Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/75A609F25F5811ED86EB0D40C4F9AE02.roa
File: 75A609F25F5811ED86EB0D40C4F9AE02.roa (raw, json)
Hash identifier: WyQCnzjXYn1sa8EjggptCh9xVOAeaYQLyfjF69d0hUY=
Subject key identifier: 27:14:9C:E5:EA:9D:B5:B1:7E:0F:83:68:1F:09:8A:D9:25:75:AE:42
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 09B4
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/75A609F25F5811ED86EB0D40C4F9AE02.roa
Signing time: Tue 08 Nov 2022 11:28:26 +0000
ROA not before: Tue 08 Nov 2022 11:28:26 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 115.167.116.0/22 maxlen: 24
115.167.124.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2484 (0x9b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 8 11:28:26 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=636a3d59-f3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:8a:da:fa:82:79:ad:83:b2:f9:d6:39:65:
00:c1:22:08:9f:dc:87:75:1d:b2:c1:7d:7f:ba:39:
55:86:94:4d:c4:d2:72:0d:cb:97:2c:7a:01:6a:74:
0a:07:34:70:85:e3:8b:1d:98:fb:63:f8:d3:74:30:
82:5f:f3:2c:6d:58:82:44:a5:83:b4:35:e2:40:ee:
41:be:22:5a:3b:43:6e:67:53:8a:51:ae:76:d0:97:
ae:75:a7:6b:94:ef:c3:14:92:06:6e:9e:7f:89:b0:
a4:f2:6e:25:07:5c:92:9a:3f:f4:4b:43:98:a7:33:
08:e0:29:19:bd:45:19:fd:0a:2e:59:cf:4f:6b:00:
26:9d:35:c6:f3:e5:99:f4:fa:b1:d9:ea:7a:ea:7f:
56:16:6a:41:a4:c8:d1:b4:71:06:ee:c9:a6:27:36:
d9:42:8a:37:cf:0e:ea:61:94:90:c5:ad:c5:c1:b0:
dd:a4:c0:38:24:21:ea:b7:97:7a:d9:1a:af:39:9b:
3c:db:95:6f:58:7c:56:2c:3d:2b:b2:b5:30:38:da:
bc:21:d9:e6:57:55:98:e2:0e:ab:fc:1e:fd:33:48:
70:ae:60:da:eb:8e:ca:70:a0:0f:06:ff:99:41:d1:
46:b9:1c:d3:42:55:08:10:2b:7d:c0:dc:7a:9e:b5:
d0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:14:9C:E5:EA:9D:B5:B1:7E:0F:83:68:1F:09:8A:D9:25:75:AE:42
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/75A609F25F5811ED86EB0D40C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.116.0/22
115.167.124.0/22
Signature Algorithm: sha256WithRSAEncryption
98:12:8b:48:e3:cd:1a:d9:d0:69:e0:ca:f1:a8:29:f4:c2:af:
a1:2d:3d:a1:5a:32:e7:26:ad:ee:bf:74:54:48:97:6c:d1:fd:
62:56:e8:a1:f2:bc:cd:17:28:21:5b:8d:de:05:58:e9:b0:88:
6e:59:00:40:a7:01:55:d5:73:db:27:26:0e:18:42:4a:c1:52:
4a:ef:77:a3:3e:18:08:d4:f6:05:bb:4f:b3:2f:ba:91:51:07:
9c:4e:5d:83:f7:ab:10:24:07:13:8b:ea:fb:d3:15:28:6c:cd:
76:59:bd:7e:af:dc:ee:39:46:d5:d1:27:63:34:21:34:37:22:
c9:4f:27:1e:6d:fb:19:2c:95:ff:80:00:19:9b:e3:d6:ad:57:
28:91:eb:07:c7:48:38:b1:94:7c:fc:72:a7:10:60:2f:b0:fd:
46:0e:64:35:b0:08:7b:54:36:22:48:0e:d8:47:f1:17:e0:72:
e6:9b:3a:cc:73:8b:75:70:1b:e7:1b:ff:bf:5b:3f:ed:75:f6:
6a:8c:a1:f2:9f:90:dd:63:d2:47:96:4c:9d:78:7b:3b:10:d9:
ea:b6:f8:b0:0e:05:b2:09:48:f0:c8:83:11:4b:86:2a:54:c8:
9f:32:cd:8b:34:51:81:05:c3:f0:d3:59:bf:40:90:07:86:6e:
fd:47:71:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org