Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D63A371E43AD11EDAD491729C4F9AE02.roa
File: D63A371E43AD11EDAD491729C4F9AE02.roa (raw, json)
Hash identifier: qcGXtMsfSGcO9Mr8A4v6C1jBjPx+yqjwWKahr0yq/ng=
Subject key identifier: 84:2A:82:FC:83:5F:F9:72:63:2E:BB:6B:38:0E:CF:6E:1A:47:0A:03
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0968
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D63A371E43AD11EDAD491729C4F9AE02.roa
Signing time: Tue 04 Oct 2022 06:29:02 +0000
ROA not before: Tue 04 Oct 2022 06:29:02 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 15083
IP address blocks: 115.167.8.0/22 maxlen: 24
115.167.100.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.88.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2408 (0x968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 4 06:29:02 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=633bd2ae-6557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:0f:0f:9d:fe:58:06:67:fb:e3:4c:98:40:
45:ed:d5:31:dd:9a:1c:cd:1a:aa:9e:1a:2c:d3:06:
13:58:a3:e3:ed:dc:4e:13:02:9e:7c:15:6a:fd:fc:
67:ce:94:d1:ad:62:fa:7f:ed:40:d2:97:61:ee:cf:
40:e4:cf:b1:31:1e:f1:f9:81:3d:4d:99:be:d4:0f:
f9:75:a3:21:61:32:fd:df:38:94:82:69:5d:d1:e2:
cd:68:59:b8:88:20:1b:9e:ce:7e:5d:52:60:59:e1:
04:13:e2:15:a4:24:04:0f:22:3a:56:9a:2e:46:a4:
e5:5a:bc:cd:30:cb:72:59:54:43:87:0c:0f:26:13:
13:f8:c4:1b:6f:4c:11:38:80:ce:00:62:5f:7c:d3:
30:b0:03:37:0d:45:49:52:55:a1:63:ce:b4:3c:b1:
6f:5d:b1:90:61:06:ff:8d:aa:2b:a2:e3:6d:63:9b:
0a:6c:32:8a:93:b8:7f:af:14:3e:02:76:a6:fc:be:
f4:71:21:05:19:b6:e0:1f:74:2e:50:53:3b:35:59:
1a:2f:cf:09:dd:a1:dd:70:c1:e4:53:34:fe:35:68:
88:e2:43:da:bd:1c:ae:8a:eb:cc:15:77:27:ac:71:
f8:92:f6:54:27:20:b7:4b:69:c1:f9:1d:40:2e:5f:
9a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2A:82:FC:83:5F:F9:72:63:2E:BB:6B:38:0E:CF:6E:1A:47:0A:03
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D63A371E43AD11EDAD491729C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.8.0/22
115.167.100.0/22
115.167.120.0/22
175.110.64.0/22
175.110.88.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:11:57:86:5f:30:6f:5d:39:99:00:d0:74:cd:cd:ed:19:63:
69:f2:df:44:a6:8d:fc:98:2f:6b:e0:32:f8:58:da:ef:33:0e:
e6:6d:b7:fc:35:1a:3d:c9:c2:c0:f3:ae:39:4a:4a:6e:ac:0b:
5c:de:f8:6e:de:53:87:c7:09:1d:05:46:b7:21:d1:3c:46:22:
2b:02:c7:94:70:40:4c:4d:8a:b4:86:58:52:f4:94:d2:14:ef:
71:50:e3:e8:c7:b5:f5:2d:f5:e1:0c:3b:93:50:83:50:31:4f:
cf:fc:72:a7:ce:17:05:5c:c0:f8:fa:e3:4d:02:1c:ec:cd:fa:
60:cc:0c:6f:54:8d:d9:77:1d:dc:ca:be:85:7b:7c:2d:45:21:
d1:46:5e:36:38:70:4f:65:0e:cc:07:3d:db:45:54:7e:8a:47:
84:5d:89:46:fa:6c:65:88:60:dc:08:f9:cc:24:95:79:45:5d:
45:11:1d:77:73:ba:c5:ca:53:1d:94:a4:f3:7d:3a:bb:c6:56:
23:1d:64:73:ec:78:26:cf:63:f2:68:bc:5f:8c:71:f9:ff:b9:
db:a0:17:f6:61:19:bf:be:79:97:95:5a:b3:1e:38:a8:11:e4:
92:90:19:d7:40:17:c2:a9:5f:c5:45:49:c2:fc:91:d2:3b:76:
32:80:02:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-ams.rpki-client.org