Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F5A54B56CE5D11EF9882035AC4F9AE02.roa
File: F5A54B56CE5D11EF9882035AC4F9AE02.roa (raw, json)
Hash identifier: t2VjRRn+TZjKcdcsJNKgYm2DUUmAVdc5NfT1DvBqb3Y=
Subject key identifier: 3C:5C:57:45:34:3E:E5:CB:40:85:D7:DE:9E:4F:B3:6C:F1:14:62:31
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2185
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F5A54B56CE5D11EF9882035AC4F9AE02.roa
Signing time: Thu 09 Jan 2025 07:47:22 +0000
ROA not before: Thu 09 Jan 2025 07:47:22 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 200195
IP address blocks: 175.110.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 10:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8581 (0x2185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 9 07:47:22 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=677f7f0a-8dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:5a:c7:23:be:9e:fd:1b:ef:df:94:15:96:
63:63:74:8c:cd:c2:97:24:f1:80:8e:79:76:92:79:
1e:29:c1:af:2b:e4:76:cf:b3:0b:73:e2:1c:54:cf:
b4:6b:7d:27:d8:8d:bb:bf:ac:8b:b9:d3:65:f2:15:
53:61:a1:bc:57:06:f9:da:e9:7e:ad:8c:be:ab:95:
13:30:78:19:03:43:f6:4b:97:cf:c7:db:08:60:63:
a3:83:f3:68:4a:58:2a:05:48:33:2c:98:18:7e:b0:
0d:30:a8:c7:0f:ad:d7:84:7b:63:f9:12:b8:b7:6e:
3f:3c:9a:c2:b6:c4:59:7e:12:d7:d2:87:88:2f:29:
a1:f9:49:dc:e8:69:81:13:86:46:89:c0:27:33:81:
11:7e:73:95:a6:a0:1a:f0:eb:56:35:a3:ea:a5:48:
50:e1:04:02:3a:98:69:5c:04:e7:66:aa:03:00:30:
95:2c:fa:2c:dc:ca:a3:49:c0:e3:e5:cb:7f:81:60:
35:ed:9c:71:4e:22:6a:a4:2a:39:43:3b:3e:a6:16:
cf:d4:60:62:8a:1b:88:d3:55:56:e0:09:ec:6f:71:
0c:f2:e6:f7:c6:12:2c:38:35:42:a0:87:6a:8f:b1:
e9:d0:4f:db:ae:f6:39:3f:61:e4:19:29:a7:d6:b9:
fc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5C:57:45:34:3E:E5:CB:40:85:D7:DE:9E:4F:B3:6C:F1:14:62:31
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F5A54B56CE5D11EF9882035AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.110.91.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d4:0a:22:6a:24:e1:15:04:be:bd:9a:89:68:12:3d:2c:36:
a8:4b:98:e8:69:6c:3b:84:cb:dd:ce:92:6f:78:f7:64:1c:12:
84:6d:54:95:c8:be:bb:8e:39:d8:14:20:39:e3:b7:83:15:c2:
29:1e:79:c0:7e:a1:3d:19:a4:d2:05:08:3c:82:9f:7b:88:76:
68:b4:29:17:d9:51:66:c8:f2:bf:b5:9a:de:cb:c2:99:b4:82:
c6:08:dc:7e:4f:bb:ed:17:da:3d:55:07:56:a9:73:25:eb:ac:
4f:00:60:87:72:aa:e7:2d:41:1f:10:9e:06:1a:aa:7c:17:1a:
cc:9e:19:62:9a:a4:05:eb:72:b6:cd:35:92:18:f6:85:e9:70:
b2:e6:af:17:e7:de:08:6e:02:c8:69:5d:38:d8:3c:d6:51:2d:
9a:5c:07:99:4a:51:ef:12:e1:9a:d3:ff:37:db:5b:fc:a5:c4:
d7:ca:d4:40:9a:19:64:99:35:87:8b:2c:fd:ca:2d:71:4c:8c:
0f:19:b3:81:70:b7:23:7e:89:e9:03:19:b8:ba:ce:40:99:0e:
b6:c4:50:c4:02:bd:e5:78:2c:73:a4:77:ed:29:d7:7e:0a:82:
94:07:21:f6:6d:de:d1:6d:af:2f:61:d8:6b:08:e3:76:68:d1:
f5:4c:0a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:12:14 2025 by rpki-client