Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3777881A249F11EE8175B04CC4F9AE02.roa
File: 3777881A249F11EE8175B04CC4F9AE02.roa (raw, json)
Hash identifier: 9Nz8bOVi+nXXR4I3BP992y91Ult4lIcBcFuQ80DIFmo=
Subject key identifier: CA:97:87:FE:EA:03:D9:64:74:27:65:AA:21:66:19:8D:33:3A:94:5C
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0C64
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3777881A249F11EE8175B04CC4F9AE02.roa
Signing time: Mon 17 Jul 2023 12:49:52 +0000
ROA not before: Mon 17 Jul 2023 12:49:52 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 115.167.24.0/22 maxlen: 22
115.167.28.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3172 (0xc64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 17 12:49:52 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64b538f0-3ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:34:82:0a:55:5a:04:86:cd:bd:f9:8e:4f:43:
80:9a:b5:e6:69:db:26:5d:2a:77:03:e2:bb:00:72:
df:98:20:68:86:9a:ef:99:62:ac:19:2e:47:ca:60:
c4:8d:3a:0a:1b:70:3c:58:0d:ee:74:ed:d2:e5:47:
57:21:73:8e:91:07:6d:76:de:7b:af:a9:d9:2a:5e:
86:b8:c8:ad:65:8a:12:e3:c0:17:cf:c7:81:34:91:
fb:1b:a9:3e:ae:55:ab:1a:80:25:4e:08:1d:b1:87:
73:de:3b:e0:e0:fe:e0:62:6a:f2:32:8f:cd:b9:a9:
62:12:6f:07:26:16:49:7e:fc:80:c0:b1:f9:1c:ee:
1a:2e:b6:e9:3d:33:a1:e9:15:fb:43:4a:49:26:e8:
60:8a:ef:a7:b2:a2:f9:30:7b:64:8c:6e:37:7e:ab:
9f:99:37:8d:da:57:b9:4f:97:db:c8:b2:b1:4f:0e:
65:ee:32:ab:60:44:58:2d:b3:76:eb:8e:11:dd:91:
c8:43:26:f5:a3:ca:d3:c3:15:fd:e6:95:9e:0d:5b:
55:b8:5b:29:e3:07:40:1d:64:18:b0:cc:f8:e9:21:
66:14:0f:06:58:90:d6:7d:4d:5c:38:f0:f9:57:e0:
36:26:25:c7:08:36:dc:ec:ae:4f:aa:34:2b:f0:63:
ad:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:97:87:FE:EA:03:D9:64:74:27:65:AA:21:66:19:8D:33:3A:94:5C
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3777881A249F11EE8175B04CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.24.0/21
Signature Algorithm: sha256WithRSAEncryption
29:01:8d:d1:49:6a:be:93:bc:c9:fc:96:4d:b1:18:da:91:9e:
99:0a:5b:60:aa:b5:44:2f:d0:ed:6e:bf:b2:a3:2a:96:61:dd:
4d:e2:d2:26:78:b8:2d:7e:84:9d:38:67:88:56:40:56:ab:ba:
7f:6a:c4:a6:c3:a9:0f:4b:b4:4d:e4:e3:c4:d9:a3:13:29:ba:
f2:f6:9c:44:0c:21:7c:3e:ed:e4:50:7f:96:70:22:e7:8f:f3:
67:00:58:e1:ff:ae:f9:a5:18:dc:ec:d5:97:87:55:06:0e:44:
1e:5a:eb:fd:4a:ab:27:84:76:76:a5:ac:d3:d7:96:d6:f2:ea:
05:e5:e0:74:94:80:a7:5d:c2:da:5e:ba:6e:65:46:91:f1:f9:
41:18:4f:db:c9:d8:b7:f0:f0:d3:4c:96:e2:f0:d0:3a:84:d7:
9a:ec:97:41:c6:3d:50:83:3a:a9:f7:4d:0c:f9:25:4e:64:fa:
4c:b3:4e:12:e3:d5:8f:cd:cd:5c:c1:ed:f2:30:99:cd:a6:28:
f2:c5:41:40:45:66:3d:a8:56:7f:e6:ac:97:74:0b:61:4b:b6:
ce:ff:f8:7c:61:94:c9:d1:07:c4:aa:37:71:39:15:85:80:46:
37:cb:56:ed:bb:a1:aa:6f:70:1e:f7:cc:a1:97:57:e8:c5:67:
99:37:c3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 07:51:37 2023 by rpki-client on console-ams.rpki-client.org