Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BFF5EEBAD75811ECA8AA5A14C4F9AE02.roa
File: BFF5EEBAD75811ECA8AA5A14C4F9AE02.roa (raw, json)
Hash identifier: 8w+LEuz1cJGgajCn0mNp+pXGLqfOKa4EOE2BjpfJMgA=
Subject key identifier: 87:09:C3:B0:7C:15:46:B1:0C:0F:4B:1C:7D:AE:C0:7E:55:52:1D:2F
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 07BD
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BFF5EEBAD75811ECA8AA5A14C4F9AE02.roa
Signing time: Fri 10 Jun 2022 05:08:15 +0000
ROA not before: Fri 10 Jun 2022 05:08:15 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 115.167.56.0/22 maxlen: 24
115.167.60.0/22 maxlen: 24
115.167.96.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1981 (0x7bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jun 10 05:08:15 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62a2d1bf-b4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ce:00:cf:16:0e:b6:48:b4:eb:cd:83:9a:82:
aa:c2:31:b5:84:4d:f8:bf:b8:79:b7:1b:a4:57:44:
23:bd:6e:1d:33:91:93:85:2f:50:d7:7c:c2:73:54:
39:89:a4:af:cd:f9:69:72:9d:9f:4a:43:74:22:3c:
bf:7d:fe:71:e3:fe:55:15:56:63:34:05:58:1a:81:
59:a6:cf:25:fa:80:55:36:7b:e8:8d:ca:2f:e8:3e:
9d:ac:2b:a2:a3:1d:c9:18:7b:a7:d9:12:ab:8b:ea:
1c:c3:a8:4c:c3:ed:42:d5:02:4d:31:95:7e:e6:7c:
e1:5b:ac:53:f6:2c:c3:5c:ca:59:e9:cb:4f:62:3a:
6b:d1:77:5a:75:a0:fc:f5:28:0e:a6:20:ed:e9:6b:
95:f7:d6:90:9d:a2:4a:c3:6d:f2:42:56:4f:6d:fd:
54:da:a2:ed:84:55:66:7a:31:ad:b8:9c:d8:30:50:
4b:5f:02:fe:69:79:25:a3:d8:e6:d6:c0:ef:c2:db:
ed:6b:6b:87:b1:81:a8:1f:85:6e:31:06:76:c9:69:
12:8c:a8:a7:29:5e:50:ab:3a:87:48:3b:86:7c:dd:
f1:9a:c8:36:c0:5e:47:16:4c:10:8a:27:b8:72:0b:
1e:c1:8f:c0:88:17:fc:18:a6:6f:1e:fe:6c:ea:ed:
b1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:09:C3:B0:7C:15:46:B1:0C:0F:4B:1C:7D:AE:C0:7E:55:52:1D:2F
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BFF5EEBAD75811ECA8AA5A14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.56.0/21
115.167.96.0/22
115.167.120.0/22
Signature Algorithm: sha256WithRSAEncryption
97:fb:c7:f5:5c:c6:fa:78:e8:98:a4:ea:53:21:b5:cc:ed:d3:
3b:d1:40:b5:71:56:6c:e3:de:8d:eb:0a:fb:94:81:0e:93:76:
7c:f1:5f:f6:c1:d0:48:23:a2:7b:6e:09:47:b9:14:f4:95:8b:
fb:bd:ea:a5:73:a3:78:42:fa:96:0c:25:e0:98:8e:cf:24:c5:
3c:e0:84:d3:27:56:d6:a9:e6:54:7b:4c:5f:a4:e6:d2:14:df:
0b:4e:9e:2e:77:86:0c:cd:a3:cf:95:fb:86:b8:be:41:a7:6b:
54:31:d7:9b:bf:31:ae:95:50:20:e4:eb:03:4d:18:b6:35:71:
c1:04:11:d3:5a:e6:aa:7e:50:4a:d1:70:98:b9:53:89:54:42:
7e:11:06:ef:71:10:37:6f:60:0a:66:88:52:17:b5:04:7e:97:
32:40:a9:8b:f3:68:ce:29:0b:e0:c3:35:51:5d:e9:07:fd:7a:
18:06:af:4e:86:af:b5:03:d4:91:2b:4e:ef:b6:9b:af:b0:ff:
62:3e:6a:69:e8:e1:95:45:d2:10:cb:cb:b3:de:be:49:ca:d0:
6b:de:fa:75:e2:cc:78:e6:e9:ea:41:34:e6:19:26:cf:b7:3a:
d4:5e:e5:9b:6b:17:90:e4:e2:5a:85:4e:99:9c:83:ea:b5:dc:
24:dc:fb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org