Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CA0174C0180011EFA1B53D26C4F9AE02.roa
File: CA0174C0180011EFA1B53D26C4F9AE02.roa (raw, json)
Hash identifier: 6r80UiPv/lOtDNR31KHqhN2+f8e++ZvPPmdHx/yFBBQ=
Subject key identifier: B6:FE:27:10:BC:E9:28:BC:AA:51:9D:3E:1B:EA:4F:AC:B3:D8:29:36
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1249
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CA0174C0180011EFA1B53D26C4F9AE02.roa
Signing time: Fri 24 May 2024 22:32:18 +0000
ROA not before: Fri 24 May 2024 22:32:18 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 1273
IP address blocks: 175.110.68.0/22 maxlen: 22
175.110.80.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jul 2024 06:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4681 (0x1249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 22:32:18 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66511572-c581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:38:77:b9:53:c6:e7:e5:69:b1:0e:5d:c2:f9:
85:9d:12:10:0f:91:59:0f:e2:c0:c6:56:54:b9:c8:
93:10:e7:6f:b3:e9:9a:2b:85:bc:ad:82:8e:c4:87:
4e:7c:45:da:a3:ba:df:f9:7b:06:8a:68:1f:ea:04:
dd:f9:70:ff:61:88:8c:8e:7c:94:de:86:9f:39:03:
d7:67:35:83:c2:be:82:f0:41:7b:8c:0d:8a:77:d4:
68:cc:6a:04:31:fc:17:c1:c8:eb:dc:41:61:f9:10:
ca:f6:24:3c:23:45:ef:d4:72:db:63:56:12:c4:a3:
2a:68:2c:b2:8d:59:f0:bf:66:58:43:a4:57:9f:57:
0d:aa:70:38:95:bf:12:2a:ad:e7:31:f9:1c:00:a0:
30:a1:a2:21:36:6a:1b:a5:ff:ce:7c:b2:49:d1:be:
32:79:0c:0a:5e:0d:b5:2b:f2:ac:48:81:19:1e:df:
65:ff:05:10:60:76:ee:b8:d9:fe:04:32:75:cc:c4:
d6:10:c3:9e:ff:c1:9e:c2:4a:6b:94:9e:28:13:b5:
e6:cd:2d:67:57:93:0c:6c:1b:77:26:04:91:67:e4:
11:ce:24:1c:7d:8c:5c:e5:f8:53:c8:58:79:6f:ff:
c6:c7:5c:77:d7:17:95:f3:d6:69:c8:20:e9:86:8d:
a7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FE:27:10:BC:E9:28:BC:AA:51:9D:3E:1B:EA:4F:AC:B3:D8:29:36
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CA0174C0180011EFA1B53D26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.110.68.0/22
175.110.80.0/22
Signature Algorithm: sha256WithRSAEncryption
34:96:2d:4b:ee:21:1f:4e:3c:42:1b:cf:82:16:01:c2:05:07:
f9:c4:6b:ea:15:03:f7:3b:d0:5c:26:eb:14:34:af:80:e8:cc:
e5:ce:fb:58:6b:93:b4:fa:c8:60:eb:06:27:58:97:74:ad:2e:
3c:8d:30:d4:36:ea:b6:b8:0a:4b:38:4b:69:7c:30:9f:b5:b0:
cb:19:93:13:02:a9:aa:54:8d:81:59:d7:66:53:4f:a4:1f:cb:
55:f3:f2:97:12:47:39:17:e4:3b:d0:f3:a4:71:30:6d:db:8d:
7b:a0:af:2a:0a:f4:31:1c:d6:98:fe:f9:53:14:4f:aa:c8:11:
d0:78:ae:99:63:81:2f:a8:5b:f7:bb:a3:45:5c:4c:ec:5b:ff:
06:a6:41:82:f7:12:5d:76:e2:94:b0:2b:39:f5:4b:32:73:e6:
7c:54:a3:1a:08:c1:5c:46:5c:69:64:41:a5:7f:79:b3:42:46:
6a:50:30:8a:db:ab:ec:3f:9a:e6:1f:b6:71:19:4b:41:73:5f:
81:f5:16:fe:99:16:ea:2c:5d:87:96:df:63:a4:73:1f:b3:6e:
02:ac:7d:70:41:07:b7:51:0e:04:06:d7:69:19:ac:50:8d:89:
bd:cb:13:97:27:bb:03:3a:de:c1:5e:80:a5:8b:c4:3f:d7:35:
02:a4:9b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:09:50 2025 by rpki-client