Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/40136F76752111ED84F8CD3CC4F9AE02.roa
File: 40136F76752111ED84F8CD3CC4F9AE02.roa (raw, json)
Hash identifier: Ur3CiJZnwiByirzxamt/zOyy7fLrFVxqdkr7cnkjKIc=
Subject key identifier: EB:FF:69:3D:72:BD:2B:4F:36:A0:BB:86:3C:C2:62:C3:00:C7:D3:23
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0A1D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/40136F76752111ED84F8CD3CC4F9AE02.roa
Signing time: Thu 15 Dec 2022 07:18:44 +0000
ROA not before: Thu 15 Dec 2022 07:18:44 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.0.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.100.0/22 maxlen: 24
115.167.108.0/22 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
115.167.126.0/24 maxlen: 24
115.167.127.0/24 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.80.0/22 maxlen: 24
175.110.84.0/22 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
2400:9560:1::/48 maxlen: 48
2400:9560:5::/48 maxlen: 48
2400:9560:9::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2589 (0xa1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 15 07:18:44 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=639aca53-3d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:57:81:11:2e:bc:7d:1b:6c:55:3a:30:54:
00:d0:0a:61:30:48:db:10:ad:cf:54:47:11:28:ca:
05:c7:e4:66:bf:05:c2:e6:04:d3:76:fa:86:98:a0:
56:eb:01:41:2e:32:b5:1e:ed:70:36:2c:3f:62:ea:
af:f0:ae:f4:25:02:36:ad:1d:20:ed:84:37:37:69:
46:20:0d:11:1e:4a:33:0e:e3:47:80:c0:81:e1:7d:
3a:af:df:03:03:f0:c1:a9:df:71:af:19:88:ac:18:
88:6c:7a:44:b4:05:30:11:07:62:21:4a:c7:37:04:
ca:7d:b0:d7:af:36:77:65:9f:f6:6b:27:f1:64:26:
0b:0d:f6:6f:dc:42:c8:41:e8:4a:71:28:e4:bd:50:
29:d7:34:a8:53:b6:16:42:e1:43:ce:75:50:6d:b8:
5f:fe:fc:43:7f:a6:74:f9:5c:8e:ab:3c:fc:8d:3c:
25:84:ee:39:59:39:26:24:74:e4:f3:8a:ec:af:0c:
83:65:b8:c2:05:52:3f:95:2a:06:b1:78:b9:bf:fd:
62:c0:aa:78:1b:79:29:13:6a:1a:1b:1d:5c:5c:0a:
e1:3c:84:91:82:2c:f7:18:90:a8:68:32:88:65:42:
ad:65:72:88:9e:25:ca:e1:b5:95:ae:25:a8:c9:99:
94:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FF:69:3D:72:BD:2B:4F:36:A0:BB:86:3C:C2:62:C3:00:C7:D3:23
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/40136F76752111ED84F8CD3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.0.0/24
115.167.2.0/24
115.167.4.0/24
115.167.72.0/22
115.167.77.0-115.167.78.255
115.167.100.0/22
115.167.108.0/22
115.167.116.0-115.167.123.255
115.167.126.0/23
175.110.64.0/22
175.110.80.0-175.110.91.255
175.110.96.0/24
175.110.105.0/24
175.110.107.0/24
175.110.111.0/24
202.92.16.0-202.92.21.255
202.92.23.0-202.92.31.255
IPv6:
2400:9560:1::/48
2400:9560:5::/48
2400:9560:9::/48
Signature Algorithm: sha256WithRSAEncryption
b0:86:1a:eb:c8:9e:ba:35:50:f8:8b:7b:77:7a:c2:db:cf:a2:
6b:e5:98:e1:aa:2e:2f:11:12:b4:5a:81:67:4a:dd:c3:9e:5e:
34:fa:98:a2:90:13:fc:56:45:b0:20:80:05:90:db:95:c9:ba:
0e:dc:7f:ea:af:17:2d:4b:5f:f6:82:91:60:dc:85:07:1c:24:
d8:4c:12:3f:3a:29:b0:91:d5:d7:1b:66:1e:58:e5:e7:b5:c1:
be:d4:25:b2:9e:c3:f8:8b:b1:07:fc:e8:8f:f6:bc:b0:ab:c8:
c2:23:a0:a8:f1:87:5d:9e:21:40:4e:37:54:a7:23:f0:06:f8:
52:e6:c4:ec:43:52:7d:1d:e8:33:aa:43:a9:46:2d:67:2e:31:
08:6e:51:34:0e:49:66:80:56:68:78:4f:75:82:b6:ac:35:4f:
d0:a0:ee:76:5c:be:4a:27:91:76:57:9b:41:a3:e4:e7:b4:10:
67:20:14:83:23:56:ca:8f:36:6b:f3:aa:9e:93:b0:f7:64:d3:
17:c7:cf:95:5a:cc:8f:92:df:a6:94:c2:50:5a:91:fb:c4:bc:
50:71:ca:4c:fd:a5:18:93:fb:12:3d:84:af:3d:e0:4b:78:4a:
53:0d:c3:ff:0d:aa:d7:77:9d:09:bf:ec:c2:d3:27:72:ea:a8:
10:ee:89:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org