Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/665EFE0C5B3B11ED83F01445C4F9AE02.roa
File: 665EFE0C5B3B11ED83F01445C4F9AE02.roa (raw, json)
Hash identifier: il5Y4SrscxLMBMcLHdSFNx/mea595COVpxKyI34TLxQ=
Subject key identifier: E8:BC:8F:BF:4E:BF:C0:83:7F:28:D4:3F:1D:A4:3D:CC:BE:92:A6:18
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 09A2
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/665EFE0C5B3B11ED83F01445C4F9AE02.roa
Signing time: Thu 03 Nov 2022 06:09:04 +0000
ROA not before: Thu 03 Nov 2022 06:09:04 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 115.167.24.0/22 maxlen: 24
115.167.28.0/22 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.124.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2466 (0x9a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 3 06:09:04 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63635aff-c68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9f:9f:80:6d:e1:69:4d:be:38:a7:20:61:d1:
27:75:5e:d4:0b:ed:8c:94:3d:90:e1:e3:b9:58:8d:
a4:c8:2e:96:2f:8f:63:48:d1:93:0e:68:9d:6e:dc:
1f:1e:91:c5:27:f1:66:2a:28:5f:ef:24:7d:e6:f3:
95:f3:e5:69:bc:97:a0:b0:33:8f:0b:32:43:c8:6f:
38:f1:f3:08:40:9e:f3:ef:63:4f:36:71:e6:e2:3f:
fd:17:9d:d4:44:67:16:47:5b:71:5c:57:58:5c:35:
04:25:f6:6d:03:23:a0:5a:c7:6a:2f:67:15:24:9f:
8c:53:93:8c:6f:83:ce:e4:e2:1d:12:9b:92:91:fe:
b7:cd:cc:13:ac:b0:e8:66:14:35:05:74:c3:a9:ff:
e2:c2:44:7d:a2:14:2e:e1:66:8c:8e:93:a5:5c:29:
85:65:2d:2f:f0:dc:44:45:1b:e4:58:a4:cb:36:fe:
4c:c4:64:95:95:8f:86:36:83:8c:6a:97:fa:9d:89:
b8:09:4d:2a:0c:20:72:27:24:7b:08:16:e3:b3:2f:
17:c5:c2:39:82:df:e4:d2:2e:9e:32:63:c1:96:36:
b8:28:bf:40:26:f6:50:62:dd:ab:dd:09:39:27:fe:
45:1a:03:5b:c6:20:97:78:4d:e3:a4:ca:af:8e:29:
2e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BC:8F:BF:4E:BF:C0:83:7F:28:D4:3F:1D:A4:3D:CC:BE:92:A6:18
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/665EFE0C5B3B11ED83F01445C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.24.0/21
115.167.116.0/22
115.167.124.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:52:23:00:88:1e:59:1d:0e:0a:61:b7:e1:42:26:71:08:54:
64:52:ba:cc:7b:2a:aa:bd:74:ad:93:5b:9d:87:ae:ca:81:e0:
9d:54:2f:7e:72:72:86:7d:8e:09:75:9a:36:f8:04:78:08:f7:
64:ac:f0:03:c6:29:6a:75:ba:a4:ef:1c:0f:ab:42:0c:9a:6d:
d3:06:e4:e2:d6:c7:3d:10:20:31:85:50:aa:4e:66:5d:34:5a:
ec:43:22:b0:ac:37:35:15:d8:dd:28:19:8a:af:3a:f9:ce:79:
0c:82:fe:81:fd:1f:77:d2:10:5c:a1:23:9f:b6:b3:2b:7a:42:
3d:4a:7a:37:72:89:5b:93:43:93:9c:36:47:21:2e:d4:a1:14:
1b:8f:ce:d0:6b:2c:c5:8e:b3:e9:c2:98:b0:63:ce:0f:50:01:
22:28:bb:27:bd:e9:a4:07:42:d1:31:47:20:84:81:9a:2e:49:
36:39:49:f6:d3:66:44:93:7d:dd:a8:01:0c:2e:77:39:0f:6d:
78:97:8b:61:cd:06:b1:94:ec:3d:a0:58:fe:6c:f5:90:87:cc:
49:6a:d5:19:85:07:ac:7c:45:79:8e:1a:ce:e4:96:2a:3c:9f:
2d:c3:a0:e7:35:dd:cb:fc:7e:4e:30:b9:9b:2f:3a:3b:29:f0:
5b:d0:13:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org