Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B7C5681AFBD811EDBC5C2B51C4F9AE02.roa
File: B7C5681AFBD811EDBC5C2B51C4F9AE02.roa (raw, json)
Hash identifier: EdjGRtJYF6isLLLc20t2YXScMzIePUEZdoQBIUl2XOU=
Subject key identifier: AF:36:EB:7B:8A:83:32:20:C0:E8:7A:98:2E:1C:D9:87:0A:34:0C:BF
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0BE0
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B7C5681AFBD811EDBC5C2B51C4F9AE02.roa
Signing time: Fri 26 May 2023 15:19:33 +0000
ROA not before: Fri 26 May 2023 15:19:33 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 198652
IP address blocks: 180.178.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3040 (0xbe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 26 15:19:33 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6470ce05-4799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:00:e5:70:47:1f:0d:01:73:5f:62:78:1c:
1f:84:d2:d1:dd:a9:f1:c4:d2:03:0f:d5:a6:08:dd:
d7:e4:e4:21:65:52:6b:11:3c:53:a2:e5:36:23:38:
d5:c3:7f:26:9d:69:13:fe:a0:08:c2:c1:22:17:17:
dc:ab:b9:fd:a5:56:3d:fa:ab:cc:58:fc:9f:18:f4:
1d:9b:10:1c:c4:d2:c4:5e:c5:d7:e7:e4:de:07:e2:
f1:ca:3b:c2:fb:7d:64:72:91:a8:c9:4b:4b:17:f9:
92:7b:41:68:94:fb:75:ed:76:7f:d7:8e:82:95:cb:
cb:8d:dc:a9:95:96:42:f2:2d:b5:df:b3:3c:0b:57:
52:67:26:27:43:7c:c9:ea:2d:54:33:51:24:eb:a9:
9b:b4:9e:89:68:d4:02:8d:eb:44:1c:7b:d2:2b:82:
36:7f:bc:0a:9c:5e:c8:08:19:86:b3:c7:93:3c:c7:
1c:a7:42:a0:73:8c:bb:ef:e5:ce:bb:23:87:f0:12:
67:74:2b:f6:c0:93:c8:1c:13:d2:3c:2e:ff:26:9e:
82:ee:77:a5:16:bb:45:40:47:ce:9e:72:32:7d:b1:
3a:7f:a0:5c:6e:2d:2b:bd:6c:4f:d3:e8:bf:07:18:
f0:05:33:fd:fb:1c:b7:1f:c2:be:61:ac:4c:28:3d:
a1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:36:EB:7B:8A:83:32:20:C0:E8:7A:98:2E:1C:D9:87:0A:34:0C:BF
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B7C5681AFBD811EDBC5C2B51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.178.161.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:fa:16:75:b7:ba:5f:e5:76:54:bd:0f:1b:2b:ec:26:9f:fc:
45:e7:a3:14:1b:cc:f8:59:f6:d5:95:c4:78:a0:08:31:93:7b:
ba:e4:ba:8d:89:e1:cf:a6:63:57:51:90:e9:28:fa:e6:75:f9:
14:38:07:35:fd:c6:a2:6f:30:58:14:d2:9c:d2:94:d7:0c:54:
ac:0a:60:54:7b:26:96:e7:53:e2:d0:3d:13:81:e6:80:91:dd:
9a:d9:22:4f:eb:7e:88:bb:fd:53:28:4b:10:2b:ea:6f:bf:35:
ce:24:11:f9:7a:c1:68:10:b3:56:78:cc:50:1f:4c:33:83:04:
4b:a9:8c:66:0c:df:18:a5:78:b2:e8:35:b5:b4:17:ec:47:35:
91:06:82:ba:bf:1e:58:00:d8:44:49:e3:39:ba:30:cd:7b:1b:
a7:08:65:8c:5b:72:7c:05:45:1d:96:72:c2:1b:ba:71:ab:2c:
b0:e5:2d:8d:a9:f6:d2:9d:f0:19:04:44:ee:36:b2:f3:93:37:
29:b5:29:05:a0:bf:4d:9d:75:8d:33:23:ff:b9:70:33:f2:3c:
8a:f9:7b:e5:91:41:e8:6e:c9:db:ed:2f:a1:fa:55:cb:02:81:
0f:d5:0c:19:53:bd:4d:68:d1:05:08:4b:fd:66:bc:85:19:00:
32:4e:f6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 13:43:46 2023 by rpki-client on console-ams.rpki-client.org