Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5390E71EE87B11EC8756794EC4F9AE02.roa
File: 5390E71EE87B11EC8756794EC4F9AE02.roa (raw, json)
Hash identifier: u3asLLtvB2bwYebMkdFYJhEuZWlgzoRA5rFBW5kWKD4=
Subject key identifier: E5:D1:B5:7B:10:78:63:9C:A1:94:8A:09:E3:70:E7:A3:3C:D6:2A:F5
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 07BB
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5390E71EE87B11EC8756794EC4F9AE02.roa
Signing time: Fri 10 Jun 2022 05:08:12 +0000
ROA not before: Fri 10 Jun 2022 05:08:12 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 115.167.16.0/22 maxlen: 24
175.110.76.0/22 maxlen: 22
175.110.92.0/22 maxlen: 22
175.110.100.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1979 (0x7bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jun 10 05:08:12 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62a2d1bc-d400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7e:e9:11:5c:9c:a1:87:f7:0f:29:ae:d4:82:
85:9b:c3:ef:e0:88:8f:b5:b9:79:62:10:3c:a6:6a:
6a:31:b5:8b:22:bd:60:bf:2d:ea:af:95:b6:78:ab:
cf:26:53:f8:da:be:9a:3d:e3:23:37:18:af:31:d0:
28:95:2e:5e:81:c3:99:ef:54:80:01:8c:63:59:66:
25:c0:c0:c0:18:b7:0e:e9:7b:a0:30:33:33:1d:a5:
ec:29:f9:a6:cd:8b:1b:70:88:44:6b:07:68:09:ac:
80:ef:e4:9b:d3:66:34:d9:c3:f7:35:d6:fc:07:87:
32:c0:25:11:78:57:8c:1b:38:b5:b2:40:64:27:a4:
38:cd:7c:0b:9a:5d:8c:3f:40:0c:a3:f5:c4:29:19:
7e:f9:b4:5f:58:9d:91:26:ae:ba:3c:c6:86:e9:d7:
d2:24:20:99:fc:c8:1f:7e:25:dd:37:a0:bf:a5:b1:
e9:13:68:5b:c0:83:91:70:f4:d4:1d:f6:db:bc:d0:
db:33:d5:f4:1f:15:a8:bd:9c:60:ad:f0:52:35:28:
39:fe:3c:af:9c:61:73:18:74:0e:c7:0a:e0:52:30:
53:a9:39:4e:07:f2:ea:29:a2:17:f1:03:77:d8:7a:
ee:e2:e3:34:8a:07:a2:5c:8b:ce:a3:0e:9d:07:64:
6a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D1:B5:7B:10:78:63:9C:A1:94:8A:09:E3:70:E7:A3:3C:D6:2A:F5
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5390E71EE87B11EC8756794EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.16.0/22
175.110.76.0/22
175.110.92.0/22
175.110.100.0/22
Signature Algorithm: sha256WithRSAEncryption
73:bb:29:86:65:de:fc:2f:4e:ad:ce:2e:a9:b4:19:70:e2:37:
43:86:5f:cd:e0:58:71:51:96:c8:cd:3e:45:ad:b4:69:70:91:
19:cf:a4:c9:ca:36:df:a8:79:6f:58:7e:79:1d:19:28:e5:2d:
41:3b:f1:2f:17:fb:fc:13:84:cc:15:6c:6d:5c:05:e3:11:d5:
68:fa:74:04:2e:0b:e2:65:33:ae:c5:8a:98:34:7c:40:ff:9f:
10:e3:1b:97:12:36:54:ac:a7:8d:d1:1c:4b:e0:8c:04:c9:10:
5d:d5:fd:8d:56:53:f7:a9:7c:7c:86:1c:cb:59:a4:80:c1:18:
9a:a1:41:56:95:8f:55:96:75:08:db:d1:ef:92:a2:fd:c6:e5:
1a:03:69:e5:d6:5f:88:ed:d3:c5:d0:cc:d1:6e:d1:d7:80:9b:
7d:97:48:04:91:5e:64:6a:f7:5a:87:34:a6:4d:0e:ad:d6:81:
0a:b7:57:3b:73:36:6c:ec:82:9d:36:38:38:2d:71:d3:5c:41:
91:7f:b7:cd:27:20:4e:10:a4:bf:54:8a:80:44:0a:84:52:82:
ec:3f:09:c5:5d:5f:3b:e0:4a:09:63:be:3b:22:8d:9a:39:05:
2e:d0:2c:10:f6:d8:1d:b2:84:5e:1e:f4:d9:27:86:e2:d7:b9:
1d:29:80:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org