Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/56081C3AADFD11EEB62D754DC4F9AE02.roa
File: 56081C3AADFD11EEB62D754DC4F9AE02.roa (raw, json)
Hash identifier: abKWTdRbNDitoHuAGPB8mwdK6DtR6aTADE7cUrvupwE=
Subject key identifier: 63:56:85:58:6E:28:8E:80:47:AB:F2:F4:3D:2D:95:C2:CA:68:73:E1
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0F37
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/56081C3AADFD11EEB62D754DC4F9AE02.roa
Signing time: Mon 08 Jan 2024 08:13:11 +0000
ROA not before: Mon 08 Jan 2024 08:13:11 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 115.167.56.0/22 maxlen: 24
175.110.76.0/22 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 08:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3895 (0xf37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 8 08:13:11 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=659bae97-44a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:d0:e5:64:8a:09:d6:79:13:1a:14:d2:72:
a3:e9:72:7a:4c:3a:77:36:49:ff:3c:6d:8d:31:e3:
6b:07:89:60:b7:9d:1f:33:d5:b8:ce:54:41:90:03:
76:16:d5:6d:4b:a1:a5:06:30:de:67:1e:c1:01:9f:
0b:d8:f6:22:c8:98:01:2e:41:1a:34:09:f5:b2:c8:
da:42:2c:33:8c:fe:40:4a:16:34:99:ec:b8:6f:46:
8d:6a:28:13:12:54:86:86:e7:42:7b:38:ac:a6:e4:
7d:44:34:27:cd:8b:76:7b:6f:00:2b:0c:46:72:c4:
ea:d8:9e:46:b1:4e:4c:4f:e6:34:f8:ad:f5:ca:4f:
cf:4f:5a:e0:c0:70:4d:24:18:55:97:86:a7:de:ee:
de:47:c4:c2:44:83:21:e6:25:4b:fc:ab:b4:02:36:
74:b9:92:67:bb:a4:29:14:49:73:16:36:8d:7d:ce:
9f:95:83:87:21:82:a3:34:dc:6a:e9:20:5b:33:f6:
17:36:c5:3d:c5:4f:05:cc:3f:d0:78:22:85:96:02:
5b:aa:0d:f6:3f:a3:d7:6d:5f:bd:d7:0b:3a:b9:cf:
3b:d7:ee:b2:46:24:bd:7c:9e:cf:b3:82:cf:61:a6:
94:53:f6:29:57:6d:7d:5d:f1:f6:95:cf:7f:32:93:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:56:85:58:6E:28:8E:80:47:AB:F2:F4:3D:2D:95:C2:CA:68:73:E1
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/56081C3AADFD11EEB62D754DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.56.0/22
175.110.76.0/22
175.110.104.0/24
175.110.107.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:76:90:47:02:a1:50:b9:08:3f:a7:97:52:21:3f:82:4b:a6:
b8:6b:78:42:8e:05:72:0b:53:83:1f:34:b2:22:27:b3:7d:08:
03:08:e5:57:df:e7:d8:80:e6:87:e7:b9:16:ba:44:c9:14:45:
2c:73:c5:47:c2:ec:29:0c:40:a4:00:43:d2:10:1f:7a:ce:f7:
58:8f:db:5a:73:47:93:f9:d2:c8:18:d2:e6:22:17:3a:46:bd:
08:7b:66:d3:7d:e4:1b:f7:53:ae:65:2a:31:a1:bb:f1:f1:a1:
81:f1:23:db:3e:64:29:17:81:6e:e1:ed:ff:59:2b:7c:e8:f3:
31:df:12:0a:84:16:22:1a:b2:7e:13:19:c4:5f:ae:4b:4b:e9:
31:85:2c:6e:14:2f:68:75:3a:bb:d3:7f:fc:23:a3:0d:97:df:
23:1e:6c:98:38:28:50:94:96:83:af:37:ff:20:c1:88:00:f6:
d8:93:e8:01:56:0f:6e:9b:9d:b8:d0:5c:9c:c8:8f:4d:a2:f6:
8e:8e:62:77:33:d2:9c:e5:3b:91:0e:01:2c:42:6b:64:59:80:
58:23:ea:b9:bc:62:fa:5b:36:b7:ed:90:e3:e6:1d:cc:09:f8:
e0:26:d2:b1:e1:c6:9f:26:03:cd:9f:56:10:c5:d9:13:95:ff:
80:0f:6b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 12:11:59 2024 by rpki-client on console-ams.rpki-client.org