Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8C60ECB4FD0811EC8301DB0AC4F9AE02.roa
File: 8C60ECB4FD0811EC8301DB0AC4F9AE02.roa (raw, json)
Hash identifier: OxZaqbSf7Q3UHsuqklIi4/gk0Ljdex6VT4wYg/vuqPE=
Subject key identifier: 7E:B6:68:7B:F8:A7:3A:A8:E7:F0:9B:DD:49:81:36:E8:E5:9F:8B:2F
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0812
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8C60ECB4FD0811EC8301DB0AC4F9AE02.roa
Signing time: Wed 06 Jul 2022 08:49:30 +0000
ROA not before: Wed 06 Jul 2022 08:49:30 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.0.0/24 maxlen: 24
115.167.1.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.100.0/22 maxlen: 24
175.110.68.0/22 maxlen: 24
175.110.72.0/22 maxlen: 24
175.110.80.0/21 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.107.2/32 maxlen: 32
175.110.107.14/32 maxlen: 32
175.110.107.114/32 maxlen: 32
175.110.108.0/22 maxlen: 23
175.110.108.0/23 maxlen: 24
175.110.110.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2066 (0x812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 6 08:49:30 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62c54c9a-b041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:98:1e:fe:84:9e:d3:b5:3a:48:81:1e:a1:c0:
c5:32:66:b0:a0:9f:10:53:65:78:1a:6e:c0:3b:8c:
50:c7:b6:a3:d1:57:20:87:70:af:4a:5f:d2:ae:d9:
93:a7:c7:9c:06:58:f1:f2:13:0e:cd:1d:42:08:46:
85:e5:45:8f:98:37:40:06:5d:fc:cc:49:e5:d3:c3:
d4:4f:7b:54:47:66:05:99:b3:97:4a:db:b8:f2:10:
bc:25:94:6a:0c:31:46:aa:26:cf:3b:48:21:f0:61:
af:55:8b:93:b1:bc:6b:d4:65:c3:68:a8:1a:64:1a:
3e:42:ee:21:ec:57:4e:51:76:5c:65:cf:13:fc:3f:
d2:60:3d:9d:b0:fb:63:95:31:f3:49:e6:c5:a7:12:
da:35:58:03:c6:ac:b7:a8:75:ab:53:91:db:58:a2:
cf:9d:77:fb:35:a1:85:35:bb:4a:fa:a0:a2:b7:fe:
ca:24:d8:2a:ac:3b:3f:c5:4a:df:0c:8d:5a:91:2e:
10:34:c9:cf:b4:e9:c0:32:3d:8d:5f:57:17:fd:86:
ca:d5:fa:84:a7:73:8d:26:7d:d2:12:7b:f6:ce:df:
39:47:95:67:94:cd:5b:81:c5:61:b4:11:29:22:27:
00:82:56:45:5d:27:a0:6c:d8:65:3d:2b:ba:d4:2e:
42:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B6:68:7B:F8:A7:3A:A8:E7:F0:9B:DD:49:81:36:E8:E5:9F:8B:2F
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8C60ECB4FD0811EC8301DB0AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.0.0-115.167.6.255
115.167.48.0/23
115.167.72.0/22
115.167.100.0/22
175.110.68.0-175.110.75.255
175.110.80.0-175.110.91.255
175.110.96.0/23
175.110.104.0/24
175.110.107.2/32
175.110.107.14/32
175.110.107.114/32
175.110.108.0/22
202.92.16.0-202.92.21.255
202.92.23.0-202.92.31.255
Signature Algorithm: sha256WithRSAEncryption
8e:98:51:be:23:0c:32:b1:4a:ec:50:b8:d0:a9:bf:ae:10:94:
f0:04:9d:df:11:e3:39:b1:1b:c4:18:f3:49:eb:b1:0e:7b:07:
f4:a5:61:2a:ed:ba:03:71:23:ee:39:94:83:4e:19:d0:d9:24:
64:48:e0:b3:74:06:95:5d:e4:4a:82:0b:d3:54:1a:e0:7e:22:
2d:06:88:2d:6a:8e:48:68:28:9c:e5:2a:b1:59:97:88:51:88:
72:0c:bd:f6:2f:92:6d:31:e7:de:87:bf:15:91:bf:2b:16:5a:
2a:19:6b:4b:60:ee:72:b9:ca:63:55:92:2d:5c:03:ab:4b:fa:
ec:20:23:99:a7:07:05:7e:22:93:ee:b8:60:4a:91:56:1b:1b:
08:6d:30:d0:80:65:c9:51:77:79:94:ad:96:08:ee:46:00:8a:
84:49:33:51:6d:db:1b:74:6a:c7:99:7f:83:6e:77:1f:3f:84:
5e:bd:5a:0e:9c:c9:b6:46:18:3a:d2:f6:62:fc:05:cd:97:37:
6e:14:1c:f0:60:9d:6d:12:97:bd:04:25:bc:46:f9:a2:c1:11:
a4:07:6a:e1:b7:5e:92:da:3f:04:68:bf:98:69:54:1d:bb:91:
21:e0:4d:1b:91:b9:53:75:8d:f5:08:43:ef:e0:6f:eb:21:c6:
55:c0:36:21
-----BEGIN CERTIFICATE-----
MIIF7TCCBNWgAwIBAgICCBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjIwNzA2MDg0OTMwWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmM1NGM5YS1iMDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7pge/oSe07U6SIEeocDFMmawoJ8QU2V4Gm7AO4xQx7aj0Vcgh3CvSl/SrtmT
p8ecBljx8hMOzR1CCEaF5UWPmDdABl38zEnl08PUT3tUR2YFmbOXStu48hC8JZRq
DDFGqibPO0gh8GGvVYuTsbxr1GXDaKgaZBo+Qu4h7FdOUXZcZc8T/D/SYD2dsPtj
lTHzSebFpxLaNVgDxqy3qHWrU5HbWKLPnXf7NaGFNbtK+qCit/7KJNgqrDs/xUrf
DI1akS4QNMnPtOnAMj2NX1cX/YbK1fqEp3ONJn3SEnv2zt85R5VnlM1bgcVhtBEp
IicAglZFXSegbNhlPSu61C5CmQIDAQABo4IDETCCAw0wHQYDVR0OBBYEFH62aHv4
pzqo5/Cb3UmBNujln4svMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvOEM2MEVDQjRG
RDA4MTFFQzgzMDFEQjBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZoGCCsGAQUFBwEHAQH/
BIGKMIGHMIGEBAIAATB+MAsDAwBzpwMEAHOnBgMEAXOnMAMEAnOnSAMEAnOnZDAM
AwQCr25EAwQCr25IMAwDBASvblADBAKvblgDBAGvbmADBACvbmgDBQCvbmsCAwUA
r25rDgMFAK9ua3IDBAKvbmwwDAMEBMpcEAMEAcpcFDAMAwQAylwXAwQFylwAMA0G
CSqGSIb3DQEBCwUAA4IBAQCOmFG+IwwysUrsULjQqb+uEJTwBJ3fEeM5sRvEGPNJ
67EOewf0pWEq7boDcSPuOZSDThnQ2SRkSOCzdAaVXeRKggvTVBrgfiItBogtao5I
aCic5SqxWZeIUYhyDL32L5JtMefeh78Vkb8rFloqGWtLYO5yucpjVZItXAOrS/rs
ICOZpwcFfiKT7rhgSpFWGxsIbTDQgGXJUXd5lK2WCO5GAIqESTNRbdsbdGrHmX+D
bncfP4RevVoOnMm2Rhg60vZi/AXNlzduFBzwYJ1tEpe9BCW8RvmiwRGkB2rht16S
2j8EaL+YaVQdu5Eh4E0bkblTdY31CEPv4G/rIcZVwDYh
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-ams.rpki-client.org