Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/96E704A428E911ED88484F3EC4F9AE02.roa
File: 96E704A428E911ED88484F3EC4F9AE02.roa (raw, json)
Hash identifier: kFDixiBzBZO0mjeS7Qevre+AZMlIioSuFJuDPfdjF2s=
Subject key identifier: 48:4C:82:2F:7F:70:31:CB:38:03:FD:3A:DA:AD:0C:89:5C:85:0C:36
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 08EA
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/96E704A428E911ED88484F3EC4F9AE02.roa
Signing time: Wed 31 Aug 2022 04:58:44 +0000
ROA not before: Wed 31 Aug 2022 04:58:44 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 54600
IP address blocks: 115.167.0.0/24 maxlen: 24
115.167.1.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.116.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2282 (0x8ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Aug 31 04:58:44 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=630eea84-9b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:86:cf:f8:0f:e5:a6:94:18:0b:da:5d:2b:
18:8a:d2:d6:ae:5a:a8:3a:94:7a:72:e0:dd:bb:ac:
55:06:5e:72:7b:eb:78:ff:e6:34:40:d5:8f:cd:b3:
9b:eb:9c:4d:8e:af:c8:d4:6b:a6:93:e1:fe:d0:a1:
a5:79:ce:c0:b8:97:79:79:b0:8c:da:b7:fc:25:64:
29:8e:5d:af:b5:1c:6d:a7:e2:82:b8:5c:44:8a:d9:
38:b6:60:56:2a:1c:f2:c3:82:1e:68:7a:f1:11:57:
a7:cc:55:b3:8c:2f:7d:2a:7e:32:3d:c6:d3:e9:4d:
9f:1a:7a:95:23:58:d0:e9:08:1f:56:d2:ea:b4:c0:
88:4a:1c:9e:e9:a7:2a:4b:84:52:1b:a5:70:d0:04:
7a:a1:56:dd:1e:b6:b9:6b:67:fe:11:5c:f5:0a:1a:
99:6e:6f:5e:b7:4e:24:29:c5:ad:53:e9:7e:98:b9:
95:b0:e0:bf:9e:c9:57:e7:c0:df:c6:24:10:1d:a4:
d7:16:b4:e9:ff:0d:4e:a1:76:94:46:71:3b:fa:c1:
f2:45:14:eb:b9:4a:62:19:dc:b7:49:cd:dd:73:78:
3f:b6:85:e3:25:ed:d3:aa:4d:ca:3b:26:b8:65:eb:
0f:d1:2e:66:b5:2e:a4:4d:d8:39:82:c6:3b:39:b0:
06:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4C:82:2F:7F:70:31:CB:38:03:FD:3A:DA:AD:0C:89:5C:85:0C:36
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/96E704A428E911ED88484F3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.0.0/23
115.167.3.0-115.167.6.255
115.167.116.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:03:6c:bf:36:49:71:a4:29:df:75:e2:41:ec:e8:6b:4f:38:
f2:c4:98:a1:38:cb:d7:97:85:7c:35:6c:ec:ad:fc:69:15:f9:
74:87:0a:41:56:a6:8d:e0:2f:1f:59:ca:8a:c5:4e:9a:c1:29:
cb:a3:32:9e:d2:8d:08:a7:32:be:ea:8c:2a:70:47:e5:d0:bb:
d3:ab:da:7d:51:d6:b8:fd:8f:fb:13:93:d0:91:ea:5f:1f:28:
7d:1e:96:00:aa:53:0c:b3:90:5c:7c:5a:db:97:60:99:23:6b:
3f:48:73:2d:8d:ff:89:97:f0:df:a2:77:f8:5e:b9:f3:93:8d:
8f:4f:f1:03:f4:a1:d1:f4:cd:ee:e3:cb:88:b7:6a:ab:4f:a8:
be:4a:e8:9b:32:90:43:a7:27:f4:a8:f7:84:72:e1:6b:4c:43:
3b:8a:bf:60:65:a7:2b:28:02:5f:b1:3b:0c:8d:60:13:1b:7e:
bb:a4:9d:b1:f2:9e:28:8e:de:4f:70:bd:4d:19:57:b1:80:44:
ae:f6:dd:65:45:4a:69:7f:4b:01:cc:db:01:c9:49:9d:87:5d:
84:6a:af:be:31:21:d9:a7:1d:42:8a:1c:72:e8:40:17:a7:40:
c0:97:e0:1f:65:4c:ef:02:89:09:70:ca:fd:dd:45:02:db:2b:
77:63:91:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org