Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A45389C46CB211EE8A20BF57C4F9AE02.roa
File: A45389C46CB211EE8A20BF57C4F9AE02.roa (raw, json)
Hash identifier: MkjhO8Z03dJFk63BviNExXICm4/sMx4N2w4QxJSmWXY=
Subject key identifier: B4:F6:82:34:48:35:38:48:4F:7A:D4:29:E9:96:AE:C2:79:94:0B:9C
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0D9B
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A45389C46CB211EE8A20BF57C4F9AE02.roa
Signing time: Tue 17 Oct 2023 06:04:08 +0000
ROA not before: Tue 17 Oct 2023 06:04:08 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 115.167.49.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3483 (0xd9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 17 06:04:08 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=652e23d7-52f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cf:2b:44:36:bc:e1:8c:a8:c5:40:d6:ca:aa:
6d:4f:c8:08:45:84:98:30:e9:cf:b9:4f:62:ed:4a:
8b:e5:8e:4d:18:e2:2d:62:dd:90:22:43:ce:5c:6b:
ae:74:4f:eb:61:90:51:cd:b5:07:da:2e:e3:9f:c3:
97:00:45:e7:f4:bf:b8:0f:8c:d7:52:70:b7:39:6d:
62:69:51:19:b5:bb:ac:3f:a8:2d:ad:62:60:21:1d:
58:c7:6a:6f:94:81:8a:31:e2:a1:84:1d:b3:a4:8e:
cb:18:27:e5:0b:b2:97:0c:b3:a4:ed:31:44:dd:7b:
e6:fa:46:ed:3c:74:f8:40:24:12:cd:32:cb:3c:cd:
01:63:78:a2:ac:a0:89:9c:9e:21:d4:13:df:85:7e:
03:54:fc:0f:49:04:37:67:38:3e:8d:2c:19:9f:b4:
b3:86:25:51:2c:d5:9c:53:38:33:ab:0f:5d:86:1f:
e2:7b:5d:bf:b3:78:51:82:b3:38:26:b9:25:6b:ba:
fa:b4:21:16:3a:36:82:5d:29:dc:35:dd:e9:48:1a:
a1:ce:75:e7:05:5f:6f:46:e6:5d:14:21:ee:00:d2:
fd:9a:87:30:83:a7:fa:da:5d:1e:1a:34:45:f2:02:
bc:f1:31:2c:f0:1a:29:a4:f3:5e:c1:03:ea:24:fe:
ce:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F6:82:34:48:35:38:48:4F:7A:D4:29:E9:96:AE:C2:79:94:0B:9C
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A45389C46CB211EE8A20BF57C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.49.0/24
202.92.18.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f7:1c:51:ed:8e:22:8b:13:64:83:e0:be:df:80:fc:84:2e:
8e:8f:55:f9:97:5e:45:d6:cd:17:d3:18:21:17:f0:97:1b:c1:
dd:94:83:e8:20:8f:89:0f:70:6d:84:bc:fc:ef:28:50:91:46:
f8:76:49:cf:9d:49:08:d0:df:ec:ec:c3:df:91:f6:27:ec:c3:
a7:a4:c8:92:3a:85:8e:ae:65:a1:b5:3f:75:b2:db:8f:3d:80:
12:1b:ee:95:35:b5:a2:f1:26:cd:e5:cc:0c:ce:4a:0e:80:96:
ad:ce:7d:6f:98:50:c6:e0:31:55:58:1a:e8:3c:82:a8:34:dd:
7a:93:b5:a3:aa:8b:94:53:e3:15:fa:7a:e5:6b:9f:7c:35:e1:
d0:4c:4f:72:25:aa:87:16:e2:c3:f4:91:2e:06:6c:3f:55:14:
ea:c8:38:cc:24:db:ea:d3:d8:47:b1:ad:bf:3c:9c:43:37:41:
2e:69:df:e2:94:82:07:ea:dc:03:e5:fb:03:0c:54:ef:8b:43:
89:9d:da:2e:7e:e5:59:42:e3:73:5a:3e:4f:b9:c9:84:99:1d:
21:53:b3:64:68:c1:50:3f:5b:16:ea:1b:82:56:2e:49:bb:ce:
b1:99:72:c0:fa:d1:82:6d:8a:d3:0a:20:aa:96:b1:92:22:1c:
a2:8b:40:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 06:32:49 2023 by rpki-client on console-ams.rpki-client.org