Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/786E866EA6CF11ED8FBD0A82C4F9AE02.roa
File: 786E866EA6CF11ED8FBD0A82C4F9AE02.roa (raw, json)
Hash identifier: BIib5I2dXE/2zAA2X2wh7roHHZdq3m/5eAegyn/PY7o=
Subject key identifier: B7:A7:03:F2:16:23:15:3B:96:0E:63:8A:57:7A:95:6C:66:99:E4:1A
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0A8E
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/786E866EA6CF11ED8FBD0A82C4F9AE02.roa
Signing time: Tue 07 Feb 2023 10:09:13 +0000
ROA not before: Tue 07 Feb 2023 10:09:13 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.1.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.108.0/22 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
2400:9560:1::/48 maxlen: 48
2400:9560:5::/48 maxlen: 48
2400:9560:9::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2702 (0xa8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Feb 7 10:09:13 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63e22349-4cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7b:ab:ef:52:28:67:50:57:dc:aa:bf:12:64:
ea:c6:b9:72:44:c0:29:29:30:58:d7:df:94:3e:ca:
a1:cf:9d:f4:95:7d:3a:a9:eb:56:4a:cb:9d:ff:76:
48:47:d3:c4:f3:b7:84:2d:e0:40:b1:5e:1c:91:5f:
fe:10:6d:30:32:9d:fc:39:64:7d:8c:02:28:86:87:
fe:2c:48:dc:fa:51:7c:65:a6:1f:fc:43:3b:1b:d8:
c9:82:bb:4e:77:f6:3b:6b:54:5d:28:2b:fb:3d:0b:
d0:1b:ce:46:f4:c0:85:3d:05:18:7d:f1:5b:5e:d9:
c2:3d:4f:ea:76:3b:25:1c:fa:60:42:37:c4:24:60:
bf:35:19:ff:84:f2:19:ae:6b:cd:14:1a:af:c7:30:
a4:31:ed:83:f2:f0:3f:d0:08:54:18:9e:94:0e:72:
91:f0:dd:fd:e3:ee:26:b9:79:26:47:8a:31:47:cd:
ea:94:e1:8b:f0:82:9c:8f:b4:ca:e9:1e:de:03:b7:
85:71:12:8e:39:26:10:5a:27:c9:2e:2c:24:b6:56:
68:e1:20:54:19:5f:da:f6:48:3c:5a:3e:2a:c8:1d:
26:11:8c:2e:b1:fc:3b:23:7f:94:e2:76:3f:dd:26:
93:b2:0e:b3:7b:41:e5:92:03:32:af:6e:fb:91:89:
81:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A7:03:F2:16:23:15:3B:96:0E:63:8A:57:7A:95:6C:66:99:E4:1A
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/786E866EA6CF11ED8FBD0A82C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.1.0-115.167.2.255
115.167.72.0/22
115.167.78.0/24
115.167.108.0/22
175.110.96.0/24
175.110.105.0/24
175.110.111.0/24
202.92.16.0/23
202.92.23.0-202.92.31.255
IPv6:
2400:9560:1::/48
2400:9560:5::/48
2400:9560:9::/48
Signature Algorithm: sha256WithRSAEncryption
a2:33:f0:87:7f:e5:bc:5c:5d:87:c1:0c:3e:c7:c0:db:94:a6:
d6:3c:6c:0c:e4:b2:cd:93:ad:c0:5e:d0:0c:b9:39:38:ed:e1:
09:71:fd:fd:4d:a8:38:8c:df:9f:a9:eb:25:11:fe:87:6e:90:
0c:32:fd:31:3f:7d:64:a5:76:3f:f2:a4:b7:c7:11:f2:74:e0:
1d:47:f0:91:c2:0d:51:6d:3e:e4:fc:89:e7:b8:fc:48:b4:5e:
eb:49:aa:b2:83:e1:a9:41:6e:5f:fe:ae:65:97:e5:2b:ad:83:
43:66:99:8e:d6:82:bb:a4:09:6e:77:b7:da:b8:49:7c:86:b0:
68:84:37:ee:2f:c6:f1:c2:0e:01:a3:4a:d7:72:f6:82:c2:e9:
a7:92:66:83:4c:ec:24:57:ea:c8:61:f8:69:eb:fd:a7:20:53:
54:b3:4d:51:41:27:d9:52:04:c1:fd:1c:db:c1:b7:d4:99:42:
2c:62:41:76:f5:4d:69:15:a1:ce:b2:d3:c9:33:bc:7a:ee:a8:
46:60:b2:38:4b:fc:8e:a5:6d:94:48:1b:2a:15:1f:f6:df:43:
07:59:c9:a4:06:e8:89:09:14:b4:f8:86:85:18:76:cc:80:14:
a1:4d:67:74:79:4d:f5:57:d1:9f:c2:5e:b4:61:2c:86:f7:c0:
31:5c:57:db
-----BEGIN CERTIFICATE-----
MIIF1TCCBL2gAwIBAgICCo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwMjA3MTAwOTEzWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2UyMjM0OS00Y2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Hur71IoZ1BX3Kq/EmTqxrlyRMApKTBY19+UPsqhz530lX06qetWSsud/3ZI
R9PE87eELeBAsV4ckV/+EG0wMp38OWR9jAIohof+LEjc+lF8ZaYf/EM7G9jJgrtO
d/Y7a1RdKCv7PQvQG85G9MCFPQUYffFbXtnCPU/qdjslHPpgQjfEJGC/NRn/hPIZ
rmvNFBqvxzCkMe2D8vA/0AhUGJ6UDnKR8N394+4muXkmR4oxR83qlOGL8IKcj7TK
6R7eA7eFcRKOOSYQWifJLiwktlZo4SBUGV/a9kg8Wj4qyB0mEYwusfw7I3+U4nY/
3SaTsg6ze0HlkgMyr277kYmBvQIDAQABo4IC+TCCAvUwHQYDVR0OBBYEFLenA/IW
IxU7lg5jild6lWxmmeQaMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNzg2RTg2NkVB
NkNGMTFFRDhGQkQwQTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYIGCCsGAQUFBwEHAQH/
BHMwcTBMBAIAATBGMAwDBABzpwEDBABzpwIDBAJzp0gDBABzp04DBAJzp2wDBACv
bmADBACvbmkDBACvbm8DBAHKXBAwDAMEAMpcFwMEBcpcADAhBAIAAjAbAwcAJACV
YAABAwcAJACVYAAFAwcAJACVYAAJMA0GCSqGSIb3DQEBCwUAA4IBAQCiM/CHf+W8
XF2HwQw+x8DblKbWPGwM5LLNk63AXtAMuTk47eEJcf39Tag4jN+fqeslEf6HbpAM
Mv0xP31kpXY/8qS3xxHydOAdR/CRwg1RbT7k/InnuPxItF7rSaqyg+GpQW5f/q5l
l+UrrYNDZpmO1oK7pAlud7fauEl8hrBohDfuL8bxwg4Bo0rXcvaCwumnkmaDTOwk
V+rIYfhp6/2nIFNUs01RQSfZUgTB/RzbwbfUmUIsYkF29U1pFaHOstPJM7x67qhG
YLI4S/yOpW2USBsqFR/230MHWcmkBuiJCRS0+IaFGHbMgBShTWd0eU31V9Gfwl60
YSyG98AxXFfb
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org