Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF081E36F64D11EE8DA6E377C4F9AE02.roa
File: BF081E36F64D11EE8DA6E377C4F9AE02.roa (raw, json)
Hash identifier: 7Uz9CGy5+KE2AA+3LR7EAylVyLjNfFOPzpu0m8VNqqg=
Subject key identifier: 49:BA:86:50:82:DC:F8:78:E6:22:DB:F2:C5:F1:D1:3A:3C:EC:22:EA
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 102D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF081E36F64D11EE8DA6E377C4F9AE02.roa
Signing time: Tue 09 Apr 2024 08:47:07 +0000
ROA not before: Tue 09 Apr 2024 08:47:07 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 175.110.76.0/22 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 06:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4141 (0x102d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 9 08:47:07 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6615008b-f98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7b:bd:eb:ce:29:34:ab:39:ca:9a:d0:e8:13:
f5:6f:0d:fc:6f:5f:6b:47:a5:f7:66:ee:43:03:1a:
1f:97:e2:45:3c:5f:60:be:d3:ea:af:46:fc:82:f7:
a9:3d:17:78:26:3d:9d:45:4d:73:a3:87:c6:51:46:
54:bf:9b:1e:10:1b:3e:5d:eb:d6:b2:c4:91:bb:9a:
db:22:62:24:c5:15:14:7f:e2:52:9e:5e:79:25:2e:
ac:b7:5e:10:c7:d1:f1:dc:58:dd:32:60:01:9c:9f:
bb:d6:a7:2d:a9:9e:f0:15:da:6c:61:83:4b:ec:c8:
8d:9f:12:74:f0:c9:bf:e9:cb:1a:c7:ef:be:60:44:
ad:9a:4d:c4:60:41:24:6a:c1:f5:43:be:52:cb:a6:
58:3b:55:e6:75:54:c7:c4:30:54:bc:e1:ce:da:db:
76:bc:46:21:9c:70:5b:a6:20:e8:e1:c6:f7:8b:b5:
8f:4c:e0:5a:14:e4:26:ec:74:fc:b6:e6:53:dd:17:
88:a7:30:0b:11:e5:95:08:79:88:9b:69:b3:f0:1e:
cf:84:b7:08:03:d4:8f:83:bf:45:b9:eb:b4:59:88:
9c:54:15:32:61:64:47:92:39:5d:40:ab:dc:d3:a8:
7a:5f:ff:27:78:27:ea:b7:04:7d:77:de:13:d2:7e:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BA:86:50:82:DC:F8:78:E6:22:DB:F2:C5:F1:D1:3A:3C:EC:22:EA
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF081E36F64D11EE8DA6E377C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.110.76.0/22
175.110.104.0/24
175.110.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:13:54:d1:32:13:61:90:81:dd:e5:10:ac:c6:3b:7a:52:7a:
b1:f2:23:73:ca:08:08:df:12:6e:c2:0d:61:43:a4:af:0a:ed:
48:8c:c4:54:e7:3c:ae:6c:b1:c9:31:d5:17:e0:a1:c1:6a:89:
df:3a:4d:1a:b9:25:4d:c2:44:38:08:3b:c3:75:9f:ac:5b:f7:
53:fb:ab:84:1f:7e:2e:e4:ed:95:fa:cc:61:ea:3b:89:bf:bc:
8e:d6:3e:b9:6f:52:a8:60:5f:be:f5:a9:f7:ed:69:ad:30:76:
c8:17:1e:3c:ca:c3:0f:88:69:74:a0:0e:4c:55:8d:a5:2b:29:
a4:17:cd:e7:ce:a8:b1:a9:1b:58:4e:65:9c:31:66:d8:ff:ad:
fb:17:29:2f:55:3f:bc:4e:01:00:08:ff:96:1b:35:f8:82:b3:
dc:f8:53:28:63:33:54:a1:f4:05:19:af:df:71:0a:75:c3:7c:
a3:56:50:2d:bb:df:a8:7b:72:f0:35:f0:23:de:9b:5e:85:31:
c0:0b:39:c2:e3:c5:44:0c:41:0b:aa:8d:77:16:df:56:a1:49:
41:81:15:e9:7e:63:49:5e:1c:ca:5c:53:63:72:6e:78:26:31:
d3:2f:d5:7a:a1:04:6d:54:68:a9:fa:af:00:e1:26:29:ef:ca:
72:e2:a2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 09:00:18 2024 by rpki-client on console-fra.rpki-client.org