0:ac:77:e0:7a:e1:44:be:93:c3:83:
d2:50:56:ad:2a:b3:92:e3:32:5b:88:bd:0f:33:45:93:6c:fb:
27:d1:91:c0:75:10:40:cc:48:9d:d3:53:94:e3:89:96:ea:ae:
ec:5e:8d:7e:93:3c:a1:d7:9a:52:e5:7d:27:e7:52:90:6a:e0:
28:3e:bd:b5:35:32:9b:de:24:cb:d8:ea:1b:a6:b5:6b:c1:32:
cb:6b:2d:e4:b2:11:fa:06:35:fd:07:df:29:32:77:0b:3c:d2:
df:ac:90:57:bc:41:02:b8:ae:f6:91:da:28:70:59:1d:9b:3e:
f5:cb:4c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:00:21 2025 by rpki-client