Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E28E162A7CB811EF8312720FC4F9AE02.roa
File: E28E162A7CB811EF8312720FC4F9AE02.roa (raw, json)
Hash identifier: 1RCmPnh1eMG4jiTlz0/xwPv8OX+4Ij0rEUYNLrswgGo=
Subject key identifier: F4:61:EA:EA:F0:F2:36:42:9D:92:CE:BB:4C:70:FE:2E:F9:90:89:8F
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 16A4
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E28E162A7CB811EF8312720FC4F9AE02.roa
Signing time: Fri 27 Sep 2024 10:11:39 +0000
ROA not before: Fri 27 Sep 2024 10:11:39 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 115.167.28.0/22 maxlen: 22
202.92.19.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 10:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5796 (0x16a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 27 10:11:39 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66f684db-e081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d2:c9:3c:2f:26:c3:8a:27:93:54:37:79:f7:
7b:17:1c:27:15:9a:bd:18:16:f7:4d:f2:b7:a0:5e:
f8:71:25:fb:0f:e3:f5:46:98:9a:51:08:12:d9:83:
f2:bf:37:0a:24:34:0a:89:cf:c4:12:39:b5:c8:51:
b4:15:87:47:a2:9e:c4:b9:09:69:0e:31:4b:15:eb:
8e:e6:b7:b9:09:a4:72:f1:a2:71:e0:26:40:20:1a:
ed:b5:19:03:75:76:8d:f0:d3:9d:42:c8:37:fd:ec:
71:d8:c7:a4:ec:30:0b:86:b7:fa:e1:d8:cb:2c:7f:
cd:22:d9:0a:ae:b8:90:e2:2e:dd:de:07:b8:64:00:
e6:75:77:9b:c0:f6:ca:a4:fb:16:71:3a:ed:82:a4:
38:0a:6b:1c:dd:b1:12:dd:af:50:63:fc:8a:bc:b6:
7d:f1:a4:f4:8c:94:0b:67:e9:94:47:f9:dc:7e:bc:
5b:a5:f8:a7:38:a0:63:5e:dd:11:6b:6b:c6:a0:ca:
76:0d:b5:7f:d3:75:6d:55:4a:7a:3b:4b:8f:11:31:
5b:71:05:3b:1e:4b:0c:ae:c7:7d:ae:16:25:4f:3c:
33:7b:00:f0:36:ac:69:88:76:8d:1d:7e:05:7c:91:
7d:18:3b:83:bd:00:2f:a3:3f:85:82:60:e1:6a:77:
91:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:61:EA:EA:F0:F2:36:42:9D:92:CE:BB:4C:70:FE:2E:F9:90:89:8F
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E28E162A7CB811EF8312720FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.28.0/22
202.92.19.0/24
202.92.21.0/24
Signature Algorithm: sha256WithRSAEncryption
97:8d:a4:f8:5d:35:1d:42:54:b0:a9:d4:ab:6b:d9:71:1a:1b:
2b:47:1f:ed:2f:29:e8:64:7b:d8:06:e8:7b:9b:17:ca:6c:6a:
d9:99:cc:ed:91:23:d7:be:d4:1f:11:3c:7a:f1:46:ce:0e:91:
2f:52:af:87:96:3c:94:83:75:e5:18:30:a5:ab:da:42:2e:d5:
f1:39:00:aa:1a:13:97:de:c9:d2:28:d0:62:8b:19:58:3b:55:
cc:5a:a2:91:22:62:40:2a:1e:e5:66:df:08:aa:57:c5:77:43:
4f:40:9c:67:12:e7:5c:80:1b:2e:6b:fd:e7:be:2b:76:f2:6c:
61:8a:fe:f3:8b:a6:1b:e3:94:cb:e5:5f:d4:83:ad:9d:d3:36:
6b:ca:b8:2d:9b:54:c1:54:05:79:d7:49:b6:ea:1e:0a:7b:53:
21:3f:d6:6a:71:d6:77:d6:87:c1:5b:c4:2a:a7:c9:bf:88:4f:
6b:f8:8a:04:3a:0a:0e:3c:34:98:c6:78:10:ca:65:cf:60:0e:
02:ba:c0:5a:2c:17:09:fa:9d:20:e8:ab:cf:bd:95:3e:8f:36:
2c:36:95:cd:45:50:3c:02:c1:3d:dc:10:04:e8:4a:ec:0c:42:
cc:41:12:83:12:6e:b4:92:7d:fc:d2:42:00:77:1f:e3:24:a7:
a0:ee:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:07:29 2025 by rpki-client