Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B551BC96B3A611EF900BB94EC4F9AE02.roa
File: B551BC96B3A611EF900BB94EC4F9AE02.roa (raw, json)
Hash identifier: W0VcQ/0IcZSlx+VQZeBHrw1AgbCsXBhtMy1O11cQFJs=
Subject key identifier: 46:5A:1C:D4:6C:74:70:2D:28:81:C8:70:BA:94:02:C5:25:F3:73:29
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1EFF
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B551BC96B3A611EF900BB94EC4F9AE02.roa
Signing time: Fri 06 Dec 2024 07:54:22 +0000
ROA not before: Fri 06 Dec 2024 07:54:22 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 329007
IP address blocks: 115.167.73.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 04:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7935 (0x1eff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 6 07:54:22 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6752adae-0b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:53:0e:6e:5e:b2:50:56:8d:13:b0:8e:8c:
04:86:45:88:5e:cb:30:6b:ca:9e:4f:0f:b5:69:db:
8a:d7:29:62:15:ec:0e:94:59:f7:4f:b4:20:4f:0a:
07:fe:07:37:d3:31:67:96:20:50:73:d2:df:cf:5c:
9f:66:f3:bc:d3:34:b3:f0:c8:d1:e7:73:ed:9f:83:
7e:7f:72:5f:e6:53:02:89:5f:bf:98:ca:99:c6:c4:
4e:9c:db:f7:f9:98:1a:5d:8b:c8:58:84:70:fe:27:
6a:f3:f1:7e:fa:f8:87:56:b6:15:e3:a3:71:3e:5c:
b3:91:3a:36:a1:7a:9f:f7:48:f1:eb:7d:62:cf:14:
ee:06:75:08:a7:3d:2e:69:6c:44:45:fa:63:42:0a:
03:94:ab:ec:e1:74:7f:69:3e:96:02:a0:82:b3:50:
f1:c7:80:ca:d9:2f:ca:2b:5d:34:b7:75:0c:e4:ea:
c5:5f:35:ff:dd:7d:6c:80:c1:dd:6a:cc:56:93:66:
2c:14:07:f9:fb:45:a7:09:33:92:1d:4e:5e:ee:b6:
06:63:ba:ab:53:af:a7:7d:80:c0:4d:85:f0:38:0a:
26:7f:85:0b:ec:5c:54:98:64:95:9c:7a:b6:c4:48:
0e:bc:a8:e1:c3:fd:36:a4:91:90:6a:4e:97:88:9f:
ef:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5A:1C:D4:6C:74:70:2D:28:81:C8:70:BA:94:02:C5:25:F3:73:29
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B551BC96B3A611EF900BB94EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.73.0/24
115.167.76.0/24
175.110.111.0/24
180.178.165.0/24
180.178.167.0-180.178.168.255
223.29.236.0/24
Signature Algorithm: sha256WithRSAEncryption
12:fd:25:14:49:03:32:f6:a7:c5:0d:53:77:d1:64:8a:85:9f:
2d:89:52:e4:a8:4b:4e:71:50:cf:1e:f0:7b:ee:43:cd:f2:a7:
9d:25:b8:12:65:fe:3f:7d:e1:6a:74:07:8b:da:b7:e8:c1:1a:
9c:b5:88:35:cc:0c:94:1d:37:63:15:b8:16:58:45:be:fa:bd:
08:13:3e:f4:38:2a:86:72:50:23:34:d1:3c:e9:f4:5a:5d:6f:
b7:a8:2c:c1:93:1e:a6:ac:2f:a5:88:e3:e9:95:a1:fa:db:18:
9e:64:a8:57:70:48:0f:c0:7e:04:3a:f5:06:e7:6f:70:3b:8d:
9a:b9:e6:30:30:ab:cf:37:8f:d3:7f:b5:80:63:19:a8:7d:57:
06:d4:ac:a5:8c:23:1a:d2:2e:55:38:fa:f3:88:f2:8d:d2:4e:
ff:4f:9c:0d:79:4e:52:6b:03:4c:3d:30:32:2d:3e:23:a4:8b:
6b:08:70:59:84:91:ca:7c:45:b4:31:04:d6:98:f1:bf:c5:ef:
5a:3e:1b:41:75:7c:7b:b6:64:49:93:5d:a7:2d:2f:ed:be:c2:
32:85:b1:21:19:11:3a:f3:34:99:95:ac:7f:32:80:74:26:40:
e6:07:10:4c:7a:ac:23:43:d8:8a:48:32:4b:1e:9e:73:e5:cf:
7c:9a:b2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:14:32 2025 by rpki-client