Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/549B13D2E87B11EC8756794EC4F9AE02.roa
File: 549B13D2E87B11EC8756794EC4F9AE02.roa (raw, json)
Hash identifier: c9+7NTPPM5a7lBYEaW2JT4+T8C+M7amN+XLVLapWWbk=
Subject key identifier: 3D:C0:FA:6A:C3:ED:C1:9F:99:CB:22:12:58:35:8E:B4:8A:99:3A:B7
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 07CB
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/549B13D2E87B11EC8756794EC4F9AE02.roa
Signing time: Mon 13 Jun 2022 11:37:29 +0000
ROA not before: Mon 13 Jun 2022 11:37:29 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.0.0/24 maxlen: 24
115.167.1.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.60.0/22 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.100.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
175.110.68.0/22 maxlen: 24
175.110.72.0/22 maxlen: 24
175.110.80.0/21 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.107.2/32 maxlen: 32
175.110.107.14/32 maxlen: 32
175.110.107.114/32 maxlen: 32
175.110.108.0/22 maxlen: 23
175.110.108.0/23 maxlen: 24
175.110.110.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1995 (0x7cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jun 13 11:37:29 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62a72178-44de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:09:20:bd:ef:93:78:8d:ba:61:8c:cb:4b:
20:52:e8:64:35:f5:19:5d:0a:61:5c:5e:75:b4:ba:
02:df:8d:7d:d2:1d:9a:6d:e7:10:f1:3e:03:02:a3:
79:36:61:eb:ac:5d:93:76:94:48:6b:7c:61:35:1f:
85:e7:74:69:27:dc:3d:c7:13:b9:b6:f9:6d:cb:5b:
11:c1:cd:03:76:13:12:61:a9:4d:4a:e5:d7:d9:ec:
e3:bf:96:0e:5a:7a:44:44:4a:03:85:c3:45:a4:9b:
5f:ef:8b:7c:f4:1d:63:cc:de:f4:36:65:ca:ed:44:
43:34:fa:25:02:04:52:07:a3:67:f0:c5:55:d6:a5:
25:f0:6e:4e:f9:2a:8c:f8:cf:6e:c4:8b:4c:94:5f:
6c:3c:8e:b6:28:d4:7c:64:54:59:1c:81:ec:19:a4:
8d:7b:b6:e6:d6:67:7d:81:80:92:a5:ed:a5:ed:15:
85:9a:fe:94:b2:c4:9f:47:9d:6d:ad:e6:ec:03:89:
24:6d:8c:3a:96:58:65:23:65:b1:b2:bb:cc:cf:d8:
85:c2:95:2f:0f:4c:66:c5:61:a0:3e:4d:50:a2:81:
aa:4f:9c:2f:08:3a:46:91:d8:f5:4c:41:53:5f:1c:
8d:94:0b:d8:9f:5d:75:f5:0b:8d:38:d3:2b:e9:1e:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C0:FA:6A:C3:ED:C1:9F:99:CB:22:12:58:35:8E:B4:8A:99:3A:B7
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/549B13D2E87B11EC8756794EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.0.0-115.167.6.255
115.167.20.0/22
115.167.49.0/24
115.167.56.0/21
115.167.72.0/22
115.167.100.0/22
115.167.120.0/22
175.110.68.0-175.110.75.255
175.110.80.0-175.110.91.255
175.110.96.0/23
175.110.104.0/24
175.110.107.2/32
175.110.107.14/32
175.110.107.114/32
175.110.108.0/22
202.92.16.0-202.92.21.255
202.92.23.0-202.92.31.255
Signature Algorithm: sha256WithRSAEncryption
c2:57:15:b3:6e:6b:23:dc:99:67:78:01:2c:e5:0b:15:b5:53:
0d:d1:1c:01:a4:2e:cb:01:90:24:5a:68:a3:3e:6e:0d:78:a9:
b8:03:cb:be:46:5f:dc:bc:06:04:70:07:21:64:3d:3c:e3:9a:
dc:95:b7:6b:1f:77:d4:4f:7e:78:88:c9:46:64:8d:a3:31:e8:
a8:ce:d8:22:81:f1:c0:a2:1d:bd:6e:24:7b:30:28:c4:d1:8a:
30:3d:4d:a8:6b:04:13:bc:77:7b:bf:cb:ea:f1:4d:0f:6b:58:
8f:d0:38:3e:e7:e1:86:41:8d:bd:19:46:c5:e3:7e:bf:a2:d9:
c5:86:b2:27:23:52:0e:69:04:00:bf:13:e4:80:35:83:bf:86:
f8:5a:45:56:99:40:a2:38:b2:a5:08:86:a8:b4:db:ba:5f:39:
3b:b6:1b:3a:59:80:4e:30:bd:28:5a:d2:d4:d0:7d:db:46:72:
7e:36:b0:5b:f9:8e:55:b6:c0:7d:06:b7:ab:6f:7a:d2:20:17:
62:54:e3:78:99:2f:5d:fe:e8:c0:e8:aa:e0:a9:2f:05:3a:33:
7f:9c:b5:a4:17:51:08:a6:53:41:ed:98:d8:a3:ee:2a:e5:3e:
39:23:ae:20:ed:43:36:3f:80:93:3b:45:54:64:0d:bc:39:62:
91:00:b8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org