Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8B09DBE6FD0811EC8301DB0AC4F9AE02.roa
File: 8B09DBE6FD0811EC8301DB0AC4F9AE02.roa (raw, json)
Hash identifier: 9E6PJ5z1tZ1vZZdP+JyIbu0yG6UavXs71OJyL8JPCJU=
Subject key identifier: 72:01:60:A1:E3:4B:EF:FD:C1:FA:83:EE:B0:EF:53:E5:93:ED:25:FC
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 08C9
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8B09DBE6FD0811EC8301DB0AC4F9AE02.roa
Signing time: Thu 18 Aug 2022 17:38:38 +0000
ROA not before: Thu 18 Aug 2022 17:38:38 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 15083
IP address blocks: 115.167.8.0/22 maxlen: 24
115.167.96.0/22 maxlen: 24
115.167.100.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
175.110.100.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2249 (0x8c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Aug 18 17:38:38 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62fe791d-1536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:61:a5:7a:cd:96:fe:63:e2:83:69:a1:20:3c:
ac:a2:d1:40:62:4a:12:fa:9f:3a:48:50:71:13:73:
ca:99:b5:4e:6e:3f:14:56:2c:6b:06:1f:fe:f1:c9:
8f:31:87:80:2f:4b:38:df:38:05:43:f2:49:35:a8:
01:4f:84:8a:9d:e6:50:5e:d7:b5:ec:ec:40:af:7b:
3c:f7:f7:e8:b1:3a:25:58:13:1a:d9:e2:fe:04:f8:
70:78:c3:9a:36:66:54:57:d4:c2:88:ed:03:aa:ae:
b7:4f:f0:c9:ac:b0:81:49:49:4d:22:cf:93:7a:84:
0d:26:94:8c:dd:30:31:01:7d:ab:3c:d1:d1:23:3b:
bb:f8:a2:93:c1:0c:88:c4:0f:75:dd:dc:6a:ad:16:
e0:81:03:70:58:6b:ad:05:c6:4d:17:c9:36:41:de:
7a:6d:23:e3:22:8f:b9:b5:b6:1b:fb:6f:77:48:c4:
aa:dd:54:b6:ad:4d:97:85:a6:16:45:0d:a6:fa:74:
23:4c:ea:b9:d5:b5:19:7e:b0:d3:53:e7:fd:89:19:
f2:53:f0:73:38:2c:8f:7d:46:fc:3d:34:2d:2b:8c:
35:c6:2c:c2:3f:2a:41:66:79:47:77:d8:65:ca:f8:
4e:3f:aa:37:81:f7:24:81:bf:c8:69:7d:f4:23:2e:
4d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:01:60:A1:E3:4B:EF:FD:C1:FA:83:EE:B0:EF:53:E5:93:ED:25:FC
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8B09DBE6FD0811EC8301DB0AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.8.0/22
115.167.96.0/21
115.167.120.0/22
175.110.100.0/22
Signature Algorithm: sha256WithRSAEncryption
10:57:ef:f2:20:28:63:2c:f8:7e:c3:42:3d:3c:7b:3d:99:da:
ad:57:6f:10:33:70:58:d8:c6:9f:8d:20:00:e7:83:e0:2e:e3:
d9:45:37:5e:d2:81:9d:4c:4a:9b:b5:7a:a3:78:e1:6c:f6:f4:
8a:f7:56:52:66:7d:19:28:37:bc:b4:91:92:56:06:d1:78:31:
cd:46:69:d4:5f:09:63:27:33:17:1a:5e:fd:61:d8:d5:5a:67:
a5:98:57:cf:f8:9b:48:4d:b0:b1:2d:aa:59:6f:a0:79:ca:f2:
ec:98:6f:df:21:e4:ec:f3:1c:23:5a:86:99:ee:10:21:a9:2b:
8c:47:62:ef:bc:37:89:79:81:22:00:b0:d7:2e:e3:8c:ec:ef:
49:2e:45:b6:e6:11:a6:c4:57:8d:89:e0:7d:ba:e4:4b:8c:0e:
94:76:57:28:cb:94:f9:4a:8f:3b:5f:5a:bb:3a:d4:ec:d4:75:
22:fb:95:df:22:77:56:ce:f0:69:00:f1:bc:39:95:f4:ec:75:
67:e7:ff:3d:f0:6a:54:50:8d:77:4e:bc:67:9e:27:20:d6:68:
94:c3:11:07:2a:eb:3b:dd:3b:28:19:fb:5d:d1:3c:e6:7d:30:
6f:af:a7:70:c9:30:13:50:79:cb:03:ff:26:70:64:9b:c7:6a:
bd:5c:ad:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org