Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6A2FC186013B11EFBC2D3345C4F9AE02.roa
File: 6A2FC186013B11EFBC2D3345C4F9AE02.roa (raw, json)
Hash identifier: 1lheJLz3biDycgNe1siqiWZ2XHXcsYYaYpHDhbSbwlg=
Subject key identifier: 7E:97:ED:70:D1:BD:8F:EE:5D:90:51:89:B1:8B:0F:90:A3:49:38:B1
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1093
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6A2FC186013B11EFBC2D3345C4F9AE02.roa
Signing time: Tue 23 Apr 2024 06:33:37 +0000
ROA not before: Tue 23 Apr 2024 06:33:37 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 136030
IP address blocks: 103.151.26.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.65.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 11:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4243 (0x1093)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 23 06:33:37 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=66275641-31eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:dd:a4:a9:50:89:3d:ed:3c:97:bf:56:12:
67:43:9b:aa:45:a0:1e:93:84:64:01:e2:03:a2:85:
4d:41:3d:96:6e:d6:4b:e0:4f:c6:b8:cd:91:35:c6:
77:8c:57:7c:aa:22:3a:e9:f4:bb:bd:b1:fb:e9:66:
35:90:fe:e2:a3:3e:96:31:07:97:13:6b:f3:7f:63:
99:e6:fc:f9:22:3f:f2:b8:7c:2e:ec:97:90:a4:8a:
af:9f:76:3b:66:fa:1e:d6:9a:82:b5:56:5d:60:1d:
dc:df:4f:34:c2:ad:8e:59:6c:fb:4e:5d:74:09:13:
a8:1b:4d:13:0e:97:b8:4c:df:78:e4:90:95:77:ba:
02:a8:ff:95:c3:06:00:05:b6:6b:fa:3a:ac:c6:d6:
19:bb:58:9f:f2:b4:5b:08:27:68:f9:c0:d8:5c:1d:
af:ab:f4:c6:cc:58:22:e7:1b:84:59:bd:87:09:5b:
99:52:0b:48:1c:20:7c:51:d2:9a:c0:d9:1b:93:bf:
55:75:60:6e:01:2d:0e:73:1c:bd:32:5a:f6:92:5c:
77:0b:f4:23:5e:c1:0b:b3:a8:98:db:11:4e:09:f3:
6f:db:33:10:4b:48:ac:0a:a6:ac:e2:3d:b0:9d:3f:
da:07:7d:ad:f6:10:47:d8:6a:26:a4:fe:c7:b9:70:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:97:ED:70:D1:BD:8F:EE:5D:90:51:89:B1:8B:0F:90:A3:49:38:B1
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6A2FC186013B11EFBC2D3345C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.26.0/24
115.167.50.0/24
115.167.64.0-115.167.66.255
115.167.76.0/24
115.167.124.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:29:6c:07:3c:6d:26:46:8b:76:40:be:60:9b:66:73:13:4f:
67:14:57:fd:8c:94:55:c4:53:42:b6:c5:24:aa:21:e9:f5:89:
96:7c:29:b7:01:62:74:49:5e:33:af:9c:88:f4:b3:9f:ac:a8:
61:48:8d:06:f4:87:14:58:4b:ac:9b:fc:b7:f1:b3:19:9e:f5:
8b:9b:40:33:96:17:06:e7:e7:58:4f:cc:55:1d:a0:ed:64:c3:
63:83:f0:4e:fa:40:ac:f4:98:44:77:81:8d:54:06:75:bf:c3:
37:aa:4d:a9:46:43:cd:9b:c5:4b:9a:ea:bc:f9:3c:57:9d:e8:
ea:c3:89:01:a7:dd:9e:ed:a8:c5:89:7f:3c:3c:53:94:d9:de:
8a:ba:0b:c9:90:a8:86:cd:aa:35:a4:9c:d6:dc:6c:69:43:94:
5d:14:01:58:d6:53:a3:86:09:c7:e4:06:5d:45:a2:c1:fe:d9:
04:6e:c4:97:b6:80:62:e5:84:0e:5d:c9:25:97:2b:a9:c4:d1:
b0:4d:73:69:e0:ca:79:4e:06:bc:d1:de:d8:da:6e:18:6f:04:
b6:1f:4f:2b:af:c9:4b:b7:28:b3:ff:07:a0:96:97:d3:1c:ed:
9c:ce:ed:fb:a8:85:e5:ec:1c:73:19:79:75:73:40:ff:95:29:
81:df:3c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 14:49:14 2024 by rpki-client on console-ams.rpki-client.org