Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EB03097A69E211EFBE980C79C4F9AE02.roa
File: EB03097A69E211EFBE980C79C4F9AE02.roa (raw, json)
Hash identifier: PY5qOm4G2g5+YZS+JOuAWAg5boBgs3zPhomlD0ozROo=
Subject key identifier: 8F:88:22:29:90:CD:88:6A:28:F5:4E:CC:39:84:B7:DA:8F:A6:36:F2
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 14F3
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EB03097A69E211EFBE980C79C4F9AE02.roa
Signing time: Tue 03 Sep 2024 10:54:40 +0000
ROA not before: Tue 03 Sep 2024 10:54:40 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 136030
IP address blocks: 103.151.26.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 11:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5363 (0x14f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 3 10:54:40 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66d6eaf0-ceba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:58:6d:ab:c1:e0:16:98:b8:75:80:77:fe:c2:
10:50:e3:32:96:9c:65:ff:8c:b3:8b:f2:72:2d:8d:
44:88:a1:5b:03:59:b3:c8:e3:04:de:2c:6f:d3:be:
2b:ff:59:d4:80:60:95:2a:44:40:c7:dd:dc:55:88:
11:08:78:3f:c1:a3:1f:e0:51:ff:3e:90:89:9f:50:
a5:33:de:db:0d:1f:89:45:1f:39:ab:6a:a9:1a:b7:
3c:c2:42:bd:13:86:16:ff:0f:62:f9:a2:fc:5a:79:
0d:05:0d:b2:7e:e5:58:5c:68:af:19:45:f3:4f:fa:
db:6f:2d:b3:21:20:45:ae:bf:02:3d:c7:c1:2a:3b:
83:04:b7:09:90:72:db:c5:4b:6b:33:77:cb:f2:c2:
8c:fb:23:4c:dc:9f:e6:b4:d2:89:d4:e0:dd:de:1d:
8c:32:80:4c:55:7b:61:f3:c4:fd:24:40:2b:ad:49:
8b:58:4d:d6:64:aa:0f:11:a2:53:6c:ad:db:53:e4:
f1:d9:85:63:a1:ee:dd:b1:61:18:99:03:29:28:3d:
a5:80:b8:07:b7:2d:df:14:98:c6:50:44:a8:d6:09:
74:22:cd:1e:df:26:2d:eb:a9:d9:83:af:df:50:63:
d2:e9:cd:1d:36:94:9d:6d:8e:aa:55:fc:0d:a8:87:
1a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:88:22:29:90:CD:88:6A:28:F5:4E:CC:39:84:B7:DA:8F:A6:36:F2
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EB03097A69E211EFBE980C79C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.26.0/24
115.167.64.0/24
115.167.66.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b9:6a:a1:5b:1a:be:4b:23:d6:c1:7e:2c:dd:48:71:b4:bb:
e4:cb:04:b8:6e:1a:5e:36:1a:69:4a:88:df:60:f9:62:4d:8b:
f4:0e:2c:f8:c7:4b:3c:0d:e3:01:68:9c:84:90:0e:d6:b9:6a:
55:5b:1a:a3:34:59:c8:22:61:6c:6b:f8:72:67:18:84:0a:a6:
82:53:81:38:8e:12:ec:ae:79:73:c7:9f:d0:88:7b:00:43:94:
08:14:1d:5e:71:26:9a:4b:4b:42:f9:1b:1d:d1:b8:0d:05:04:
3e:14:cc:14:a6:d9:35:5e:91:ed:41:a9:ae:c3:06:91:f2:01:
cc:82:d4:c0:de:3d:b7:24:c6:7f:4c:c9:d3:7a:0a:e3:83:1a:
8e:d0:98:90:43:da:96:64:de:bc:75:8a:15:70:05:c0:ab:04:
89:2b:0b:45:0a:91:0e:bb:f3:5a:0d:6e:6f:ea:44:07:b9:f3:
62:12:52:23:98:e6:cb:84:f2:a5:4c:80:a7:6f:8a:67:13:f9:
ff:94:13:00:de:e1:5e:cc:68:05:39:0b:21:64:53:26:a2:e3:
05:bf:22:38:52:ab:d4:c2:5e:49:5d:64:be:66:50:fe:c4:4f:
50:1a:e3:ba:80:35:8c:95:14:9f:24:e8:f4:af:5f:12:df:7e:
ec:e9:6b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:21:46 2025 by rpki-client