Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DB960058224511EF9607CD19C4F9AE02.roa
File: DB960058224511EF9607CD19C4F9AE02.roa (raw, json)
Hash identifier: tiZ6BJ7veruRTmDz79JWBFStXHeeOsbCj5+Z1xgH5fA=
Subject key identifier: 52:10:E4:ED:34:79:D0:A8:99:0F:63:12:D3:D8:11:6B:E6:87:E4:43
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1284
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DB960058224511EF9607CD19C4F9AE02.roa
Signing time: Tue 04 Jun 2024 07:41:30 +0000
ROA not before: Tue 04 Jun 2024 07:41:30 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 136030
IP address blocks: 103.151.26.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.67.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 07:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4740 (0x1284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jun 4 07:41:30 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665ec52a-1d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:38:fa:43:58:09:f9:a9:63:74:32:ab:b2:be:
ad:65:9c:dd:a7:ed:19:c2:5f:ca:85:8a:69:4b:1c:
6a:ef:19:f0:73:b0:07:f6:c4:18:6b:76:4f:54:65:
a9:fa:95:86:e7:61:87:ea:87:19:cb:8c:c8:d3:91:
6e:1d:1d:1c:21:fe:80:ac:22:fe:13:c2:2b:9f:5a:
48:f8:38:45:83:a6:08:a6:20:a6:95:91:09:2e:45:
a4:24:ea:e6:4d:98:9c:5a:a4:81:00:55:14:7c:f8:
c8:13:ad:db:44:91:c1:0e:56:1c:d6:91:69:e8:0c:
23:d1:6c:51:23:73:2b:36:cb:66:4a:a6:ce:ae:3c:
55:df:ac:77:cf:96:a7:20:3a:ac:ab:b5:17:92:a8:
67:77:68:cd:d4:48:b6:9e:de:b9:98:87:29:5d:8e:
d7:a5:0d:7c:47:12:b3:9c:e3:09:0b:60:75:d7:34:
5e:3f:45:75:75:70:e7:c3:ef:56:ba:27:84:9e:88:
53:ec:3b:81:02:c3:59:a2:1e:9a:15:c7:a4:11:06:
9d:9a:4d:81:2f:ff:36:91:a8:88:9b:2d:89:c4:69:
69:24:be:78:d4:aa:77:2e:54:33:a3:2a:8d:fa:1d:
ba:03:39:74:57:e1:c2:57:f0:a2:cd:a1:37:41:af:
92:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:10:E4:ED:34:79:D0:A8:99:0F:63:12:D3:D8:11:6B:E6:87:E4:43
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DB960058224511EF9607CD19C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.26.0/24
113.203.241.0/24
115.167.50.0/24
115.167.64.0/24
115.167.66.0/23
115.167.76.0/24
115.167.124.0/23
Signature Algorithm: sha256WithRSAEncryption
75:37:68:2a:28:b3:00:d7:94:74:3c:d5:8f:b1:60:18:11:ee:
24:1e:0c:a8:24:b7:5e:c3:47:1c:98:8f:f7:8b:ec:4b:44:b6:
6b:e9:99:91:d6:d0:b8:0e:1f:25:ec:e0:bb:8b:bf:63:fb:0a:
cc:ce:f9:e5:3f:36:ba:41:7a:d5:74:2f:a1:e3:ad:ae:88:79:
72:53:42:c0:8b:39:b6:e9:de:cf:e7:60:b7:98:48:7b:2d:c2:
51:94:8a:37:3b:f5:0e:34:23:d9:22:67:03:78:29:11:e1:49:
79:07:c1:a7:af:20:84:71:89:e7:5f:22:41:91:d9:9e:80:53:
7b:95:58:f2:fc:ea:c3:3c:c5:2b:83:e3:f3:af:3a:ce:b6:a7:
33:2c:85:30:b4:aa:83:c1:fa:2e:11:2a:c4:87:d4:63:03:73:
04:6b:5e:4f:3d:5d:9d:bc:e8:5d:87:85:66:0d:a9:27:6d:2d:
b9:7c:40:f3:cd:fe:8f:d1:57:62:cd:9b:f7:5f:b6:d7:54:db:
39:c0:7f:ad:63:a4:ef:45:d3:ff:2c:82:dd:a1:14:fc:b9:5c:
de:c2:cc:a1:38:52:5a:4e:64:95:35:39:da:4d:3b:fd:59:f1:
af:f2:29:07:50:ba:7f:bb:12:25:7b:a9:e2:df:48:3b:01:90:
0b:73:69:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:58:02 2025 by rpki-client