Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/48409ED8FA1B11ED90D18C3EC4F9AE02.roa
File: 48409ED8FA1B11ED90D18C3EC4F9AE02.roa (raw, json)
Hash identifier: Jzap1UoD/6Fn+tR5vL8Ue6oT1V7Iy/KPxChsH8GtWB4=
Subject key identifier: B8:3E:61:E8:C3:BD:FA:42:F5:16:E8:1C:AE:CD:64:91:29:FE:86:1A
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0BEF
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/48409ED8FA1B11ED90D18C3EC4F9AE02.roa
Signing time: Wed 31 May 2023 11:59:21 +0000
ROA not before: Wed 31 May 2023 11:59:21 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138241
IP address blocks: 115.167.24.0/22 maxlen: 24
115.167.28.0/22 maxlen: 24
115.167.48.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3055 (0xbef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 31 11:59:21 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64773699-8fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:eb:70:4b:72:91:e7:87:4d:37:94:9b:62:
50:0f:69:44:f8:23:7a:6a:29:93:d8:73:bf:db:f4:
1b:7d:68:e5:04:8e:65:1f:54:d5:b9:5f:65:01:c5:
75:39:c5:de:60:a8:0b:16:72:36:9c:d2:10:2a:78:
38:ed:87:88:49:e4:88:7d:4c:48:7d:5e:9f:36:2d:
4c:61:d3:b6:d1:d7:b0:61:4f:e3:72:dc:45:d7:86:
49:ff:74:a8:0c:38:52:0d:90:1a:53:f9:0f:72:09:
ae:78:3c:0c:4a:1e:82:c7:ff:c2:1a:20:80:22:3e:
04:dc:54:78:a0:97:3a:77:d0:6d:ad:fa:78:04:3c:
9f:a0:df:5b:a0:27:2a:69:0a:82:be:92:a5:c3:bb:
a5:d1:2d:56:a7:8c:a9:94:84:c8:f9:de:40:5b:c4:
b7:9e:3e:fe:93:ce:9b:96:48:b1:b6:18:89:36:b0:
1e:a3:0f:c7:ee:17:97:c9:73:4c:cd:c6:e8:f6:53:
6a:98:94:1a:20:ab:6c:67:16:60:91:ce:fa:32:ed:
b4:5c:40:e9:e6:c7:6f:75:9e:ae:20:fd:6a:ce:6c:
44:18:73:25:3c:32:a7:38:96:42:88:ad:92:a5:9f:
56:e8:90:82:bf:5b:98:1e:36:df:dd:0c:28:2f:95:
18:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3E:61:E8:C3:BD:FA:42:F5:16:E8:1C:AE:CD:64:91:29:FE:86:1A
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/48409ED8FA1B11ED90D18C3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.24.0/21
115.167.48.0/24
202.92.18.0/24
202.92.21.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:cc:78:72:16:2c:c3:3f:c5:32:60:9b:35:6d:5d:39:f0:30:
cf:fd:de:1e:74:ff:b9:b4:79:0c:09:13:4e:05:8f:4b:6a:71:
b7:e4:dc:85:08:4b:4c:39:c0:17:8b:03:b0:34:76:f5:9b:ad:
3b:9c:77:30:5f:7b:d7:59:9a:c9:e0:b8:3a:b1:c8:34:34:ee:
cc:c2:ae:78:09:f2:c5:8c:88:a4:3c:10:2a:14:fb:a4:53:0e:
1f:ad:5b:3c:bc:76:23:0a:bd:d3:30:0d:32:53:46:06:9d:8c:
f0:71:43:51:60:ad:ba:3e:06:38:49:b7:fb:8b:77:12:25:2e:
33:06:9e:3f:9b:d2:aa:cb:9c:76:ea:2b:ff:ac:0c:28:75:ce:
2c:d6:bd:f3:4e:81:ee:9d:93:9c:51:97:b6:13:cf:4f:51:b4:
ea:56:be:95:00:98:2e:dd:07:62:a5:ea:09:92:0c:bf:be:1a:
fe:3e:3e:23:30:d0:2f:de:67:dc:9f:b3:eb:4e:68:88:3f:32:
e7:94:f3:ef:8e:e6:d4:31:8c:da:3b:51:00:dc:2c:2c:6f:70:
5b:42:16:b3:ea:23:a0:ae:77:94:76:98:93:b4:53:12:9d:54:
8e:cd:3e:c5:ef:69:ed:fb:89:cd:02:97:5d:6b:65:13:fd:76:
68:98:4e:e7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwNTMxMTE1OTIxWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDc3MzY5OS04ZmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzgXrcEtykeeHTTeUm2JQD2lE+CN6aimT2HO/2/QbfWjlBI5lH1TVuV9lAcV1
OcXeYKgLFnI2nNIQKng47YeISeSIfUxIfV6fNi1MYdO20dewYU/jctxF14ZJ/3So
DDhSDZAaU/kPcgmueDwMSh6Cx//CGiCAIj4E3FR4oJc6d9Btrfp4BDyfoN9boCcq
aQqCvpKlw7ul0S1Wp4yplITI+d5AW8S3nj7+k86blkixthiJNrAeow/H7heXyXNM
zcbo9lNqmJQaIKtsZxZgkc76Mu20XEDp5sdvdZ6uIP1qzmxEGHMlPDKnOJZCiK2S
pZ9W6JCCv1uYHjbf3QwoL5UY8wIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFLg+YejD
vfpC9RboHK7NZJEp/oYaMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNDg0MDlFRDhG
QTFCMTFFRDkwRDE4QzNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBANzpxgDBABzpzADBADKXBIDBADKXBUwDQYJKoZIhvcNAQEL
BQADggEBAAzMeHIWLMM/xTJgmzVtXTnwMM/93h50/7m0eQwJE04Fj0tqcbfk3IUI
S0w5wBeLA7A0dvWbrTucdzBfe9dZmsnguDqxyDQ07szCrngJ8sWMiKQ8ECoU+6RT
Dh+tWzy8diMKvdMwDTJTRgadjPBxQ1Fgrbo+BjhJt/uLdxIlLjMGnj+b0qrLnHbq
K/+sDCh1zizWvfNOge6dk5xRl7YTz09RtOpWvpUAmC7dB2Kl6gmSDL++Gv4+PiMw
0C/eZ9yfs+tOaIg/MueU8++O5tQxjNo7UQDcLCxvcFtCFrPqI6Cud5R2mJO0UxKd
VI7NPsXvae37ic0Cl11rZRP9dmiYTuc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org