Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/80A6D34E884411EDA212BC24C4F9AE02.roa
File: 80A6D34E884411EDA212BC24C4F9AE02.roa (raw, json)
Hash identifier: TfwmbmlnMXSwrdyg9XJH86mm/ZP6Bv4h+BhC+eSyu1o=
Subject key identifier: AC:24:C9:7B:2E:71:43:7F:97:D5:7E:FD:B5:AF:23:40:52:12:A7:8D
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0A45
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/80A6D34E884411EDA212BC24C4F9AE02.roa
Signing time: Fri 30 Dec 2022 13:18:52 +0000
ROA not before: Fri 30 Dec 2022 13:18:52 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.0.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.120.0/22 maxlen: 24
115.167.126.0/24 maxlen: 24
115.167.127.0/24 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
2400:9560:1::/48 maxlen: 48
2400:9560:5::/48 maxlen: 48
2400:9560:9::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2629 (0xa45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 30 13:18:52 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63aee53b-18c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d2:55:8e:68:78:e8:cc:0d:53:0d:3e:cb:fa:
b3:1e:84:fd:c2:f6:56:af:47:ff:cd:be:0c:fc:07:
12:d5:23:a4:7f:c0:6d:18:ec:ea:72:af:76:6c:fd:
59:28:d5:ed:1a:67:8d:85:8c:2c:b8:82:c5:14:e6:
a7:92:f2:9b:fc:93:a3:23:2f:2d:ac:6c:36:65:0b:
d1:f1:69:f6:48:ad:ac:85:b2:38:f9:57:f9:5c:ee:
e7:7b:f5:e1:fa:fc:6a:52:b3:00:8c:87:15:72:2e:
30:39:0b:da:4a:cf:ca:9b:9b:45:82:3d:fe:69:04:
56:03:1c:96:27:85:0a:d0:fe:03:00:ff:64:0d:eb:
49:bc:dc:68:34:5d:f1:c6:fe:a0:61:61:78:66:cc:
25:b9:9b:d4:16:54:4b:78:5d:1c:50:96:b6:87:cf:
2b:0b:c4:fc:bd:54:0f:dc:a0:e1:a2:6f:36:12:f8:
03:ac:78:1d:22:ea:a3:7d:e7:79:32:e5:67:11:1b:
83:55:60:4e:20:71:04:3b:38:44:b8:f9:05:98:4c:
c2:bc:21:e4:9d:06:ed:9d:9f:29:14:f7:8a:62:e6:
1f:d2:db:47:56:35:13:d7:61:07:ee:99:2e:05:db:
7b:d3:84:53:bf:0c:f5:95:30:0b:53:ba:4c:a6:bc:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:24:C9:7B:2E:71:43:7F:97:D5:7E:FD:B5:AF:23:40:52:12:A7:8D
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/80A6D34E884411EDA212BC24C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.0.0/24
115.167.2.0/24
115.167.4.0/24
115.167.72.0/22
115.167.78.0/24
115.167.120.0/22
115.167.126.0/23
175.110.96.0/24
175.110.105.0/24
175.110.111.0/24
202.92.16.0-202.92.21.255
202.92.23.0-202.92.31.255
IPv6:
2400:9560:1::/48
2400:9560:5::/48
2400:9560:9::/48
Signature Algorithm: sha256WithRSAEncryption
92:e2:35:66:c1:4c:ae:6a:36:61:04:4e:0d:c7:1e:9c:87:48:
5e:60:c3:cc:0d:2b:1d:94:18:ef:2e:b1:66:4d:e5:d6:19:5f:
e6:3a:39:43:50:dd:0f:08:38:62:27:4b:9e:25:24:10:61:df:
fe:68:76:e7:35:c5:8c:98:d2:bd:6e:d6:84:4a:3c:77:e8:da:
da:7b:37:5f:34:57:9a:8b:34:32:1d:ee:36:13:03:a8:c9:a1:
a2:84:4c:2b:ef:59:b9:ae:b1:22:85:5f:00:35:71:74:67:ec:
15:7f:2c:42:16:fc:5b:02:88:0f:b9:cf:ee:4e:19:e6:e0:02:
e1:8c:8e:30:a4:6a:72:d3:55:19:6c:87:e6:a0:79:41:07:60:
aa:1b:55:97:44:d3:a9:87:b9:0c:46:95:82:3d:51:63:a9:bc:
91:51:76:9f:eb:ba:87:e9:c1:b1:bc:3a:69:15:0c:8d:e1:21:
29:34:93:d9:38:b5:65:43:80:2d:8f:c1:71:c6:cd:9b:10:3d:
ff:17:69:29:52:e1:3b:c1:0c:8a:10:87:11:8f:4e:9a:a2:3d:
5b:60:55:ae:5f:c3:b8:e2:f2:e9:78:f4:53:1f:ad:4e:ef:e7:
6f:8d:62:fc:85:f1:39:bc:ea:f5:68:54:0b:b0:61:c3:05:5f:
80:89:d0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org