Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E1B4C284AC0211EF8039ED75C4F9AE02.roa
File: E1B4C284AC0211EF8039ED75C4F9AE02.roa (raw, json)
Hash identifier: 1IGYnqHaS10cOuaT5Wi4TfwRugXPzlmfsb+Xp+cVDoM=
Subject key identifier: FA:34:6A:77:C9:6B:00:5D:6D:A2:D2:40:BE:49:49:D3:9A:64:BE:08
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1DB6
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E1B4C284AC0211EF8039ED75C4F9AE02.roa
Signing time: Tue 26 Nov 2024 14:34:35 +0000
ROA not before: Tue 26 Nov 2024 14:34:35 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 43.226.224.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Dec 2024 08:14:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7606 (0x1db6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 26 14:34:35 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6745dc7b-e6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:92:fe:f8:05:6b:6a:47:3c:0a:08:12:c3:64:
61:55:07:09:18:76:39:5d:c7:39:c6:f7:80:24:d2:
f9:20:af:1a:28:0d:ca:08:de:e2:6b:b2:6a:b4:2b:
ff:4e:57:be:58:ef:a4:78:7c:2d:06:21:a3:a9:73:
85:cc:64:fb:76:54:8e:dd:80:3f:64:57:80:ca:9f:
8f:57:67:ac:e6:5e:9e:36:54:6c:10:52:2d:52:39:
1d:c2:90:75:0b:f8:9b:53:42:b2:14:32:8a:d1:26:
cd:58:cd:79:54:e8:94:54:6e:29:61:cb:ec:31:bc:
5f:a8:87:7a:2e:67:bc:2a:bd:e3:c5:58:9a:cc:5e:
0c:96:82:54:74:91:52:83:e0:18:8b:99:05:a3:90:
63:30:8c:2c:4f:da:11:da:2c:50:f6:a1:73:a5:df:
fb:2f:73:9a:24:9e:6d:62:9e:19:11:4d:4e:2d:ec:
fc:54:f9:4c:a7:86:c1:e8:21:0e:d6:6d:5f:77:d6:
9f:84:e4:b2:9a:2c:f7:03:99:7b:bd:03:b9:b7:f6:
1f:d8:f0:5e:5d:5b:20:7a:52:dd:13:49:d0:23:d0:
5e:bd:26:9c:70:ad:ed:be:27:f6:f6:ab:03:f5:5c:
01:96:2b:6f:09:59:4e:2d:46:47:e3:59:68:2a:93:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:34:6A:77:C9:6B:00:5D:6D:A2:D2:40:BE:49:49:D3:9A:64:BE:08
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E1B4C284AC0211EF8039ED75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/24
115.167.78.0/24
Signature Algorithm: sha256WithRSAEncryption
11:fe:f3:d8:15:94:53:87:85:a0:68:2d:15:83:b9:27:e1:81:
4e:b7:af:87:7c:85:ff:c6:fe:36:62:c4:8a:1b:83:2c:ce:9c:
08:58:b3:70:35:c2:4c:a1:4d:2b:8b:6a:71:da:09:0d:d0:ba:
22:60:37:57:48:dd:ef:64:34:84:df:1b:8f:68:52:0d:49:d1:
5a:33:a0:4a:60:20:90:d9:7b:67:51:2c:a7:3b:4d:46:1c:df:
f4:1b:55:87:0a:f4:9b:99:48:10:b9:45:b3:2b:2b:93:b9:5f:
ba:b3:69:d4:7a:47:8d:cb:c0:16:b1:cb:fb:81:e0:86:1f:f0:
20:a6:a7:60:e1:fd:38:b4:6a:67:39:14:a6:38:85:3f:9b:10:
0d:fb:3f:52:1b:a0:81:6f:4e:60:94:45:a5:05:33:78:05:53:
76:87:32:57:02:75:a7:3c:06:c4:28:0b:08:6c:f8:64:a4:ed:
a3:21:00:5f:0d:20:31:69:dd:bb:2e:bc:7b:83:c8:1b:45:03:
c1:0b:8c:06:4e:d3:46:04:35:51:d9:20:ed:cf:e5:a7:94:48:
a1:be:0a:59:b6:b3:0e:d4:d2:ad:bb:ca:74:b4:46:c1:fb:21:
d5:48:45:ee:6b:4c:cf:cc:99:e8:9d:97:35:15:ec:95:6d:76:
fe:af:dd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:19:09 2025 by rpki-client