Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/AE38DF76178511ED9E178E15C4F9AE02.roa
File: AE38DF76178511ED9E178E15C4F9AE02.roa (raw, json)
Hash identifier: Gy8E0jm4L/R9pOUbWcgj6jUgdvSGHssgShrc4Wegc74=
Subject key identifier: D2:DA:62:67:D3:C2:0D:D6:ED:81:B9:60:05:FF:6D:C5:A5:75:6C:44
Certificate issuer: /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Certificate serial: 03CB
Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/AE38DF76178511ED9E178E15C4F9AE02.roa
Signing time: Tue 09 Aug 2022 01:50:44 +0000
ROA not before: Tue 09 Aug 2022 01:50:44 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 15083
IP address blocks: 115.126.25.0/24 maxlen: 24
115.126.26.0/24 maxlen: 24
115.126.34.0/24 maxlen: 24
115.126.35.0/24 maxlen: 24
115.126.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 971 (0x3cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Validity
Not Before: Aug 9 01:50:44 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62f1bd74-751a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:c1:0a:f2:35:d7:7f:74:cc:7a:54:64:0e:
06:32:0c:6d:d5:91:b7:38:0c:79:43:86:79:b7:36:
a5:dc:62:36:53:d5:b0:4f:67:db:9d:ef:62:42:57:
1d:d9:11:a6:00:ba:77:07:fd:10:1b:cc:42:22:6e:
55:9b:ea:d8:c1:fc:a9:c8:99:18:5c:8f:48:34:f9:
20:46:f1:cb:3b:a9:ba:7f:d1:67:c9:3b:1c:1c:4b:
b2:3d:bb:64:94:2a:a4:72:98:1b:1a:d6:44:c2:9b:
1d:0c:f6:7e:e2:52:59:93:2d:b0:f1:8e:b7:06:40:
ba:63:e6:30:ec:ee:c9:33:8d:07:00:03:b0:f5:bf:
7c:3a:1d:0f:b7:c9:48:df:98:5c:e5:48:85:db:a5:
73:5e:eb:fe:37:e3:03:84:6a:71:6a:d3:92:37:2a:
d1:e0:ee:cd:cf:ee:32:47:38:67:d4:11:10:da:f5:
98:e2:61:6b:be:1a:3d:13:f3:90:b6:02:18:c8:97:
ad:4b:7b:4f:b3:6e:fa:eb:01:12:18:b4:27:02:60:
22:78:03:31:e5:37:62:e5:04:a9:af:f3:80:9e:2c:
72:74:c9:ac:bc:10:02:53:26:5e:da:56:83:bd:9c:
40:34:86:5d:9d:3a:13:4a:dd:82:12:ae:0c:02:f2:
5a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DA:62:67:D3:C2:0D:D6:ED:81:B9:60:05:FF:6D:C5:A5:75:6C:44
X509v3 Authority Key Identifier:
keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/AE38DF76178511ED9E178E15C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.126.25.0-115.126.26.255
115.126.34.0/23
115.126.48.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:cd:1e:c2:71:75:2d:61:ab:8c:3d:1c:f7:97:c8:50:28:c0:
71:aa:6b:69:19:08:5c:62:29:34:05:f4:52:c1:53:97:36:31:
6d:65:a6:4f:3d:5a:0f:7a:7e:81:96:bd:c0:a2:43:f1:97:d1:
15:3f:66:ed:fc:6c:83:e2:4e:15:39:21:b9:02:d8:10:d7:1d:
9a:9f:77:11:95:63:81:0c:f4:9b:f5:5c:03:b8:75:54:07:3e:
79:bd:6b:a3:d7:c8:9a:d9:ad:ef:4b:7a:9d:35:a2:a5:0e:c9:
23:41:e6:11:56:da:64:45:f2:2e:a1:7c:a5:3f:65:ed:4e:54:
c4:20:2d:74:57:1e:52:ae:b1:13:c0:5d:bd:e7:7f:13:e5:e6:
2f:d7:b8:24:75:f7:a9:a5:6d:d9:94:50:53:e2:f5:dc:9d:b1:
d5:13:02:ff:96:0f:ef:8a:2f:e8:86:30:4c:6b:f8:98:d7:93:
0b:ab:b8:c5:d4:dc:67:b6:36:94:72:ab:35:93:fc:c3:49:35:
d4:b6:da:33:9c:34:fc:30:01:0b:c8:ec:7e:3f:72:b9:98:2d:
c3:eb:c0:f4:45:90:11:ce:c1:cd:9f:19:73:81:88:bb:82:5a:
7c:7a:5c:32:86:7a:03:f6:35:10:cd:ed:75:18:9d:b7:0a:05:
2f:e5:c1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-ams.rpki-client.org