Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F6E21646706311EF91C6C509C4F9AE02.roa
File: F6E21646706311EF91C6C509C4F9AE02.roa (raw, json)
Hash identifier: O5ozvQ+D33cPIOTBQ/R5fDv3bdK8d/gbwwMjNegs5wc=
Subject key identifier: FE:1F:3A:7A:A9:E3:CF:87:73:50:CA:43:D8:10:2F:A1:19:6C:A1:50
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 15D5
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F6E21646706311EF91C6C509C4F9AE02.roa
Signing time: Wed 11 Sep 2024 17:55:55 +0000
ROA not before: Wed 11 Sep 2024 17:55:55 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 205220
IP address blocks: 175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 06:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5589 (0x15d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 11 17:55:55 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66e1d9aa-398d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:75:fe:21:cb:a2:90:7b:c5:34:47:99:4e:23:
39:59:af:3a:7c:f4:75:87:d2:ab:f6:19:34:4d:1d:
be:d0:40:36:b9:10:19:e2:47:7a:b1:31:d0:6d:5b:
4a:09:ca:f8:9e:a8:2b:84:bf:af:53:87:6d:62:da:
06:34:79:f8:53:83:80:2e:7e:29:8b:e1:2b:14:c0:
8d:fa:60:cf:5b:6c:c3:18:50:08:98:a4:7d:da:0a:
1a:7c:a7:c6:df:68:b6:e6:8a:b3:25:1b:30:37:4f:
02:ac:9c:9a:cd:99:c9:fb:8d:10:85:23:33:18:1c:
e3:68:a7:c2:8a:72:63:8e:ee:3b:2d:4f:f9:79:f9:
61:d1:45:2d:95:dd:c8:9f:5b:28:83:5d:78:50:73:
07:96:70:98:b1:bd:ba:c3:5e:c2:8a:4a:5e:5d:1f:
fe:06:1b:84:9d:8d:89:07:f7:60:4d:38:fe:63:a2:
25:1e:28:eb:41:57:29:2f:a6:4d:31:a3:ad:86:ff:
9d:fe:7d:f4:48:e1:1a:f2:23:cc:7b:01:cb:f1:9c:
81:a5:9c:e4:38:b3:a7:cb:0c:32:6b:c4:da:73:3f:
20:03:17:21:d2:c1:12:51:4b:5e:dd:b3:ef:30:91:
4c:8b:8d:8c:f0:ce:4b:ba:54:5b:ab:9b:f1:18:02:
cc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1F:3A:7A:A9:E3:CF:87:73:50:CA:43:D8:10:2F:A1:19:6C:A1:50
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F6E21646706311EF91C6C509C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.110.97.0/24
175.110.104.0/22
175.110.109.0-175.110.111.255
Signature Algorithm: sha256WithRSAEncryption
86:1b:f7:c4:b8:36:e1:23:6a:e6:1f:5b:14:91:c3:1c:34:61:
87:d9:1f:64:92:2a:d3:06:f3:9d:47:72:5e:f8:9b:29:4a:ae:
8e:24:41:ed:c8:37:52:75:a6:2b:d0:63:37:b5:1c:74:ca:ca:
51:08:29:72:6d:75:fb:c8:2e:fa:07:92:3e:1d:9b:79:bb:ca:
26:91:dc:29:23:68:16:28:96:2c:e6:c4:a2:9c:c4:c1:2d:fb:
c2:de:2b:d0:95:8c:6f:fc:cb:ee:d8:8b:8f:57:53:64:7e:c1:
95:be:b5:15:47:24:2c:3c:70:56:65:54:4c:5a:44:96:29:45:
64:c6:d7:f8:71:09:49:2a:d0:9c:7c:5b:af:3d:ae:69:f7:ec:
a3:07:e8:25:5a:ad:84:0a:79:00:c9:2e:38:80:b2:be:28:bf:
47:29:e4:63:8c:8a:13:fe:14:fc:f3:54:fd:6e:0a:b7:99:e0:
12:d6:0f:3b:ce:b1:04:d4:55:58:27:f4:73:95:07:75:e8:92:
08:09:35:82:4d:52:a7:73:90:d8:ef:5a:b7:13:ca:f5:1f:b5:
a7:bf:89:36:c3:da:8f:bf:97:bf:b6:61:d4:0e:b3:96:66:cf:
eb:1a:31:0c:6a:5b:de:03:96:36:de:2b:25:fa:12:1b:6c:b0:
46:e3:c8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:26:25 2025 by rpki-client