Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/090AFE0CAC9A11EE96CE253FC4F9AE02.roa
File: 090AFE0CAC9A11EE96CE253FC4F9AE02.roa (raw, json)
Hash identifier: daBZP+TfoowhnGXqg/26pYCpMIv+JFe5rj41K8nAQgY=
Subject key identifier: DB:02:91:C1:96:C7:51:B9:AE:1B:5A:80:57:CF:83:24:18:BC:7E:A9
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0EF3
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/090AFE0CAC9A11EE96CE253FC4F9AE02.roa
Signing time: Sat 06 Jan 2024 13:46:47 +0000
ROA not before: Sat 06 Jan 2024 13:46:47 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 18450
IP address blocks: 180.178.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 09:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3827 (0xef3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 6 13:46:47 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=659959c7-094f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:e1:8a:4f:10:d3:79:46:9f:c9:51:93:b4:
d0:87:ef:e8:98:a9:86:1d:82:5c:94:c2:d5:26:cf:
c2:99:2b:f9:61:22:58:c1:c3:1e:e3:df:79:40:b8:
af:09:52:db:c1:6c:20:76:75:e7:01:53:4c:06:50:
87:55:1c:bd:15:0d:fe:c8:42:83:b4:8d:60:90:5c:
e1:5c:9c:06:76:7b:60:b2:0c:6d:74:be:49:90:7d:
90:85:da:ed:c8:e7:26:0c:69:78:4f:22:9d:3e:64:
4e:49:d3:fb:7b:ea:c1:d3:ca:bd:c8:63:53:e6:5c:
28:1e:09:c1:aa:8a:98:ac:fc:3a:30:18:09:6b:01:
b0:22:b5:3b:de:2d:61:2a:bf:e8:3e:14:24:1c:58:
a8:be:6b:57:55:3d:ce:4a:ab:1a:1f:f3:c1:fc:66:
42:6d:28:d8:83:40:19:ab:bb:fc:62:95:41:00:e7:
46:e8:8a:81:c5:90:b7:3d:24:9d:59:0c:b4:36:be:
b7:fa:9f:73:a9:34:5e:78:f8:a6:38:4c:53:29:a0:
67:36:1d:9e:f6:33:be:c2:49:01:1c:7d:2b:39:97:
69:a5:b9:a2:2e:ea:52:fd:7f:b7:a9:4e:97:36:d3:
51:5c:76:1e:da:b8:34:87:36:39:89:26:bf:20:a4:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:02:91:C1:96:C7:51:B9:AE:1B:5A:80:57:CF:83:24:18:BC:7E:A9
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/090AFE0CAC9A11EE96CE253FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.178.167.0/24
Signature Algorithm: sha256WithRSAEncryption
97:20:60:fd:af:69:7c:59:40:d1:5d:d3:81:dd:f0:b0:23:14:
5a:a9:df:36:5e:7b:27:92:69:0e:ef:27:aa:53:39:dd:c9:28:
d4:5d:82:ec:11:3c:e2:44:13:12:1c:f0:9f:e0:d4:25:8b:28:
8e:09:dc:71:7d:9c:40:c9:8c:fb:76:ce:1e:97:33:85:7a:a8:
e1:3a:9d:3d:b2:df:1a:64:66:d5:6e:23:e4:e6:c7:cf:e0:b7:
d6:e2:b4:23:a1:a8:99:53:ab:ed:b4:df:5d:95:de:cf:15:28:
f8:09:29:17:08:6d:ed:9f:f0:10:55:b0:97:ef:38:b7:89:d7:
89:75:ca:24:06:a4:58:c6:1c:44:fa:b3:d6:d9:7e:12:84:3a:
cc:82:f5:c4:42:ca:9d:ef:5b:ad:12:3a:54:3e:35:94:44:e8:
29:87:46:86:35:89:b1:a0:65:f9:29:b9:73:f6:4c:0e:74:a1:
fd:a5:83:d1:a1:8c:11:15:73:70:1a:c3:60:fd:d4:43:09:80:
c4:72:d2:32:6d:9f:95:1a:2a:d2:c6:06:b2:6f:94:d3:18:92:
29:98:72:3f:78:c2:e0:38:7c:59:2c:99:dd:d8:c8:9b:25:7b:
08:0d:61:bb:56:d6:13:90:f0:e6:81:db:17:b7:16:18:41:96:
1a:70:07:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 12:42:45 2024 by rpki-client on console-fra.rpki-client.org