Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2249C7825E6B11EDBD39E90DC4F9AE02.roa
File: 2249C7825E6B11EDBD39E90DC4F9AE02.roa (raw, json)
Hash identifier: AYy22zZjjmStlg59ooOR8mx5ryq9UoGNZADy63LRp90=
Subject key identifier: A1:6A:D6:48:60:99:3D:77:34:70:0B:2A:F6:C6:27:3C:B6:58:47:96
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 09AA
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2249C7825E6B11EDBD39E90DC4F9AE02.roa
Signing time: Mon 07 Nov 2022 07:09:35 +0000
ROA not before: Mon 07 Nov 2022 07:09:35 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 115.167.28.0/22 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.124.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2474 (0x9aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 7 07:09:35 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6368af2f-34fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:b2:58:fb:71:28:78:3b:95:92:13:ab:de:
cd:ca:10:cc:88:46:6d:53:fa:2b:7d:3a:5b:74:a1:
b3:ed:69:90:d6:fe:5b:ca:52:8d:3f:d1:f0:95:7f:
9b:05:12:66:00:d6:83:39:36:2a:98:8c:49:ae:9b:
ad:76:f6:4a:74:f5:89:01:33:00:de:33:ed:a2:98:
5c:3e:3d:4e:ad:8b:ad:21:f9:84:66:98:1e:e4:89:
d3:ba:6f:77:35:d1:6a:2d:8d:ef:c3:51:16:b7:c8:
51:88:5d:79:d0:e2:1d:b6:28:82:d6:14:1c:36:6f:
63:84:42:53:12:45:34:81:9e:58:69:53:c7:68:b4:
31:b2:c0:84:84:fd:cc:d1:42:04:f2:21:c5:07:ed:
6f:4b:30:4b:33:67:63:f1:2d:0d:67:7a:50:2c:d2:
16:03:2a:d4:4c:d4:6a:4f:39:82:92:28:7a:95:43:
f3:77:a8:2c:32:80:e3:e7:c6:72:11:b8:a9:f3:6f:
3c:b9:80:0c:ba:ee:82:7b:69:a5:32:fd:fe:9f:dd:
2f:ca:f7:25:28:cf:ae:aa:30:c0:a9:00:d7:30:14:
8a:1c:04:60:d0:7f:ff:85:68:e4:30:b1:fe:4b:65:
ad:f7:dc:4e:72:be:6d:3a:3d:48:f9:c1:2e:96:c3:
80:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6A:D6:48:60:99:3D:77:34:70:0B:2A:F6:C6:27:3C:B6:58:47:96
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2249C7825E6B11EDBD39E90DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.28.0/22
115.167.116.0/22
115.167.124.0/22
Signature Algorithm: sha256WithRSAEncryption
17:c0:24:4f:3f:b7:9b:71:a8:33:4e:5d:62:30:5d:66:c6:d2:
f0:e1:f5:64:95:be:2f:40:88:0a:1a:40:72:1d:be:24:70:35:
1d:98:af:9a:e1:38:f1:2a:52:2e:7c:a8:37:4a:01:44:69:e2:
fe:1c:ea:fc:bb:fd:46:0b:7b:f6:03:27:10:48:12:9d:72:60:
77:08:7a:ab:7b:6a:43:70:9a:f7:22:80:eb:9b:9a:7c:c9:ac:
9a:c2:42:41:88:0e:18:27:f3:4a:48:cf:72:87:a3:bb:01:9d:
f7:73:bf:7b:a7:63:c3:a6:e7:4d:64:56:7a:69:3c:a4:57:18:
a0:9a:0d:23:51:ca:2f:3b:6b:b9:38:ce:b4:d4:f9:ab:be:40:
ed:23:cf:d9:2e:d6:83:00:b5:6a:22:67:8d:7f:49:d0:06:fa:
dc:f6:8c:4b:7a:2b:a9:b5:e8:55:ab:24:96:63:83:0a:e5:ad:
e2:a8:d0:34:08:a6:7c:17:0d:e9:65:b3:e4:0b:8d:4f:a6:b8:
69:3d:13:04:27:0f:d5:38:92:3a:64:b8:64:99:55:b3:a4:55:
16:b4:4e:af:bb:2f:c7:66:bb:d3:4f:c5:cd:6f:4f:83:4d:b9:
77:b2:f1:e1:a7:0b:f8:15:bd:56:39:8f:21:43:db:4c:64:47:
cb:c5:1f:d5
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICCaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjIxMTA3MDcwOTM1WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzY4YWYyZi0zNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAstSyWPtxKHg7lZITq97NyhDMiEZtU/orfTpbdKGz7WmQ1v5bylKNP9HwlX+b
BRJmANaDOTYqmIxJrputdvZKdPWJATMA3jPtophcPj1OrYutIfmEZpge5InTum93
NdFqLY3vw1EWt8hRiF150OIdtiiC1hQcNm9jhEJTEkU0gZ5YaVPHaLQxssCEhP3M
0UIE8iHFB+1vSzBLM2dj8S0NZ3pQLNIWAyrUTNRqTzmCkih6lUPzd6gsMoDj58Zy
Ebip8288uYAMuu6Ce2mlMv3+n90vyvclKM+uqjDAqQDXMBSKHARg0H//hWjkMLH+
S2Wt99xOcr5tOj1I+cEulsOAyQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFKFq1khg
mT13NHALKvbGJzy2WEeWMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMjI0OUM3ODI1
RTZCMTFFREJEMzlFOTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBAJzpxwDBAJzp3QDBAJzp3wwDQYJKoZIhvcNAQELBQADggEB
ABfAJE8/t5txqDNOXWIwXWbG0vDh9WSVvi9AiAoaQHIdviRwNR2Yr5rhOPEqUi58
qDdKAURp4v4c6vy7/UYLe/YDJxBIEp1yYHcIeqt7akNwmvcigOubmnzJrJrCQkGI
Dhgn80pIz3KHo7sBnfdzv3unY8Om501kVnppPKRXGKCaDSNRyi87a7k4zrTU+au+
QO0jz9ku1oMAtWoiZ41/SdAG+tz2jEt6K6m16FWrJJZjgwrlreKo0DQIpnwXDell
s+QLjU+muGk9EwQnD9U4kjpkuGSZVbOkVRa0Tq+7L8dmu9NPxc1vT4NNuXey8eGn
C/gVvVY5jyFD20xkR8vFH9U=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org