Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/48A8C6C88CDF11EE94745178C4F9AE02.roa
File: 48A8C6C88CDF11EE94745178C4F9AE02.roa (raw, json)
Hash identifier: UZOaFDjwOyzsOsA76ZfYNeAaArOfnz09uLiozylVxmo=
Subject key identifier: 54:B1:B7:74:B2:7A:D2:A2:41:04:EF:4D:3B:69:A0:F4:48:CB:B3:DF
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0E10
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/48A8C6C88CDF11EE94745178C4F9AE02.roa
Signing time: Mon 27 Nov 2023 04:41:52 +0000
ROA not before: Mon 27 Nov 2023 04:41:52 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 197450
IP address blocks: 175.110.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 09:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3600 (0xe10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 27 04:41:52 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65641e10-f71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:d4:23:95:0a:a9:b4:4b:a8:88:31:d8:90:
c6:1a:c1:1b:86:c1:ac:84:d0:13:95:34:63:65:9c:
f2:3c:f1:be:f7:87:d1:ce:a2:88:94:7b:c6:92:b7:
78:b3:53:85:c3:0d:f8:62:c4:ac:1d:a8:39:96:c3:
14:28:ca:40:88:2f:e8:da:05:97:26:ee:84:97:0c:
ef:47:d1:8b:ac:5d:23:11:5d:57:86:7d:4e:bc:57:
81:2c:4c:bd:6e:f2:3d:9e:ce:5b:82:2a:7b:30:83:
fe:e1:b1:80:55:ef:23:61:65:db:de:fe:95:66:f0:
2b:f1:29:d1:4b:6e:9f:78:21:48:06:92:dd:77:93:
1a:71:0e:89:3d:9e:aa:38:4e:d3:01:72:7a:05:5b:
87:16:bc:81:05:54:d3:49:c2:8c:d2:32:70:3e:f2:
7c:05:a6:30:28:c9:59:df:e9:79:ee:b6:1a:2f:be:
13:c8:42:43:88:bd:bc:fb:6f:19:44:e4:59:82:1e:
a8:e1:2b:1a:10:79:be:22:e7:6b:55:3b:17:25:30:
c5:4d:c2:f5:c8:ce:44:db:7f:b3:2c:9b:d6:b0:cf:
b7:63:f3:df:dd:9b:20:e4:c9:28:ad:3a:6b:b4:e4:
9a:53:1e:b4:83:41:19:fe:f5:d5:f5:ad:2f:60:cd:
b8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B1:B7:74:B2:7A:D2:A2:41:04:EF:4D:3B:69:A0:F4:48:CB:B3:DF
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/48A8C6C88CDF11EE94745178C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.110.109.0/24
Signature Algorithm: sha256WithRSAEncryption
76:81:a7:ab:fa:be:46:21:73:06:d4:29:3d:9a:1d:30:7c:13:
e7:20:cb:77:fe:07:97:1b:a5:11:43:88:e3:5d:86:15:48:7a:
eb:02:60:85:16:bd:78:50:c3:fa:be:d3:bd:b5:2e:55:28:be:
25:a4:4c:90:82:66:ea:7d:3f:d0:90:30:3c:d4:07:72:b5:d0:
b4:b2:bb:bc:97:1e:35:4d:97:97:d4:33:6e:a7:30:44:57:e8:
5f:24:27:d4:41:55:0f:2c:a2:38:24:db:b2:36:d1:9b:0c:3f:
d9:74:17:97:39:e2:5f:0a:75:ee:01:4a:23:13:37:4b:7b:d5:
ab:52:98:df:3b:1e:50:f3:e2:c5:27:97:61:04:28:f6:31:4c:
25:cc:9e:a2:2d:8e:7d:e1:6c:77:d0:c6:33:69:56:e0:56:34:
91:cc:19:af:5a:13:9c:70:2f:37:15:b1:19:94:da:c0:29:61:
8c:65:25:17:a4:43:ef:32:01:fa:cd:45:34:e6:d0:e8:bf:3c:
f3:6e:90:f1:90:ff:6a:71:3c:4e:b4:ed:64:81:e0:ef:ad:0b:
1f:bb:ef:21:7b:99:d3:19:4c:3f:96:db:1d:0e:67:3f:65:bb:
03:fd:d1:4a:29:8f:42:1c:1b:2e:4a:bf:00:b4:53:51:87:80:
6d:f7:0d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 29 13:56:21 2024 by rpki-client on console-ams.rpki-client.org