Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CB5C970C0B6511EF96A3F615C4F9AE02.roa
File: CB5C970C0B6511EF96A3F615C4F9AE02.roa (raw, json)
Hash identifier: +dYi9BcqT7tpsIHgWsYXN8l/pylbYd5er/Wvdqq8bCg=
Subject key identifier: 13:AD:64:B9:30:25:38:7F:2C:B7:F1:48:67:9F:2D:B7:1A:12:29:08
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1182
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CB5C970C0B6511EF96A3F615C4F9AE02.roa
Signing time: Mon 06 May 2024 05:02:10 +0000
ROA not before: Mon 06 May 2024 05:02:10 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 6079
IP address blocks: 175.110.68.0/22 maxlen: 22
175.110.80.0/22 maxlen: 22
175.110.88.0/22 maxlen: 22
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 May 2024 06:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4482 (0x1182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 6 05:02:10 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=66386452-210b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1e:23:d8:e6:37:da:fb:cf:bd:b6:7f:5a:fb:
a7:47:9d:c6:ed:da:62:1e:6d:c8:7a:8e:41:61:ff:
15:0e:dd:52:ed:ef:b9:0d:10:a9:6e:4e:ee:95:ed:
6d:c9:b5:92:4a:a9:5a:44:bf:e4:a5:80:26:78:59:
da:f6:6b:e9:45:b3:7d:5e:19:49:5a:f9:f9:19:2c:
b6:7a:14:4e:08:6a:8d:16:fc:64:c6:41:92:d3:6e:
56:03:99:d1:fa:14:dd:0c:65:86:25:55:7e:48:53:
e6:eb:95:d4:31:22:ee:9e:a2:48:f7:c8:46:73:c9:
58:6b:c6:3b:40:24:0d:a2:f7:2a:c5:2a:67:06:d2:
0b:e6:b5:83:4a:8b:05:cd:f5:aa:dc:91:b5:2e:6e:
6f:d1:58:02:96:98:9d:1f:40:43:22:1f:1e:33:25:
a0:a0:db:bc:99:5e:be:cf:b6:85:47:cf:4d:32:97:
21:ab:3f:a1:e3:c9:8f:00:b1:c5:61:88:53:9a:4b:
3d:af:21:34:ba:76:99:1e:0f:31:06:8e:b7:e8:59:
50:2d:cd:46:98:b7:c3:ca:3c:9c:28:6a:90:c1:05:
04:27:7a:1b:2b:00:1a:19:57:31:d1:0a:31:27:a9:
37:b5:73:86:94:b2:17:19:8c:5b:c6:c5:ef:90:30:
c2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AD:64:B9:30:25:38:7F:2C:B7:F1:48:67:9F:2D:B7:1A:12:29:08
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CB5C970C0B6511EF96A3F615C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.110.68.0/22
175.110.80.0/22
175.110.88.0/22
175.110.97.0/24
175.110.104.0/22
175.110.109.0-175.110.111.255
Signature Algorithm: sha256WithRSAEncryption
12:f1:69:6d:5b:5b:69:9c:e3:3d:38:d6:67:e4:da:fa:68:2e:
7b:c9:7d:1e:f2:f1:07:b3:77:99:3d:00:47:a6:ce:3b:6e:dc:
df:6f:84:9b:78:a8:d6:c3:d4:4e:5f:1b:27:f9:bf:76:6f:ed:
03:e3:c1:61:80:20:4b:8b:8c:13:81:06:e1:38:a7:66:0e:fc:
2b:17:d3:44:47:e4:d8:ca:81:9d:af:3e:0a:cd:00:76:55:a1:
b9:16:b6:2a:ed:92:ed:6a:22:d1:74:c9:13:e2:77:6d:2f:ae:
b6:b8:39:fe:46:b5:b5:54:c7:14:db:67:91:95:c9:de:a0:47:
5b:57:e0:e4:6d:0b:76:99:33:52:af:e9:d1:2f:f5:23:95:2f:
cb:37:13:b9:30:14:55:a6:b1:92:50:84:c7:2a:8e:3c:14:6e:
6e:e4:6e:1e:e9:c5:ce:9d:2b:f7:08:f3:da:d1:74:e1:8c:14:
b4:26:2f:63:a9:88:8d:5c:cd:21:e7:28:28:ef:c8:62:02:6a:
8d:b9:78:38:3c:10:4c:5e:b9:fc:d5:bb:a5:94:cf:f8:10:5a:
45:94:79:cc:1f:f4:35:e1:78:e9:0d:d4:6d:87:9c:0a:4a:7f:
52:f7:39:65:65:7f:2a:3f:1d:1e:6c:1f:ef:36:a6:60:ec:96:
ca:cd:8e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 08:02:33 2024 by rpki-client on console-fra.rpki-client.org