Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/226D33C62C3811ED92BAE159C4F9AE02.roa
File: 226D33C62C3811ED92BAE159C4F9AE02.roa (raw, json)
Hash identifier: Zy/MZwOJFl/xdHD3P1pi22yZ0K5mebgl0kNokNOQkgI=
Subject key identifier: C4:5E:9E:E5:AD:C7:79:AA:5F:00:FC:8B:30:CD:5B:58:C8:A9:B6:25
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 08F5
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/226D33C62C3811ED92BAE159C4F9AE02.roa
Signing time: Sun 04 Sep 2022 09:58:33 +0000
ROA not before: Sun 04 Sep 2022 09:58:33 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 15083
IP address blocks: 115.167.8.0/22 maxlen: 24
115.167.100.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
175.110.100.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2293 (0x8f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 4 09:58:33 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=631476c8-7d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:25:ad:88:ca:18:41:e9:dd:1a:98:dd:03:ee:
db:52:d4:7e:56:6c:f2:61:d7:29:f9:39:11:8b:ed:
34:a6:ae:6d:69:8a:b8:38:29:ec:fa:1a:2e:91:73:
84:1f:3c:a3:8f:60:67:96:88:64:72:f0:f5:f1:8d:
e9:80:6c:50:af:32:49:2f:3e:1b:22:b9:e7:68:37:
80:68:3b:c6:e1:5f:e6:ca:bd:84:18:5c:8d:bc:64:
44:a1:52:4c:4b:a9:be:d9:ae:b4:a8:e0:f9:10:0a:
63:df:fa:8b:12:f8:94:95:ea:bf:cd:61:80:b3:26:
56:5d:46:45:52:5e:95:4f:c7:6a:56:f4:bf:db:04:
80:8e:91:3f:eb:e7:7b:13:04:27:6c:bf:99:f8:78:
29:de:2a:10:bc:a6:37:16:19:f9:79:12:4c:ee:57:
73:cb:0c:82:f2:b2:80:64:57:27:b2:2a:d5:af:e4:
df:88:0c:54:86:13:b1:a9:49:1a:ff:26:b8:0f:60:
3a:88:ae:be:1e:ba:68:0e:3b:f1:6d:63:9d:06:04:
23:3a:20:b1:48:1a:5b:0c:a9:ea:cb:c9:0d:9f:9c:
3f:37:ac:a4:04:65:f6:ef:79:cf:a0:c2:21:64:39:
40:13:48:aa:71:3f:ed:0a:c3:c5:a0:77:56:a6:e6:
9a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5E:9E:E5:AD:C7:79:AA:5F:00:FC:8B:30:CD:5B:58:C8:A9:B6:25
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/226D33C62C3811ED92BAE159C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.8.0/22
115.167.100.0/22
115.167.120.0/22
175.110.100.0/22
Signature Algorithm: sha256WithRSAEncryption
68:09:5f:46:89:73:45:2d:3b:83:92:a8:d2:69:aa:69:38:be:
75:9d:cf:e7:08:c9:cf:30:e3:ea:c2:9a:16:1c:00:86:8f:78:
d7:6d:83:c0:f4:99:b5:25:64:25:33:22:ea:83:a7:fc:75:e6:
b8:b8:7f:38:cb:aa:1d:1f:e7:0a:68:a3:35:2c:02:f7:27:33:
5c:ce:79:78:49:43:c5:aa:20:3a:09:42:76:16:53:09:d9:de:
bd:f4:6c:d1:66:ed:fb:47:6e:8e:1c:c3:bd:ad:3e:e9:f3:c2:
1d:07:e7:65:f6:a9:58:67:16:78:66:d5:c9:b4:45:1c:df:de:
76:40:35:56:a0:a4:f4:2a:d9:7b:18:64:2a:9e:b1:eb:b2:6d:
1e:fe:97:16:8c:9a:86:e5:d4:10:30:2f:2d:a1:8f:df:a0:fd:
10:ce:f0:1b:0f:cd:07:5f:f2:b3:a5:64:0d:91:12:ad:65:16:
a8:45:1d:2a:49:5f:1c:f9:b7:56:d9:c6:38:66:d9:6c:1f:b2:
79:7d:24:d9:70:0e:07:87:be:aa:0a:1c:94:3f:33:c9:e9:93:
b5:59:83:c7:85:66:43:d4:c5:fe:8c:1f:19:81:1f:05:c5:99:
1f:55:23:7d:18:c8:56:d8:70:72:2e:25:3a:7c:4a:df:16:58:
2b:72:9e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org