Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/391EFA9255DA11EEB836ED36C4F9AE02.roa
File: 391EFA9255DA11EEB836ED36C4F9AE02.roa (raw, json)
Hash identifier: RptfyGLzkxo71/53DXELHkG/vIQoq1hWlpMFxB0JzaU=
Subject key identifier: 3F:1F:A1:EF:82:7B:67:CD:D3:02:C2:FB:C4:8C:A5:D1:8D:4A:7F:4B
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0F72
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/391EFA9255DA11EEB836ED36C4F9AE02.roa
Signing time: Fri 12 Jan 2024 10:41:45 +0000
ROA not before: Fri 12 Jan 2024 10:41:45 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 115.167.20.0/22 maxlen: 24
115.167.28.0/22 maxlen: 22
202.92.19.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 05:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3954 (0xf72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 12 10:41:45 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65a11769-4b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:be:ca:a4:85:5f:19:0c:f0:89:17:26:45:
53:96:59:bd:fc:e8:0d:1f:2f:cd:18:40:dc:b8:b0:
65:97:e1:52:07:ae:3b:ed:9e:54:dc:5b:72:d9:77:
20:a7:97:f6:59:ed:5d:87:96:8c:d8:71:e2:16:b1:
41:c3:8f:bf:69:32:27:22:a2:1c:b5:66:d6:05:04:
f8:f0:1c:57:e4:86:f5:8c:30:bc:17:54:b9:aa:64:
08:8f:ac:86:f1:5b:28:8d:d9:bc:7a:7a:c8:2d:2a:
23:8f:cb:7b:5e:e8:52:f7:40:cb:19:0d:75:f9:d7:
dc:b2:13:0e:0d:61:6f:d3:2a:11:da:83:b3:63:d6:
c1:b1:3b:de:38:36:9a:e3:ed:8b:e1:cc:11:68:89:
d2:eb:a2:a3:f4:93:ab:18:02:f4:c6:cf:fa:36:17:
fa:ba:c1:7c:8b:bd:b8:bb:a1:bd:69:71:44:f2:95:
ec:9c:a0:2f:1f:de:9f:03:1a:2b:5b:13:a4:d3:df:
84:cd:20:be:b7:c6:6e:9b:35:bc:15:8c:78:ad:5d:
4b:71:3d:00:7b:90:d5:fa:8e:b2:31:16:3d:b4:0f:
19:1a:e4:9e:f1:65:09:f6:4e:24:20:35:28:13:47:
f9:a0:a3:4d:6d:22:88:42:d6:cc:ab:98:94:f5:2c:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1F:A1:EF:82:7B:67:CD:D3:02:C2:FB:C4:8C:A5:D1:8D:4A:7F:4B
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/391EFA9255DA11EEB836ED36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.20.0/22
115.167.28.0/22
202.92.19.0/24
202.92.21.0/24
Signature Algorithm: sha256WithRSAEncryption
13:90:5b:06:69:ce:e0:39:e0:dd:5d:5f:2e:cc:f3:df:9d:c8:
07:cc:75:e1:8d:68:10:b0:76:b0:6b:86:83:ae:0f:da:28:1d:
f0:16:b7:28:77:63:fc:d9:84:82:22:75:4e:78:66:d6:bb:3c:
0b:5b:94:a0:26:57:b9:e7:ac:91:97:52:45:57:4f:a8:b6:14:
d9:c5:84:66:c0:37:f9:2a:0f:fc:64:38:83:e3:b1:40:f0:46:
e1:1e:e7:71:12:db:a0:6b:a2:28:52:e2:96:45:68:5a:5a:94:
e5:d7:86:21:0d:8c:fe:5f:dd:e6:8e:40:26:c0:da:fc:cd:e3:
a9:5c:3f:fd:c6:3d:be:0e:da:b2:04:05:5d:3a:37:98:8e:d1:
bf:56:4f:e1:24:0f:e2:ef:cf:08:3b:b1:05:de:8d:c1:1f:5a:
c4:c2:cc:32:6c:26:91:48:e5:ce:35:4d:d1:f1:07:f0:25:01:
02:82:00:dc:d8:12:b2:43:c0:5b:89:33:4b:74:ac:e4:56:e6:
70:e5:50:9e:2d:7c:d9:05:8a:c0:54:8c:82:ae:71:bb:9d:c7:
0f:41:03:b3:1e:36:bb:f8:da:b5:ad:0b:ce:15:1d:1c:47:34:
33:66:2a:7c:81:fa:a0:5a:40:94:6a:82:8c:30:ad:82:3c:13:
8a:32:50:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 10:21:59 2024 by rpki-client on console-fra.rpki-client.org