Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9DEB933EC32411ED8632724CC4F9AE02.roa
File: 9DEB933EC32411ED8632724CC4F9AE02.roa (raw, json)
Hash identifier: Gs7AtoLgLdO/GfK3YRkzcp6dYsRL1T14IfR0Srj5hfs=
Subject key identifier: 5F:3A:18:7A:CB:91:A7:2B:C5:79:B5:E0:DA:DB:00:FA:50:5C:13:4F
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0BB7
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9DEB933EC32411ED8632724CC4F9AE02.roa
Signing time: Wed 24 May 2023 23:25:20 +0000
ROA not before: Wed 24 May 2023 23:25:20 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 13768
IP address blocks: 115.167.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 08:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2999 (0xbb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 23:25:20 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646e9ce0-830c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0a:13:e3:72:ce:b4:76:22:c0:0c:dc:38:be:
82:b5:04:86:d6:dc:50:e7:fb:6e:40:65:d1:fa:89:
b4:0c:0f:21:74:37:2e:f4:9f:85:d8:bc:b7:29:ce:
77:53:7e:c9:36:0b:e2:02:05:51:ac:e6:e8:ca:60:
dc:de:06:af:f8:73:43:cb:66:11:c1:6e:48:83:5e:
95:e3:ec:32:4e:5d:cc:65:3f:a5:f8:46:c5:c0:d1:
5b:31:f8:b7:0c:33:a4:63:2e:6d:46:39:c4:28:21:
15:9a:af:86:06:4c:e4:0b:80:d0:ab:f1:12:fc:53:
b7:5a:ec:13:b0:15:5e:2e:13:88:ee:fc:f0:6a:b1:
3b:39:3f:17:67:6a:2e:fb:c6:ed:4c:2e:46:3c:eb:
15:d1:7a:d2:63:d5:6a:00:96:61:4f:cb:8a:38:08:
fc:da:52:a6:df:a5:20:b6:8b:54:bb:50:a3:4b:74:
8c:49:1c:6d:e4:f1:ba:8a:68:37:51:91:de:14:64:
a2:cf:6c:e7:e4:b9:69:43:ea:62:d8:9e:8e:16:6d:
80:eb:ab:e6:f4:78:69:d1:8b:3e:b9:dc:12:9e:47:
30:a1:e8:db:50:51:e4:df:30:be:e5:71:41:5a:4e:
75:0f:41:96:73:c8:b8:42:52:6d:d1:a1:0d:64:c9:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3A:18:7A:CB:91:A7:2B:C5:79:B5:E0:DA:DB:00:FA:50:5C:13:4F
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9DEB933EC32411ED8632724CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.12.0/22
Signature Algorithm: sha256WithRSAEncryption
97:3b:3d:9e:31:6e:f5:d2:6b:50:1f:1d:3f:99:0f:6c:57:bc:
87:ab:04:cf:ed:72:c2:ef:dd:9c:c9:e7:c1:9f:c7:9e:44:d4:
f6:cd:e3:6b:2c:84:ee:7e:3e:d7:d5:b7:a2:d1:42:be:53:67:
18:5c:70:31:17:2b:00:f4:fa:32:5e:45:1f:82:5a:6c:49:53:
03:5f:f0:7f:e9:de:83:4f:de:ba:07:27:be:0e:c9:4a:41:52:
f3:2a:8c:3f:d7:e8:04:34:65:88:0c:b9:31:37:28:61:0d:46:
00:7e:ed:97:3f:d7:1f:e8:d9:36:3a:e7:2c:2c:f9:fb:f1:04:
7a:38:8b:c7:85:c6:b9:79:57:d2:33:47:be:22:62:f1:57:c6:
df:0c:3f:8a:60:05:30:38:07:1f:10:14:6b:4b:9b:3d:10:9a:
dd:95:23:d1:3b:28:7d:56:fc:a8:d9:40:ae:9d:6a:9b:57:5b:
a2:02:1c:69:3b:08:96:8f:00:fc:04:e7:e3:a2:f8:33:88:2b:
78:b2:d5:ac:76:43:81:cd:eb:6c:26:e0:0d:5e:8d:ce:ab:8b:
b9:28:4e:3d:7d:32:93:12:96:31:a5:ab:54:b6:b4:46:cd:90:
02:54:28:6b:7f:70:05:6a:0a:2f:72:4e:b8:b0:fd:97:8f:41:
cf:ac:82:45
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwNTI0MjMyNTIwWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDZlOWNlMC04MzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3goT43LOtHYiwAzcOL6CtQSG1txQ5/tuQGXR+om0DA8hdDcu9J+F2Ly3Kc53
U37JNgviAgVRrOboymDc3gav+HNDy2YRwW5Ig16V4+wyTl3MZT+l+EbFwNFbMfi3
DDOkYy5tRjnEKCEVmq+GBkzkC4DQq/ES/FO3WuwTsBVeLhOI7vzwarE7OT8XZ2ou
+8btTC5GPOsV0XrSY9VqAJZhT8uKOAj82lKm36UgtotUu1CjS3SMSRxt5PG6img3
UZHeFGSiz2zn5LlpQ+pi2J6OFm2A66vm9Hhp0Ys+udwSnkcwoejbUFHk3zC+5XFB
Wk51D0GWc8i4QlJt0aENZMlLkwIDAQABo4IClTCCApEwHQYDVR0OBBYEFF86GHrL
kacrxXm14NrbAPpQXBNPMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvOURFQjkzM0VD
MzI0MTFFRDg2MzI3MjRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJzpwwwDQYJKoZIhvcNAQELBQADggEBAJc7PZ4xbvXSa1Af
HT+ZD2xXvIerBM/tcsLv3ZzJ58Gfx55E1PbN42sshO5+PtfVt6LRQr5TZxhccDEX
KwD0+jJeRR+CWmxJUwNf8H/p3oNP3roHJ74OyUpBUvMqjD/X6AQ0ZYgMuTE3KGEN
RgB+7Zc/1x/o2TY65yws+fvxBHo4i8eFxrl5V9IzR74iYvFXxt8MP4pgBTA4Bx8Q
FGtLmz0Qmt2VI9E7KH1W/KjZQK6daptXW6ICHGk7CJaPAPwE5+Oi+DOIK3iy1ax2
Q4HN62wm4A1ejc6ri7koTj19MpMSljGlq1S2tEbNkAJUKGt/cAVqCi9yTriw/ZeP
Qc+sgkU=
-----END CERTIFICATE-----
Generated at Tue Apr 9 11:49:18 2024 by rpki-client on console-fra.rpki-client.org