Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2D90F57AEFCA11ED8F058168C4F9AE02.roa
File: 2D90F57AEFCA11ED8F058168C4F9AE02.roa (raw, json)
Hash identifier: E8RAPzYSywueRPxRPmEBq6od9L1nMkmVeP6kZXs5w7s=
Subject key identifier: 57:D5:16:14:28:8C:BA:EB:F3:06:A8:2B:B7:8F:20:C4:AF:A4:BC:65
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0B76
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2D90F57AEFCA11ED8F058168C4F9AE02.roa
Signing time: Thu 11 May 2023 07:05:15 +0000
ROA not before: Thu 11 May 2023 07:05:15 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.1.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.78.0/24 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
2400:9560:1::/48 maxlen: 48
2400:9560:5::/48 maxlen: 48
2400:9560:9::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2934 (0xb76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 11 07:05:15 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=645c93aa-ee0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ef:d2:75:d1:1b:fd:de:20:45:1c:e3:d9:75:
32:ff:e0:ec:65:5b:3a:24:b3:60:56:0c:fc:e8:07:
fa:f7:5e:86:3a:2f:ec:cb:93:bd:42:3d:eb:61:03:
fd:e6:f2:b3:68:47:19:04:a4:85:4d:1a:c0:0b:e7:
28:bd:d7:20:fa:1a:2f:68:21:08:69:c0:8c:a9:d3:
5b:f6:20:c8:2b:20:c4:19:0a:6f:3d:02:4b:b5:e4:
73:10:eb:7a:10:56:5c:90:6f:dd:2b:13:de:ad:64:
e9:76:ff:dd:ff:ad:83:59:09:67:ee:15:9c:36:51:
fd:b6:5d:8b:aa:26:37:d3:bc:e8:29:1a:30:9d:3d:
f1:8a:aa:0e:31:e8:82:dc:b5:97:b8:e0:98:cf:7c:
c9:d2:6c:d2:f0:71:a4:c2:be:56:6b:4d:9d:68:e8:
5f:dc:fb:63:18:df:d4:15:a0:47:25:e7:1f:ee:2d:
73:9a:4d:2a:98:34:bb:02:14:3c:7d:7b:1d:43:37:
07:b0:d0:d3:f7:86:cb:62:aa:cd:16:9a:a3:d7:88:
b8:76:e0:d6:58:fb:33:97:de:21:09:10:1b:ac:22:
95:2b:1d:95:e3:76:22:6b:ce:ea:d4:73:85:90:2e:
23:09:ba:71:17:93:0b:8d:b6:30:95:35:53:e1:43:
95:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D5:16:14:28:8C:BA:EB:F3:06:A8:2B:B7:8F:20:C4:AF:A4:BC:65
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2D90F57AEFCA11ED8F058168C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.1.0-115.167.2.255
115.167.72.0/22
115.167.78.0/24
175.110.96.0/24
175.110.104.0/22
202.92.16.0/23
202.92.19.0-202.92.20.255
202.92.23.0-202.92.31.255
IPv6:
2400:9560:1::/48
2400:9560:5::/48
2400:9560:9::/48
Signature Algorithm: sha256WithRSAEncryption
7b:3c:28:d4:10:61:81:26:02:3c:3a:54:ea:d6:5e:b9:7a:8f:
17:d6:08:30:a6:1e:a3:6f:50:58:ea:d9:80:f4:61:d4:df:d8:
62:dd:5c:62:d6:8d:88:16:a3:79:2f:66:6b:bb:8c:7a:e2:bb:
41:31:d6:08:94:48:8b:7b:fc:45:0e:6e:69:35:c3:e1:37:c3:
bf:83:5d:1f:5b:4b:25:39:01:a3:f1:23:91:bd:31:ca:aa:d0:
d3:fc:f9:3b:ce:09:6d:83:be:aa:ac:47:d5:8a:02:69:bc:f2:
f1:1a:f8:82:96:4e:88:30:a8:8c:85:60:ea:6d:0e:77:1f:94:
69:d0:e5:52:ea:ad:a9:65:79:b7:80:9e:4d:88:11:c6:db:d9:
ee:0b:9b:a3:34:ab:15:17:0e:91:62:67:f0:cd:20:90:68:82:
4e:2b:d5:ed:01:22:72:5b:81:ff:3e:36:ca:bd:7f:e5:53:f6:
c7:42:13:e3:dd:0e:58:1a:08:1a:03:34:90:61:4d:fb:3e:6b:
bf:7c:81:35:9b:fb:47:e1:9a:f5:ae:ad:79:21:2e:dd:b2:59:
29:f2:fd:81:fa:88:f1:a5:00:72:8d:33:96:e0:b9:08:55:f7:
47:fb:56:fc:1d:df:40:e8:96:b9:37:1c:d9:ce:c7:ec:d3:7d:
b0:35:1b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org