Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CE0B33645F1D11ED943B7787C4F9AE02.roa
File: CE0B33645F1D11ED943B7787C4F9AE02.roa (raw, json)
Hash identifier: kobw0lAQVUdh5+RdHW6Jl0PoVS2sd9y0byavDJuk7Ts=
Subject key identifier: 84:0E:D6:48:CF:10:89:88:46:70:B4:B0:B4:DE:00:E5:C1:46:55:64
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 09AF
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CE0B33645F1D11ED943B7787C4F9AE02.roa
Signing time: Tue 08 Nov 2022 04:28:33 +0000
ROA not before: Tue 08 Nov 2022 04:28:33 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 115.167.24.0/22 maxlen: 24
115.167.28.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2479 (0x9af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 8 04:28:33 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6369daf1-7d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7f:79:33:07:7f:47:4e:21:9e:85:ad:d9:00:
fb:ae:4c:99:b5:15:fb:9b:81:19:4e:1b:b4:2c:dc:
04:40:00:bd:70:6f:60:45:3a:45:fb:60:20:3c:ed:
64:25:ec:14:f7:79:07:41:9b:6a:19:a3:93:4f:47:
b7:ff:d8:8d:76:b3:4e:ff:f4:39:00:bc:06:6d:b8:
3b:b6:af:d7:2b:ff:04:ce:af:7f:53:37:53:af:49:
6f:74:77:d6:c0:91:ad:49:92:8c:ff:db:5f:fe:2c:
bc:9f:26:a4:98:35:b2:e1:d7:83:e4:e0:57:60:aa:
85:99:c2:7a:a7:18:1d:aa:5d:de:42:98:f4:57:5c:
08:24:09:d8:1c:07:28:26:0c:f2:7f:ba:e0:23:82:
f1:15:44:34:07:76:17:e7:9e:2c:1d:83:62:93:52:
02:34:ba:30:4b:4b:88:b6:57:b3:4c:38:55:1a:78:
7d:ee:5a:2c:83:ee:f4:d4:f2:a9:0c:0e:ee:74:10:
48:ad:df:ae:a2:ff:24:35:d6:41:08:4a:af:2b:ef:
01:96:a3:bb:55:b8:0f:04:86:ac:3b:15:0f:08:e6:
60:65:bc:ab:67:bf:87:a4:74:00:7f:6b:2d:d5:0b:
58:0c:9c:fc:38:51:d2:61:21:ad:0f:d2:63:5a:85:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0E:D6:48:CF:10:89:88:46:70:B4:B0:B4:DE:00:E5:C1:46:55:64
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CE0B33645F1D11ED943B7787C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.24.0/21
Signature Algorithm: sha256WithRSAEncryption
58:49:77:4c:d4:11:2c:a9:e9:2f:01:6d:26:3a:b5:5e:de:71:
a6:63:8e:1c:f8:3c:ff:84:21:44:45:0f:e2:65:ad:8d:da:f4:
30:92:48:18:a2:c2:2e:ef:94:e1:08:56:15:b7:31:88:9b:ef:
b7:81:bd:98:0c:f1:e3:ee:69:04:f4:d6:62:07:b7:dc:4c:80:
d1:84:6f:f0:de:4a:c9:cc:4a:d5:82:cc:05:53:68:7a:c5:72:
4f:52:95:31:03:3f:f6:d4:59:8b:ba:4b:6d:41:84:2d:41:40:
ed:11:85:5c:d3:a7:56:85:a8:00:b0:16:0e:ec:95:5a:8e:49:
c0:39:be:b7:e1:b1:42:f1:67:92:17:c8:c1:25:ec:e1:a7:40:
c0:b8:d0:75:e4:28:13:ff:ae:64:47:73:db:04:40:02:7f:0f:
8d:df:7c:bf:ed:92:24:26:89:a3:fc:e0:73:fe:93:43:c9:5c:
85:85:53:48:62:12:10:9b:a3:0b:20:55:6a:2f:1a:b7:ee:82:
55:6d:d9:18:1e:00:14:b1:6a:c2:99:58:92:7b:a3:14:70:45:
e7:8c:2e:74:f0:57:69:36:77:8f:85:96:8e:6b:e4:08:bc:5d:
26:71:bb:49:8f:47:96:5b:8f:d7:91:d4:51:44:21:1a:46:01:
14:c4:ee:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org