Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9805DEAC900C11ED94427221C4F9AE02.roa
File: 9805DEAC900C11ED94427221C4F9AE02.roa (raw, json)
Hash identifier: VmpABUwZHiYevSj5zKfrydNjwv89drHN5ng0CkgPi7o=
Subject key identifier: 5E:E4:8F:D8:1F:55:AC:77:7F:B3:31:89:C0:67:8F:37:54:97:21:9B
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0BD0
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9805DEAC900C11ED94427221C4F9AE02.roa
Signing time: Wed 24 May 2023 23:25:50 +0000
ROA not before: Wed 24 May 2023 23:25:50 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 54600
IP address blocks: 115.167.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 08:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3024 (0xbd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 23:25:50 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646e9cfd-47ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:94:4e:9e:c3:96:cd:39:6f:bf:dc:1b:92:11:
5a:1d:70:e6:f5:5a:c0:c3:61:82:0c:2c:41:0a:ec:
d2:43:01:7a:3a:25:78:66:b2:ee:5e:f7:81:ae:3d:
8c:fd:f0:50:69:8b:11:22:8a:4b:68:10:aa:5a:47:
45:a4:43:00:cd:c9:13:49:a3:ef:6e:68:09:c0:cc:
7f:8a:51:ee:d8:8b:1a:1f:23:61:da:29:f0:be:6b:
18:51:ef:8f:66:cf:15:c2:60:a2:d2:31:a7:46:59:
d3:b5:3c:ea:a4:e8:d6:77:3d:8e:0a:72:40:ae:83:
fb:47:6e:ff:7b:c9:6c:f1:19:94:0b:e3:86:f0:48:
62:66:cb:a7:9d:5f:0b:2b:21:86:d1:74:37:d5:34:
cd:f7:72:36:b3:2f:47:9b:c5:d0:61:0c:4f:6d:6f:
69:a8:59:b0:82:8e:09:4c:7f:2f:c3:5e:be:00:3b:
47:d6:f1:f1:32:89:54:d4:6e:a1:39:98:19:94:f9:
4c:40:d0:51:71:81:ed:62:42:00:2b:4a:9c:5c:0f:
2d:9f:f7:40:dd:e8:d7:fd:bd:aa:d6:4a:3b:d1:2c:
f5:ad:57:1f:df:fd:05:0a:e9:8a:f1:e9:cc:79:4d:
4f:e9:e0:b2:fd:92:71:0c:f0:40:c5:fc:44:fe:3c:
f9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E4:8F:D8:1F:55:AC:77:7F:B3:31:89:C0:67:8F:37:54:97:21:9B
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9805DEAC900C11ED94427221C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.3.0/24
Signature Algorithm: sha256WithRSAEncryption
29:20:2b:fd:70:9a:b1:69:87:1d:33:2a:83:11:b8:5a:ec:e8:
97:81:2a:20:57:b7:6d:8f:d6:2f:28:5f:e8:63:ed:13:44:ca:
b4:21:6f:bf:3c:c7:ff:45:bd:03:3a:ca:b5:8f:e9:c1:ad:5d:
68:12:1e:92:c7:54:df:11:2a:d8:db:71:49:64:ef:6e:ae:8e:
76:29:6d:de:fe:99:a1:c7:c6:76:88:49:4e:0b:ac:61:13:b3:
3f:c7:63:f1:9c:1b:65:3b:bd:ab:19:66:43:f5:cb:54:8f:30:
72:11:62:91:c1:91:7f:4b:e7:d3:28:60:fb:f8:4d:f4:e2:12:
fe:df:64:d8:99:69:c5:87:1b:5c:7a:11:2a:bc:01:b5:3a:6a:
ff:c7:4d:c7:f6:9f:69:2e:9b:40:4a:5c:e0:4d:23:c8:15:e5:
00:ea:d2:13:21:65:bd:02:10:78:65:cd:ce:c7:28:9f:a8:bc:
83:70:d6:81:45:03:f1:59:7f:e5:7c:56:78:ce:a5:ed:b4:50:
c3:5c:93:1e:e2:30:6a:d4:59:5f:4a:d0:c5:b6:d3:63:a1:37:
3a:d0:57:bd:df:6d:1e:10:75:d5:9d:af:dc:98:3a:14:3a:0c:
97:bd:2f:dd:a3:b8:71:87:fb:81:10:35:d5:00:58:db:20:cf:
72:fb:f5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 11:49:17 2024 by rpki-client on console-fra.rpki-client.org