Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9D3591EA619211EDB7A80521C4F9AE02.roa
File: 9D3591EA619211EDB7A80521C4F9AE02.roa (raw, json)
Hash identifier: /meCEQLr2Kja6mktWHmTHBJ2LKKdTqJd5afcUN+K+r0=
Subject key identifier: E5:30:A1:1F:8A:8F:7E:6B:87:45:BA:07:C0:DE:67:23:3B:1E:03:59
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 09C4
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9D3591EA619211EDB7A80521C4F9AE02.roa
Signing time: Fri 11 Nov 2022 07:29:45 +0000
ROA not before: Fri 11 Nov 2022 07:29:45 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 115.167.24.0/22 maxlen: 22
115.167.28.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2500 (0x9c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 11 07:29:45 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=636df9e9-9d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3d:03:15:b9:09:e6:e9:a5:d6:e1:95:c7:47:
72:72:27:90:3e:bd:25:21:f2:1c:07:7f:56:8a:41:
b7:67:71:6f:23:d2:19:a8:6e:70:66:fa:de:9d:22:
ff:b0:93:f6:3f:de:70:50:31:5b:24:07:7c:f0:f8:
75:8e:9c:35:33:9f:b4:aa:12:47:b0:d0:4c:56:98:
70:46:b4:1a:7f:d9:86:fe:a8:a3:37:9a:26:37:92:
52:95:5d:d7:78:5d:26:d8:f9:80:9c:f1:ff:82:25:
5c:f6:e5:f8:97:26:3f:d1:1c:c2:23:89:85:4e:a9:
ce:1e:69:b6:be:80:0f:4c:46:1e:c8:7f:43:21:52:
8f:82:a5:3c:93:81:ff:60:4b:8e:3c:20:65:c0:7e:
9d:fc:7a:23:59:fb:31:96:bb:da:93:9c:95:f4:a6:
09:3c:5d:ce:da:54:1f:ba:e8:28:61:66:e6:26:f7:
ae:98:50:0d:a7:9c:9a:aa:f0:4d:08:84:38:65:61:
7e:46:4a:f2:e0:db:bf:1e:81:3c:50:6c:de:04:d8:
df:36:35:5a:53:e9:ba:77:32:c5:53:45:6a:6d:1a:
d7:e0:c1:0a:4c:53:28:96:1e:f4:91:b4:72:58:69:
a3:e0:03:65:b7:e2:2c:a6:66:c9:4c:7a:01:cb:1b:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:30:A1:1F:8A:8F:7E:6B:87:45:BA:07:C0:DE:67:23:3B:1E:03:59
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9D3591EA619211EDB7A80521C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.24.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:d4:8c:7c:1a:43:78:d8:a3:f2:18:8c:c2:f1:27:ed:d4:d1:
76:34:a3:e0:22:fd:65:3e:3d:c4:50:f4:8f:1c:7d:cb:34:68:
80:44:72:54:91:e3:d0:3a:ec:f8:38:c7:2b:2f:89:80:09:4d:
49:1a:ee:1c:bc:d3:54:40:08:4c:92:c0:d7:97:5e:5d:15:ba:
1f:be:ac:f4:1f:9f:9f:ad:20:55:b9:f7:57:1b:2f:ad:6d:52:
aa:0b:ff:91:8c:7e:03:f1:6a:42:35:d5:e7:86:7a:f1:a3:7d:
44:48:13:96:88:cc:78:c3:e4:45:da:68:5a:ae:d3:7d:d5:8b:
29:94:54:f0:ad:ce:78:33:5c:f6:20:38:46:04:99:ae:26:8f:
a8:05:04:f2:05:50:ab:7b:46:0b:27:1c:81:02:a6:7c:2e:b1:
62:bc:0b:8d:1d:a8:ea:2e:4c:ea:44:16:5c:df:5f:cc:2b:f3:
e5:4b:56:fa:72:bc:79:d0:36:6d:09:1c:c4:34:df:1f:65:54:
5a:bb:98:e0:4f:0a:4a:13:2c:48:24:ca:79:ed:94:89:20:c8:
cc:19:7a:ee:62:f1:36:8a:a7:a2:49:88:9a:21:bb:61:8e:80:
76:ac:45:26:f7:4e:e6:55:67:3c:54:2c:a4:90:50:60:88:85:
4a:69:08:1e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjIxMTExMDcyOTQ1WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzZkZjllOS05ZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0D0DFbkJ5uml1uGVx0dycieQPr0lIfIcB39WikG3Z3FvI9IZqG5wZvrenSL/
sJP2P95wUDFbJAd88Ph1jpw1M5+0qhJHsNBMVphwRrQaf9mG/qijN5omN5JSlV3X
eF0m2PmAnPH/giVc9uX4lyY/0RzCI4mFTqnOHmm2voAPTEYeyH9DIVKPgqU8k4H/
YEuOPCBlwH6d/HojWfsxlrvak5yV9KYJPF3O2lQfuugoYWbmJveumFANp5yaqvBN
CIQ4ZWF+Rkry4Nu/HoE8UGzeBNjfNjVaU+m6dzLFU0VqbRrX4MEKTFMolh70kbRy
WGmj4ANlt+IspmbJTHoByxu6JQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOUwoR+K
j35rh0W6B8DeZyM7HgNZMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvOUQzNTkxRUE2
MTkyMTFFREI3QTgwNTIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBANzpxgwDQYJKoZIhvcNAQELBQADggEBADvUjHwaQ3jYo/IY
jMLxJ+3U0XY0o+Ai/WU+PcRQ9I8cfcs0aIBEclSR49A67Pg4xysviYAJTUka7hy8
01RACEySwNeXXl0Vuh++rPQfn5+tIFW591cbL61tUqoL/5GMfgPxakI11eeGevGj
fURIE5aIzHjD5EXaaFqu033ViymUVPCtzngzXPYgOEYEma4mj6gFBPIFUKt7Rgsn
HIECpnwusWK8C40dqOouTOpEFlzfX8wr8+VLVvpyvHnQNm0JHMQ03x9lVFq7mOBP
CkoTLEgkynntlIkgyMwZeu5i8TaKp6JJiJohu2GOgHasRSb3TuZVZzxULKSQUGCI
hUppCB4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org