Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6DA4D380E5AB11EDBBCB0718C4F9AE02.roa
File: 6DA4D380E5AB11EDBBCB0718C4F9AE02.roa (raw, json)
Hash identifier: rNdLJ791oYYNe6St4dNDpSZ8dkAVeFZHkBRkLzy+a54=
Subject key identifier: B4:FD:87:46:84:D0:39:BA:A3:4E:74:16:CA:F9:4C:DC:FE:76:6F:DB
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0B53
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6DA4D380E5AB11EDBBCB0718C4F9AE02.roa
Signing time: Fri 28 Apr 2023 13:00:03 +0000
ROA not before: Fri 28 Apr 2023 13:00:03 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 136969
IP address blocks: 180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2899 (0xb53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 28 13:00:03 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=644bc352-d3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4a:a9:06:ae:4c:21:09:8c:03:db:c7:ae:b1:
65:57:f5:47:3f:c5:81:a5:d0:6d:24:d1:f9:eb:2a:
81:b0:70:4f:01:2c:fe:4f:8b:91:07:9b:37:3b:b0:
dc:b9:6b:9b:84:db:c8:9a:c6:93:29:52:d0:fd:8e:
55:05:ed:2b:e4:66:cc:e1:98:d3:9d:78:45:1b:70:
84:6e:b4:7d:dc:e6:2c:3d:88:3b:a1:4f:28:ed:69:
5e:00:3b:2d:b3:c3:75:e8:9b:63:a1:88:74:d5:1c:
60:43:10:c9:e8:41:12:2c:6f:c5:6e:29:8b:5c:e3:
f3:76:07:e4:67:c8:25:93:f2:2e:68:6b:ff:c3:33:
9c:55:d0:20:8b:9d:1d:74:4e:44:65:4f:95:ef:b0:
3f:8b:2c:e5:1b:65:6c:99:f9:18:6b:83:7e:04:85:
99:f4:58:5e:f6:de:38:cd:19:1b:c1:86:c2:b7:ec:
5b:9d:fd:77:df:cf:d9:f4:b6:23:59:d6:19:50:a1:
65:65:69:70:b1:74:b4:8b:0a:ce:60:9d:95:d1:43:
21:b6:d9:5f:cb:11:10:0d:27:5d:04:8a:63:54:86:
a5:1a:b1:a1:07:ab:19:b9:dc:40:b8:76:47:99:84:
e4:d0:34:64:5c:cb:20:09:47:17:31:f4:db:0b:7e:
ad:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FD:87:46:84:D0:39:BA:A3:4E:74:16:CA:F9:4C:DC:FE:76:6F:DB
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6DA4D380E5AB11EDBBCB0718C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.178.170.0/23
180.178.188.0/22
223.29.228.0/22
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b8:6b:36:95:e5:96:39:a5:2e:27:f6:e7:5f:d1:3c:81:73:
16:42:73:a8:ee:5d:5a:ab:4d:09:ac:06:5a:b7:67:41:1b:44:
73:3f:8f:e9:8a:97:af:62:99:2d:61:d7:75:2e:f8:2b:df:25:
d5:93:bf:b0:37:7a:a8:f0:c6:5b:80:a3:bc:1e:8d:80:69:be:
2b:73:53:4b:de:b0:7d:d9:ee:12:40:c2:1e:e5:45:7b:10:90:
4b:01:08:9c:95:cd:e4:06:ce:80:5e:7e:80:74:17:c1:01:44:
b4:76:b8:09:16:1d:33:cb:b2:ae:43:16:70:83:67:e2:6c:be:
52:f4:e9:c8:d9:f9:3a:ef:59:63:08:88:c6:bd:09:d2:7c:61:
49:7e:b1:5c:3e:93:59:bc:3b:6d:4f:a7:80:a2:25:df:5f:96:
94:ec:44:79:d7:bb:15:ee:84:82:09:f9:81:dc:3a:28:5d:09:
e5:a3:26:77:82:fe:b4:e5:51:6a:7a:41:79:e4:aa:da:b4:68:
63:63:ea:44:8a:62:bf:1e:fc:6d:bd:8e:0d:a5:f2:63:3b:61:
6d:ff:9a:15:48:d6:af:aa:41:77:9f:9a:d8:b2:c0:45:6b:4d:
2b:1b:30:e0:39:b7:48:b9:35:a5:94:dc:5e:5c:2b:05:e1:db:
48:9e:28:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org