Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2F2AD21A84D711EDB5415128C4F9AE02.roa
File: 2F2AD21A84D711EDB5415128C4F9AE02.roa (raw, json)
Hash identifier: 1+t3hw8Hbr3lb54tI2XcNrzdfgfgugTi4w6x184AquI=
Subject key identifier: 9B:CF:12:19:19:B4:CE:A6:F0:E0:83:28:E1:EB:E0:7B:ED:4D:41:7C
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0A31
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2F2AD21A84D711EDB5415128C4F9AE02.roa
Signing time: Mon 26 Dec 2022 04:38:46 +0000
ROA not before: Mon 26 Dec 2022 04:38:46 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 29761
IP address blocks: 175.110.104.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2609 (0xa31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 26 04:38:46 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63a92556-d79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:9f:a0:a9:ef:f2:2d:24:8a:20:19:26:62:
b6:db:bc:fb:54:c4:76:d2:2e:59:59:60:bf:3c:ff:
66:03:93:70:e4:fc:e5:f6:a8:1d:04:21:57:0a:21:
4f:5e:8e:a9:a1:e2:e0:aa:a8:bb:9d:67:27:fe:57:
9d:f3:42:c4:c1:90:9d:11:dc:42:bc:f5:25:31:60:
f3:a3:d8:bb:64:3b:4c:63:61:00:40:25:98:46:f7:
ae:f6:7b:bb:a4:e2:61:b1:74:fd:dd:74:46:00:63:
ba:b5:53:93:bd:41:7d:88:81:40:1e:a0:00:63:b2:
f3:b7:0f:0d:d9:39:1e:58:bb:3c:19:a3:91:d5:97:
ac:84:de:36:41:07:73:a9:e7:9c:29:ef:df:b8:d2:
ad:9a:8d:51:ea:85:d9:e0:4b:c1:c7:9d:37:08:3c:
86:35:82:8f:87:c2:a4:fb:1b:b7:e1:7a:c9:ba:f1:
10:02:9d:51:9d:f5:e1:28:f4:61:07:c0:eb:1f:70:
80:9b:c9:6d:d0:e8:e7:31:52:b2:fa:a7:34:cc:20:
51:e8:aa:a2:0a:30:28:15:89:ac:a2:45:b8:02:e7:
72:66:da:33:93:eb:f5:86:48:bb:55:a0:7e:45:d2:
7e:17:26:a3:c9:a5:5c:35:0b:6a:69:c1:62:b7:eb:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CF:12:19:19:B4:CE:A6:F0:E0:83:28:E1:EB:E0:7B:ED:4D:41:7C
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2F2AD21A84D711EDB5415128C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.110.104.0/24
175.110.106.0/24
Signature Algorithm: sha256WithRSAEncryption
73:4c:76:de:4b:4a:d7:cf:bb:69:f2:aa:3b:68:86:4c:6a:03:
11:4e:63:fb:2c:7e:27:aa:0b:a4:63:07:26:98:b2:7a:d1:75:
86:13:6e:05:de:59:fe:dd:f6:e7:65:5f:a2:b1:0b:28:9e:13:
50:33:d9:25:e6:db:57:47:65:7f:18:de:e4:d3:85:4c:39:76:
1a:e8:df:26:37:58:9f:98:43:f6:0b:a4:53:85:0f:4a:48:e8:
7c:51:55:6a:72:6e:cd:a8:22:c7:87:ab:e1:0d:f5:80:cb:cb:
68:82:57:fd:5b:12:2c:15:6a:e1:d6:5b:82:b1:6f:14:43:f5:
fb:f9:b0:83:72:ec:c1:99:44:82:3a:81:85:94:03:52:0c:4a:
d7:28:28:25:ce:40:fa:1a:23:2f:c2:e4:6e:f7:49:36:87:56:
82:9b:1a:8e:cb:ca:64:0f:23:24:fa:64:d3:ef:72:6c:33:73:
23:0f:7a:e4:b4:5f:e2:98:ce:ff:f3:68:52:27:60:6e:f8:5f:
31:73:bc:b2:d7:0f:fb:b3:45:6a:13:22:6c:ed:a3:81:f1:21:
29:3d:10:a7:5e:6b:59:d0:0c:eb:3b:54:69:98:72:50:f4:e0:
62:7d:b8:72:39:b6:74:74:9b:8e:56:aa:93:1d:5f:f9:91:cb:
b3:ca:7a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org