Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4F2D9E4EDCDA11EC97E4BC48C4F9AE02.roa
File: 4F2D9E4EDCDA11EC97E4BC48C4F9AE02.roa (raw, json)
Hash identifier: yxdKhlI9g/Fz/ioYCFM5nzAKwzUhMOk8AySza0FMaCk=
Subject key identifier: 98:AF:2E:48:1F:39:57:E2:CC:BE:84:D2:3E:22:80:ED:D7:F9:51:C4
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0931
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4F2D9E4EDCDA11EC97E4BC48C4F9AE02.roa
Signing time: Tue 20 Sep 2022 08:39:31 +0000
ROA not before: Tue 20 Sep 2022 08:39:31 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 13768
IP address blocks: 115.167.12.0/22 maxlen: 24
115.167.52.0/22 maxlen: 24
115.167.77.0/24 maxlen: 24
175.110.80.0/22 maxlen: 24
175.110.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2353 (0x931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 20 08:39:31 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63297c42-8dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:4c:24:c6:a1:c8:69:82:34:59:23:6f:86:
cc:4d:6a:cd:07:81:48:df:72:84:36:3d:4c:38:27:
a4:72:1d:d8:a6:d4:30:19:a7:5c:71:53:9a:90:e4:
38:c7:c0:28:f6:be:0f:05:5b:0f:2d:a2:1e:44:6b:
04:42:d7:ab:e7:a1:34:63:70:d1:46:85:5d:9e:2c:
9d:c6:40:64:60:1d:d7:54:cb:d5:bd:b3:ab:5c:fc:
e6:1b:a1:63:31:41:94:1b:a3:8b:7c:71:6c:63:10:
15:c5:83:c3:23:41:48:b3:6f:61:5b:df:7b:6e:d4:
09:81:a3:eb:60:7a:fe:37:26:16:c7:4b:c3:7d:ed:
9c:96:73:d7:46:9a:f7:42:22:66:0b:18:9c:74:54:
b5:7a:bc:44:db:2b:7b:90:38:b9:c6:c8:b8:b0:dd:
a4:d8:db:ae:f6:af:60:67:5e:42:14:56:fd:03:b4:
d8:8c:92:4c:93:3f:e1:ea:e7:7b:fc:c3:3d:f4:de:
99:55:4d:7b:d7:7a:68:06:8c:b4:e0:f8:5b:f7:6a:
7d:f0:22:15:95:cf:04:40:35:ec:73:dd:4c:40:7c:
7a:5a:e2:12:2c:13:77:71:03:ea:3f:a2:29:4c:e8:
01:e9:87:d5:f8:9f:7e:a2:10:5c:fa:87:9f:84:e0:
65:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AF:2E:48:1F:39:57:E2:CC:BE:84:D2:3E:22:80:ED:D7:F9:51:C4
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4F2D9E4EDCDA11EC97E4BC48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.12.0/22
115.167.52.0/22
115.167.77.0/24
175.110.80.0/22
175.110.111.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:c2:57:50:6a:54:84:fa:0f:4b:0b:7d:c9:56:e6:ac:2d:e8:
76:5c:64:8d:4b:b6:b8:48:ea:fd:03:d6:45:f0:fc:e0:8c:11:
d7:93:b9:c3:82:f1:4e:9a:9c:53:38:40:41:54:d1:ba:2e:20:
7c:1c:16:94:af:23:e4:ea:76:4e:6c:3d:3f:55:25:f3:49:58:
0f:27:2d:a0:ed:f9:00:79:b6:be:2b:83:75:37:4b:a0:ef:75:
23:ce:7e:10:b4:30:65:3e:92:62:52:be:bd:8a:76:8b:d8:f5:
e6:ae:61:8e:1b:42:1f:d5:98:73:36:f1:a8:e2:7f:54:33:ba:
6f:0d:33:31:15:a1:79:b9:12:34:e2:f3:e1:d4:70:81:8f:9b:
50:2e:fb:83:d1:41:0d:a7:44:00:9c:95:2b:c2:b9:cb:b1:0b:
45:30:5e:ef:5d:6d:5b:c7:25:d9:d4:c4:a1:f6:23:68:2d:5c:
3a:4c:68:76:a3:0a:5f:d0:6b:7a:1f:dc:31:69:94:c1:45:13:
7c:aa:0b:35:cf:68:93:75:6f:15:a1:bf:eb:d8:88:29:99:e9:
ed:84:56:1d:08:d2:c7:8a:b7:1f:48:3a:13:56:da:0b:b3:8b:
4f:f9:21:09:1c:e0:42:aa:52:6a:b6:f4:7e:9f:32:23:e4:6a:
54:2b:d4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org