Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/13A8C3120E4411ED9C0F5B45C4F9AE02.roa
File: 13A8C3120E4411ED9C0F5B45C4F9AE02.roa (raw, json)
Hash identifier: 84iBOFrsr1qTPpF8wjKJrYrmYo/eIQLOAK8izXTnUkY=
Subject key identifier: D2:8E:1F:51:EC:66:2A:FF:0B:12:91:FF:74:1D:58:A8:78:63:7D:86
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0868
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/13A8C3120E4411ED9C0F5B45C4F9AE02.roa
Signing time: Thu 28 Jul 2022 07:08:27 +0000
ROA not before: Thu 28 Jul 2022 07:08:27 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 115.167.48.0/24 maxlen: 24
175.110.80.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2152 (0x868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 28 07:08:27 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62e235eb-9e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:ac:ad:9b:46:d9:03:1c:77:20:32:f4:96:
e3:58:b9:fd:86:f4:00:64:0f:e4:1a:0d:42:e3:8c:
ec:c7:c8:df:d9:5d:e7:a1:69:e5:cd:0d:db:5c:1c:
a2:66:40:6f:5d:25:e7:61:26:fd:fa:9c:3b:2b:4a:
d0:ac:58:10:0d:a5:40:62:f5:47:ea:3e:15:fd:8b:
65:1c:2b:71:bf:be:4d:c7:14:da:73:45:0f:73:75:
18:d0:31:00:07:7a:47:ec:82:38:37:dd:af:eb:28:
f3:7e:3a:b5:6c:21:a5:f6:a0:18:56:8d:cf:33:d7:
a9:1e:3d:63:8c:5e:60:00:2f:46:a7:01:e7:07:fa:
4f:aa:0d:af:1f:a3:64:a2:7f:6c:18:86:b9:b9:a1:
e9:aa:27:73:0c:bf:f2:50:f0:11:fb:74:d4:ac:8a:
e9:35:10:6f:3b:52:8d:3a:bc:28:29:b2:a8:c7:a5:
d1:9b:dc:22:25:f7:c8:d9:6d:8a:80:41:77:d7:46:
31:21:4e:cd:4c:11:92:2a:ee:eb:b6:8b:09:cb:1f:
85:03:9e:31:67:ef:12:ce:52:35:6d:71:9a:e8:e1:
e5:f9:bd:b9:02:f5:38:ab:df:e3:db:6d:eb:11:fb:
b2:02:d4:23:5f:de:55:5d:39:a3:0d:70:54:ec:d2:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8E:1F:51:EC:66:2A:FF:0B:12:91:FF:74:1D:58:A8:78:63:7D:86
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/13A8C3120E4411ED9C0F5B45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.48.0/24
175.110.80.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:d3:f1:6a:a4:18:f9:41:95:49:74:c2:fa:65:13:74:c6:ca:
e3:52:aa:c2:b0:b4:1d:b7:d9:38:36:58:2e:73:06:bd:fe:a0:
9c:61:b7:1f:d5:91:bb:ea:cb:c4:ca:bc:bf:72:dc:bf:3d:94:
33:d8:15:5f:11:a0:7a:40:78:97:00:82:50:9d:e6:c7:e1:4e:
ca:aa:31:e5:a9:af:41:75:e1:66:d2:38:55:e7:a5:8d:d6:8a:
52:8f:16:da:ec:29:5e:75:fc:a6:a6:bd:a4:22:97:21:b1:c3:
a6:97:8b:b0:6b:3a:00:c7:96:7a:b4:3c:2c:20:1a:73:a6:ad:
c8:0f:a3:a6:4d:5b:90:b7:c3:3c:3c:a1:99:7d:43:d0:ea:ee:
fc:fe:a3:fc:7e:01:4a:53:3e:62:cb:1a:24:f9:3f:0f:a3:4f:
08:35:20:af:c0:09:75:5f:93:00:31:8a:76:c2:d3:13:d1:05:
1f:5a:40:4d:96:89:47:69:c7:4a:db:0c:2c:7b:13:5d:1a:0e:
75:2b:27:0f:e1:47:8a:04:53:56:31:60:0c:40:75:d2:aa:d4:
c9:60:aa:5f:15:84:71:ac:6d:ce:95:94:d8:1c:cc:51:69:1d:
c9:94:c5:e2:3f:21:ae:11:de:c6:f5:cd:35:a6:07:ef:89:78:
91:4b:b2:07
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjIwNzI4MDcwODI3WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmUyMzVlYi05ZTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw5CsrZtG2QMcdyAy9JbjWLn9hvQAZA/kGg1C44zsx8jf2V3noWnlzQ3bXByi
ZkBvXSXnYSb9+pw7K0rQrFgQDaVAYvVH6j4V/YtlHCtxv75NxxTac0UPc3UY0DEA
B3pH7II4N92v6yjzfjq1bCGl9qAYVo3PM9epHj1jjF5gAC9GpwHnB/pPqg2vH6Nk
on9sGIa5uaHpqidzDL/yUPAR+3TUrIrpNRBvO1KNOrwoKbKox6XRm9wiJffI2W2K
gEF310YxIU7NTBGSKu7rtosJyx+FA54xZ+8SzlI1bXGa6OHl+b25AvU4q9/j223r
EfuyAtQjX95VXTmjDXBU7NJd/QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNKOH1Hs
Zir/CxKR/3QdWKh4Y32GMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMTNBOEMzMTIw
RTQ0MTFFRDlDMEY1QjQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABzpzADBAOvblAwDQYJKoZIhvcNAQELBQADggEBAF7T8Wqk
GPlBlUl0wvplE3TGyuNSqsKwtB232Tg2WC5zBr3+oJxhtx/Vkbvqy8TKvL9y3L89
lDPYFV8RoHpAeJcAglCd5sfhTsqqMeWpr0F14WbSOFXnpY3WilKPFtrsKV51/Kam
vaQilyGxw6aXi7BrOgDHlnq0PCwgGnOmrcgPo6ZNW5C3wzw8oZl9Q9Dq7vz+o/x+
AUpTPmLLGiT5Pw+jTwg1IK/ACXVfkwAxinbC0xPRBR9aQE2WiUdpx0rbDCx7E10a
DnUrJw/hR4oEU1YxYAxAddKq1Mlgql8VhHGsbc6VlNgczFFpHcmUxeI/Ia4R3sb1
zTWmB++JeJFLsgc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org