Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B065E03666FB11EC82AB9E32C4F9AE02.roa
File: B065E03666FB11EC82AB9E32C4F9AE02.roa (raw, json)
Hash identifier: tbVXDSX6/D9ZdN9uFLZyhmKZYFJNayzU9ASXKA3sn5o=
Subject key identifier: 49:4A:B7:FE:D5:CC:3E:F0:BE:97:3A:6F:9E:6C:D7:34:A9:9E:E8:C1
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 07A0
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B065E03666FB11EC82AB9E32C4F9AE02.roa
Signing time: Wed 01 Jun 2022 11:27:29 +0000
ROA not before: Wed 01 Jun 2022 11:27:28 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 54600
IP address blocks: 115.167.24.0/22 maxlen: 24
115.167.28.0/22 maxlen: 24
115.167.112.0/22 maxlen: 24
115.167.116.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1952 (0x7a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jun 1 11:27:28 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62974d20-94e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:0c:68:39:91:8d:c3:28:80:78:25:97:f4:
6a:70:3f:ea:64:5e:0b:c6:66:a1:4d:66:c5:01:25:
08:70:7c:72:48:3f:da:be:90:6e:b5:03:69:d5:8a:
3f:e1:32:84:34:b5:3a:94:9d:65:33:c4:c3:72:c6:
98:98:8e:cd:05:57:87:8a:62:5c:c9:38:b5:a3:9f:
d6:8f:85:16:9d:f8:93:b2:ee:8f:c3:bd:22:1c:eb:
47:f2:4c:6d:0f:79:5a:fe:05:8f:d4:f0:dc:d1:74:
30:db:3c:a2:23:40:e6:a6:b9:72:18:66:6a:3f:c3:
31:a0:f5:81:45:af:22:ed:32:fa:69:08:95:4e:06:
94:d9:de:3e:80:9c:c5:00:32:10:92:3e:a4:61:e1:
67:7f:fe:8e:d4:5c:10:62:d0:32:46:41:65:60:d7:
c9:e2:74:26:68:9d:8d:0a:68:96:13:39:e7:5e:30:
24:c8:08:b5:be:07:fb:d4:1b:6c:3f:08:93:a9:e3:
a7:e2:a3:b5:20:0a:1c:9c:d8:12:b1:95:55:5a:3e:
38:39:26:38:f7:ea:f3:a5:c2:2a:bd:3a:a9:eb:7a:
76:7e:d6:40:e3:4b:ba:f4:04:4f:89:f9:20:eb:4b:
62:dd:40:00:b1:e0:c8:ea:a5:21:29:1a:b1:e2:43:
36:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4A:B7:FE:D5:CC:3E:F0:BE:97:3A:6F:9E:6C:D7:34:A9:9E:E8:C1
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B065E03666FB11EC82AB9E32C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.24.0/21
115.167.112.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:87:69:26:6e:61:8f:51:65:59:a0:c4:0b:33:ad:81:f1:7b:
ee:df:da:8d:10:b4:66:b2:ba:1e:9f:02:9c:65:fb:ec:0b:7a:
b1:8e:47:2b:02:57:a0:96:e7:4c:d1:cb:0d:6a:15:9e:6e:ec:
9f:10:a2:3c:2d:ca:7f:d8:b4:23:73:35:83:39:69:f4:d2:05:
a1:75:6e:9f:3b:14:3d:33:28:6a:8f:23:f8:35:52:0f:02:04:
79:7c:bf:0e:cb:e4:10:a0:1e:48:c2:31:06:67:b0:8d:06:70:
0a:7a:fb:60:89:fe:b5:12:93:f2:ab:09:a6:1e:96:ac:b2:08:
96:a5:3d:e5:85:d5:52:42:68:39:f4:40:8d:1f:33:4d:60:c8:
55:12:f2:f2:d1:da:72:28:cf:f0:37:aa:70:45:82:7b:c0:ea:
8f:94:29:7f:d5:6c:9b:fe:d5:5c:e3:23:4b:aa:2b:77:13:ce:
00:0c:ac:e7:db:32:b9:b1:dc:6d:ea:47:1e:06:d8:b2:cc:b9:
db:03:3e:a8:e7:29:90:03:e3:9b:6a:a2:ec:17:67:df:80:b1:
e2:52:6e:e7:b3:ec:3b:67:8c:20:36:fa:70:b0:81:04:1e:06:
eb:9d:01:fc:cb:5c:b4:7c:60:0f:27:52:1b:c5:a6:49:94:16:
3f:c8:3e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-ams.rpki-client.org