Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/55F71252A87511EDA1C1D659C4F9AE02.roa
File: 55F71252A87511EDA1C1D659C4F9AE02.roa (raw, json)
Hash identifier: LnMOU7FsLt4Bl9Lj3liCj61nnpg58J1Y3IIHudk2C/M=
Subject key identifier: F0:A8:58:92:D4:D2:73:C5:B0:D2:9D:B8:AF:20:87:0D:1A:49:D5:A1
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0AA6
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/55F71252A87511EDA1C1D659C4F9AE02.roa
Signing time: Mon 06 Mar 2023 12:10:31 +0000
ROA not before: Mon 06 Mar 2023 12:10:31 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.1.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.78.0/24 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
2400:9560:1::/48 maxlen: 48
2400:9560:5::/48 maxlen: 48
2400:9560:9::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2726 (0xaa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Mar 6 12:10:31 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6405d837-5da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:e5:07:63:95:85:d1:66:b2:e5:a1:1b:b8:
9d:a8:ae:48:39:61:f2:be:3e:3a:01:7e:43:99:f7:
7d:03:50:5e:e2:27:1e:96:de:b8:e5:aa:fa:f8:cb:
2f:7c:fa:48:01:1f:9a:fe:ee:7b:76:eb:02:4f:4b:
e7:4d:b4:f0:59:a7:f4:60:2b:b5:61:bc:40:d2:e3:
84:4c:c8:fb:93:b9:d0:fa:b7:c7:ad:8b:a7:51:16:
7f:99:f4:1f:52:79:4a:fb:94:cc:fb:ae:2d:aa:e5:
35:fe:43:45:29:7e:54:20:1a:85:1a:93:88:93:5c:
8f:eb:7b:b9:48:da:52:06:0a:56:bc:59:8a:20:55:
d6:ad:88:70:6c:3b:67:88:a1:40:f7:0b:94:6a:54:
ae:9d:3b:6a:31:0e:68:05:f5:c9:6f:ca:74:3d:7c:
8b:cf:9e:12:07:8f:cd:cc:d9:c7:85:37:21:59:c9:
7b:25:db:93:ac:fc:16:b5:6f:d0:45:79:49:83:c0:
ba:73:27:34:cc:dd:56:91:29:0d:69:ec:d2:35:3f:
b1:ea:19:ca:eb:a6:90:c4:a0:da:7b:ff:e9:17:63:
26:34:41:c0:63:5e:1c:43:33:89:28:e1:2f:8d:b9:
90:26:07:2a:62:a4:1d:f6:81:6b:0c:f0:8e:14:3b:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A8:58:92:D4:D2:73:C5:B0:D2:9D:B8:AF:20:87:0D:1A:49:D5:A1
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/55F71252A87511EDA1C1D659C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.1.0-115.167.2.255
115.167.72.0/22
115.167.78.0/24
175.110.96.0/24
175.110.104.0/22
175.110.111.0/24
202.92.16.0/23
202.92.19.0-202.92.20.255
202.92.23.0-202.92.31.255
IPv6:
2400:9560:1::/48
2400:9560:5::/48
2400:9560:9::/48
Signature Algorithm: sha256WithRSAEncryption
38:85:75:ae:a0:ab:34:83:44:4f:53:73:e8:12:92:e5:1e:c7:
af:af:c0:2b:9c:65:b9:b2:b1:fb:8e:dc:69:37:0f:74:c5:45:
72:6f:65:21:1e:33:87:44:8b:ac:74:e2:5a:d2:75:ca:69:23:
11:31:e8:8e:75:eb:6c:5f:22:48:72:1c:2e:72:b9:bf:f8:c2:
53:1f:7d:64:e9:ce:b3:7f:2e:6c:14:23:ad:2d:e9:78:9a:b2:
82:f9:a3:fc:29:98:9b:e2:85:03:5e:b9:fe:c0:27:07:47:30:
e4:40:cf:3e:fd:7a:b6:e7:ef:e8:77:ca:78:5f:f2:98:35:69:
09:2b:af:55:a0:a4:96:93:07:eb:8e:48:0f:55:d8:4c:8f:5f:
e3:b4:15:cf:ca:e9:9c:70:97:6f:bc:e2:4c:4f:9c:bb:69:bd:
7c:db:95:79:67:a4:db:67:3a:1f:6c:5e:73:dd:ad:d0:ec:ca:
4a:e8:33:84:0f:e6:25:df:f9:52:85:d1:e8:4d:d1:00:87:50:
1e:19:89:89:28:25:53:12:59:06:d8:a0:e3:be:57:c9:19:b4:
26:15:3a:b6:8c:86:f9:ec:3c:69:44:ec:f8:6a:e7:ad:5f:06:
ac:e9:1f:a7:48:13:bd:7d:a0:55:80:37:06:d5:c3:f6:d3:3e:
a5:d6:33:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org