Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8ACF9FC45BF611EDAEBCD86BC4F9AE02.roa
File: 8ACF9FC45BF611EDAEBCD86BC4F9AE02.roa (raw, json)
Hash identifier: Nk4ZbeCGh89BE2NSu6EyH0HazifGBsGYDELVApAALyU=
Subject key identifier: 55:32:DF:58:45:8D:44:7C:7C:F0:D5:AA:7A:28:21:C1:6E:BA:A2:6D
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 09D0
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8ACF9FC45BF611EDAEBCD86BC4F9AE02.roa
Signing time: Tue 15 Nov 2022 11:28:35 +0000
ROA not before: Tue 15 Nov 2022 11:28:35 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 29761
IP address blocks: 103.151.27.0/24 maxlen: 24
115.167.116.0/22 maxlen: 22
115.167.120.0/22 maxlen: 22
115.167.125.0/24 maxlen: 24
115.167.126.0/24 maxlen: 24
115.167.127.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2512 (0x9d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 15 11:28:35 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=637377e3-d845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b0:01:f5:6c:91:d6:24:91:f0:1c:54:10:b4:
a5:d4:97:cb:05:81:d8:0d:3c:85:64:09:49:88:c5:
11:ad:07:1c:b4:df:da:4a:b5:fe:c0:9b:2c:6d:40:
83:1e:86:5d:ed:13:af:24:11:46:9f:1d:c9:16:fe:
4a:7e:66:db:1c:ba:78:01:5e:6c:2f:84:ea:dd:d3:
22:87:0d:aa:dc:e3:09:31:f7:36:37:bc:15:8b:ad:
46:72:3e:65:2a:65:6d:a2:78:8f:be:47:09:69:36:
8c:70:8b:7c:15:12:c3:a9:45:fe:e5:d1:26:b0:df:
2d:d3:c0:3e:82:a4:5d:36:51:9d:e5:28:72:bc:2f:
1c:db:22:80:6c:38:e8:26:26:ab:19:29:d6:3b:e1:
e7:3a:28:1e:98:d0:4d:06:f1:c3:b8:d0:1e:39:f3:
35:4d:f9:bc:a7:91:e1:7a:31:10:11:aa:ce:1e:ca:
cb:9b:b9:86:dd:43:0a:56:ad:38:d2:6f:a6:54:c5:
3c:c5:3e:78:e2:74:6e:d5:5c:bb:4c:33:82:5d:57:
dc:97:88:d9:f4:7d:a4:42:48:74:e0:9b:3d:48:55:
25:56:88:78:c0:00:4b:2d:c9:73:f7:b7:b0:f4:16:
1c:b0:b7:79:c1:f4:94:2d:21:38:36:26:29:fa:69:
a4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:32:DF:58:45:8D:44:7C:7C:F0:D5:AA:7A:28:21:C1:6E:BA:A2:6D
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8ACF9FC45BF611EDAEBCD86BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
115.167.116.0-115.167.123.255
115.167.125.0-115.167.127.255
175.110.104.0/24
175.110.106.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:11:0a:25:6e:cd:f2:16:90:6c:0c:84:28:ae:c1:b8:cd:ed:
9b:48:8c:f4:bd:ec:4f:89:d8:a4:f2:f4:0a:9a:7a:e9:71:7d:
83:54:ad:3f:95:a2:fd:a3:93:40:f2:3a:23:39:73:8c:9f:ea:
1a:ba:9e:66:64:4e:c9:16:c0:a3:65:0e:f5:ae:ec:e9:11:06:
bc:02:7f:6e:64:cc:30:f4:ba:68:7c:05:ad:e4:23:78:00:e3:
e0:b4:38:60:06:1c:cd:70:c6:de:8c:ea:56:a5:cf:c8:2c:d9:
61:3c:8f:b1:40:6b:05:62:0d:85:e5:5f:cd:67:3f:d5:d9:3b:
e6:02:ca:92:4f:56:80:26:60:6a:bd:d3:20:22:d4:0a:6f:7f:
85:94:87:d2:c5:9c:3d:e6:cc:46:c5:4e:97:8d:5d:bb:71:05:
e9:29:a2:c5:90:8c:42:03:38:bf:e4:74:45:dc:26:fa:64:8b:
ac:5b:95:60:fc:5b:3f:17:c8:cb:6e:16:80:e0:78:50:9d:1f:
0a:8d:a7:e7:14:10:f5:73:e5:52:ba:a8:7a:9f:44:59:f3:d3:
11:79:9d:b1:8d:e0:15:55:15:65:ed:f9:25:22:cc:32:7f:6e:
30:fb:ee:04:e1:1b:ac:37:b9:52:0b:90:75:04:35:5e:c5:78:
96:3c:33:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org