Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/68BE54E8748D11EDB1EC923DC4F9AE02.roa
File: 68BE54E8748D11EDB1EC923DC4F9AE02.roa (raw, json)
Hash identifier: WzNRgCz9P5wk5k/MdjCMbp3BTIiR7D4d3Xp1kW8Apdk=
Subject key identifier: D9:23:11:72:A7:4D:1C:CE:0E:66:86:84:F3:26:70:CB:79:28:78:A8
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0A00
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/68BE54E8748D11EDB1EC923DC4F9AE02.roa
Signing time: Tue 06 Dec 2022 04:48:40 +0000
ROA not before: Tue 06 Dec 2022 04:48:40 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 115.167.108.0/22 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.126.0/24 maxlen: 24
115.167.127.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2560 (0xa00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 6 04:48:40 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=638ec9a8-7592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:84:a6:d8:18:c5:dd:5a:a7:4b:cd:52:5e:fa:
c2:ee:ac:bf:fe:a8:0a:ab:a1:51:07:15:d5:98:98:
e9:1c:82:9a:be:7e:58:7e:26:9e:1f:5d:54:a8:dc:
c2:74:dd:d3:19:bb:33:17:aa:48:2a:03:5c:f2:99:
f6:65:cb:1d:16:19:dc:f1:77:09:55:bc:33:50:7a:
6b:6b:54:18:54:94:fe:00:bf:93:38:0e:8a:a3:b4:
c7:58:5d:5b:35:63:62:40:0a:d6:dd:c5:d8:3b:17:
75:85:32:da:22:07:88:f6:e8:ee:9e:33:17:c6:78:
31:3c:21:4e:d2:1f:a6:ac:c9:ef:83:ba:b3:99:45:
46:2b:1a:e1:43:20:51:83:19:8b:5a:b4:a1:72:a2:
0a:de:13:2a:11:44:44:0e:78:ef:41:19:02:22:e1:
c6:a6:c9:94:da:9c:5f:eb:bc:15:b9:49:1e:91:cd:
b9:08:91:c5:c2:ab:c8:aa:93:f8:25:a9:59:bb:91:
79:58:c7:f5:ee:4e:f2:70:cf:ac:6e:11:62:55:12:
07:f6:f0:1b:70:95:c3:51:f0:a9:bb:a6:62:f8:91:
8f:d8:73:77:2c:53:4a:d5:f8:12:0f:80:56:76:01:
46:9d:13:8e:b2:5d:ba:d2:20:c7:ea:72:ef:3f:ff:
ce:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:23:11:72:A7:4D:1C:CE:0E:66:86:84:F3:26:70:CB:79:28:78:A8
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/68BE54E8748D11EDB1EC923DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.108.0/22
115.167.116.0/22
115.167.126.0/23
175.110.105.0/24
175.110.107.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:cd:ff:2d:d8:08:6d:ea:be:83:37:b7:54:51:5e:cc:58:4b:
f9:f4:7b:e8:50:26:6e:44:87:59:fa:6b:00:3b:c2:5a:5f:fe:
91:a4:9c:30:8e:78:d9:8e:7f:03:3f:52:e4:3f:f0:c8:b1:7e:
2d:e6:7a:2c:88:65:4a:18:3c:2d:ad:e7:30:45:25:ae:71:4f:
51:47:52:05:3c:bc:3f:13:b3:bb:19:e6:e4:5f:02:06:fb:d4:
9f:18:1c:5d:87:4d:34:a6:cd:14:0d:f8:2d:2b:cb:6f:94:bd:
c2:dc:23:4e:a5:e6:53:ca:90:1b:8a:12:2d:2e:6e:fd:fe:d6:
70:1c:ae:43:29:d6:10:59:1a:fb:ac:72:39:bf:aa:98:c7:d1:
c1:9e:56:5c:eb:e8:7c:1d:07:76:22:24:fb:f6:e5:bd:07:26:
c3:c8:7e:b8:f8:a1:8b:9d:d7:2a:1d:80:5c:5f:b4:85:11:78:
4d:ec:ca:92:50:de:64:a3:5f:69:3f:d8:7a:d7:d7:d5:ce:11:
97:f5:cc:d5:7f:54:18:09:db:b5:d8:86:05:26:2c:68:bc:99:
3e:84:29:ea:80:82:2f:d6:2c:df:86:c2:0b:4f:13:df:bb:73:
09:a6:9f:15:81:bd:85:b7:55:13:72:49:93:3f:b0:49:a7:64:
8d:33:7b:1b
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICCgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjIxMjA2MDQ0ODQwWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzhlYzlhOC03NTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvoSm2BjF3VqnS81SXvrC7qy//qgKq6FRBxXVmJjpHIKavn5YfiaeH11UqNzC
dN3TGbszF6pIKgNc8pn2ZcsdFhnc8XcJVbwzUHpra1QYVJT+AL+TOA6Ko7THWF1b
NWNiQArW3cXYOxd1hTLaIgeI9ujunjMXxngxPCFO0h+mrMnvg7qzmUVGKxrhQyBR
gxmLWrShcqIK3hMqEUREDnjvQRkCIuHGpsmU2pxf67wVuUkekc25CJHFwqvIqpP4
JalZu5F5WMf17k7ycM+sbhFiVRIH9vAbcJXDUfCpu6Zi+JGP2HN3LFNK1fgSD4BW
dgFGnROOsl260iDH6nLvP//OewIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNkjEXKn
TRzODmaGhPMmcMt5KHioMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNjhCRTU0RTg3
NDhEMTFFREIxRUM5MjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E
KDAmMCQEAgABMB4DBAJzp2wDBAJzp3QDBAFzp34DBACvbmkDBACvbmswDQYJKoZI
hvcNAQELBQADggEBAJ/N/y3YCG3qvoM3t1RRXsxYS/n0e+hQJm5Eh1n6awA7wlpf
/pGknDCOeNmOfwM/UuQ/8Mixfi3meiyIZUoYPC2t5zBFJa5xT1FHUgU8vD8Ts7sZ
5uRfAgb71J8YHF2HTTSmzRQN+C0ry2+UvcLcI06l5lPKkBuKEi0ubv3+1nAcrkMp
1hBZGvuscjm/qpjH0cGeVlzr6HwdB3YiJPv25b0HJsPIfrj4oYud1yodgFxftIUR
eE3sypJQ3mSjX2k/2HrX19XOEZf1zNV/VBgJ27XYhgUmLGi8mT6EKeqAgi/WLN+G
wgtPE9+7cwmmnxWBvYW3VRNySZM/sEmnZI0zexs=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org