Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/033978AE5B3E11EDA645054FC4F9AE02.roa
File: 033978AE5B3E11EDA645054FC4F9AE02.roa (raw, json)
Hash identifier: wMRLW4x5So6VbGYd7A/ZTuImPQgaL+kBwAFNvqxQJPY=
Subject key identifier: F2:64:26:A8:92:BA:79:5B:9B:75:63:6D:C3:91:93:12:94:4A:78:2B
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 09AC
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/033978AE5B3E11EDA645054FC4F9AE02.roa
Signing time: Mon 07 Nov 2022 07:28:42 +0000
ROA not before: Mon 07 Nov 2022 07:28:42 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 103.151.27.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.24.0/22 maxlen: 24
115.167.28.0/22 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.124.0/22 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
2400:9560:1::/48 maxlen: 48
2400:9560:5::/48 maxlen: 48
2400:9560:9::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2476 (0x9ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 7 07:28:42 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6368b3aa-cbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:90:c4:61:45:ca:9b:cf:52:7a:b4:00:20:77:
3b:62:5f:a2:6b:86:f0:cd:6f:c5:c9:82:8f:e8:c0:
2e:ef:bf:ea:1e:6a:c2:a7:90:7b:a4:61:b4:3b:6e:
16:8e:03:59:b1:04:a1:4b:1c:34:98:76:2f:b9:e0:
41:1e:3d:7b:e8:81:c3:30:83:f4:36:cd:85:76:e2:
35:20:09:0e:d1:9c:64:f3:be:a7:1b:14:0d:e4:9f:
a7:a9:6b:c9:5b:89:5e:97:d0:c5:8b:db:8e:54:54:
9e:54:c0:63:2c:a6:8f:e4:61:9a:e3:ee:4e:04:96:
ed:10:8a:57:51:f4:31:3d:3d:35:36:02:61:0c:db:
7f:d4:ad:40:0f:6a:38:7e:a3:02:dd:81:55:12:30:
78:42:8b:c5:f3:2f:1b:36:33:a8:5a:0d:f7:9c:b5:
80:eb:15:25:59:53:66:fb:64:13:f3:ca:6d:55:87:
3b:cc:81:37:0d:3b:e5:04:b3:81:89:2f:db:4a:8b:
1f:17:79:69:52:9f:1e:6b:bd:20:49:bb:4b:48:dc:
fe:58:56:9d:e5:5f:2f:9f:31:c6:5e:a1:32:d8:78:
1f:4c:ba:3d:9b:3e:dc:96:b4:4d:72:bb:bc:76:fd:
fa:1c:d5:83:a4:04:ac:ee:9d:4d:1e:da:3d:4e:fd:
61:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:64:26:A8:92:BA:79:5B:9B:75:63:6D:C3:91:93:12:94:4A:78:2B
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/033978AE5B3E11EDA645054FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
115.167.2.0/24
115.167.24.0/21
115.167.72.0/22
115.167.78.0/24
115.167.116.0/22
115.167.124.0/22
202.92.16.0/23
202.92.23.0-202.92.31.255
IPv6:
2400:9560:1::/48
2400:9560:5::/48
2400:9560:9::/48
Signature Algorithm: sha256WithRSAEncryption
26:65:b9:3a:5c:8a:a0:3f:96:74:1a:e2:5e:6b:68:ed:ab:30:
67:23:ff:7a:57:84:c2:33:cb:22:4f:ac:bf:2f:a8:bc:e4:8d:
4f:27:97:5f:18:c2:9e:a5:d5:25:b1:0e:95:94:9e:ec:17:30:
b8:9d:c9:5b:a5:d5:b1:ed:46:6f:0a:a8:24:9d:c6:fc:cd:4d:
4a:f5:b7:03:a0:de:27:9e:43:60:af:90:51:5f:0f:99:89:fa:
62:52:3f:68:7f:47:ed:a2:d5:9c:f2:6e:9a:fe:b0:25:2a:3b:
c0:78:c9:9f:53:66:e2:d2:5b:bf:ef:76:17:c9:76:31:2d:29:
b7:d3:1a:9d:6b:fc:b6:8a:82:f1:cc:0d:26:d8:3d:fd:fb:4d:
bf:0e:ee:c3:3d:d6:46:c1:31:8e:26:ef:6a:73:31:ee:f4:39:
d8:85:a6:ad:5d:f1:40:d3:4a:45:3b:08:11:e0:30:90:e1:93:
87:fc:be:03:47:e6:b0:a7:3d:b7:26:e3:13:a6:40:49:db:93:
45:1d:5c:4c:28:ae:6b:45:8e:d4:8e:65:70:da:05:b0:2c:be:
a3:03:a4:dd:78:42:d3:74:a5:85:82:a6:fe:b8:c3:9b:1b:df:
ab:9e:f9:b9:6b:7f:e4:c0:5d:53:3a:52:5b:fa:f8:0b:21:5b:
25:65:69:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org