Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/88115CC6BFBD11EC985C725AC4F9AE02.roa
File: 88115CC6BFBD11EC985C725AC4F9AE02.roa (raw, json)
Hash identifier: Yjp0A/PlbSh9KyoUVbsyTTbjFFZOm/mjIO89VA0GXTk=
Subject key identifier: 7A:87:EF:5D:CE:CA:8A:33:21:64:87:6E:BE:5E:89:40:3B:A3:21:97
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 080F
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/88115CC6BFBD11EC985C725AC4F9AE02.roa
Signing time: Wed 06 Jul 2022 08:29:28 +0000
ROA not before: Wed 06 Jul 2022 08:29:28 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 397373
IP address blocks: 115.167.20.0/22 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.60.0/22 maxlen: 24
115.167.104.0/22 maxlen: 24
175.110.64.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2063 (0x80f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 6 08:29:28 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62c547e7-f442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:4a:45:e2:ee:bc:b9:b3:35:bd:19:38:b1:
09:78:4b:c7:14:20:e9:2e:ce:cc:85:91:36:92:44:
4b:45:e7:a0:4d:ff:a5:f8:68:66:5c:13:1f:51:a8:
99:88:3f:61:14:78:47:3f:80:3d:f2:9c:0d:7e:a8:
97:d2:30:28:a5:9a:27:c6:74:5e:5f:5b:e5:f2:6e:
d6:19:65:45:3f:2b:fb:7c:ab:2e:01:0d:b4:af:79:
8c:a6:fb:90:85:71:05:cd:45:7a:28:1d:18:64:ab:
f0:51:e0:76:b1:bb:0a:24:f2:96:b6:bd:6a:80:bb:
1e:23:64:25:ea:86:f4:2a:91:1a:b7:ff:4e:24:27:
bb:15:1f:23:85:4e:6c:01:cf:70:64:30:20:e8:53:
8d:7c:59:e2:c5:d2:ec:05:42:11:ee:f1:d1:dd:70:
58:e3:e7:d1:63:ce:32:fc:1b:66:67:f6:b9:a3:c4:
1f:8c:bb:62:93:99:ea:a3:c3:94:2d:43:5f:f3:5f:
11:8b:7f:c1:35:c1:d1:6e:0a:7f:73:dc:4f:73:03:
40:5a:5d:c8:cd:5d:19:86:3f:2a:03:7b:c1:1c:c5:
ce:26:b0:91:4a:d7:4f:a7:22:28:ba:ee:0e:ed:fa:
a5:72:ce:78:de:3b:e7:a4:10:b8:08:64:61:3d:88:
0b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:87:EF:5D:CE:CA:8A:33:21:64:87:6E:BE:5E:89:40:3B:A3:21:97
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/88115CC6BFBD11EC985C725AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.20.0/22
115.167.56.0/21
115.167.104.0/22
175.110.64.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:34:7b:61:7f:85:61:98:9d:54:13:7f:48:26:dc:9c:0e:d7:
5d:23:16:7a:ef:6f:0e:d9:db:8a:10:e5:c9:d6:cb:cf:98:04:
31:2f:13:ab:12:93:44:db:3d:56:d6:13:88:46:11:6e:ea:fb:
3f:c0:d3:67:ac:a6:2f:6b:0a:77:53:0b:29:c1:23:58:2f:4e:
af:55:0c:ee:48:3f:8c:ef:39:d8:cd:ef:85:00:4a:1c:4d:d8:
16:30:2e:da:a3:d1:1b:7b:80:64:ba:b7:2c:02:25:8e:fc:43:
be:ae:76:98:62:fd:6c:65:ff:a5:c5:f9:4d:72:b1:04:d7:db:
1b:17:5d:3d:a4:19:8d:a3:50:91:8a:32:7c:40:6b:56:ed:93:
19:1c:07:89:4e:8f:b6:24:3e:60:e8:7b:ff:0a:ce:04:bd:de:
11:0c:8d:22:43:84:08:6a:0b:f6:00:22:18:a1:75:8d:4d:01:
6a:22:39:85:c3:69:39:58:21:95:24:97:7f:f3:2c:79:01:6e:
b3:f1:37:82:cc:b9:d9:c4:9f:eb:5c:cc:e2:1d:4d:c3:97:10:
ad:0e:f4:31:3b:9a:34:9f:11:05:40:6c:b9:8f:da:31:ab:74:
f3:19:95:32:42:f4:41:06:f4:06:27:19:0c:95:a7:e8:d3:52:
2e:4c:6d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org