Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DD1CC0289A6011EEA5B50D32C4F9AE02.roa
File: DD1CC0289A6011EEA5B50D32C4F9AE02.roa (raw, json)
Hash identifier: LpP+t8S9tWCvLzMr1RknpeLgSLNlgQyGwJnb4Jgaizw=
Subject key identifier: 6E:78:62:46:46:EF:A9:10:E6:7B:9B:69:54:8B:BD:FE:D2:82:BC:4C
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0E61
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DD1CC0289A6011EEA5B50D32C4F9AE02.roa
Signing time: Fri 15 Dec 2023 07:50:34 +0000
ROA not before: Fri 15 Dec 2023 07:50:34 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 115.167.1.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.60.0/22 maxlen: 24
115.167.104.0/22 maxlen: 24
115.167.112.0/22 maxlen: 24
115.167.116.0/22 maxlen: 24
175.110.68.0/22 maxlen: 24
175.110.72.0/22 maxlen: 24
175.110.76.0/22 maxlen: 24
175.110.80.0/22 maxlen: 24
175.110.84.0/22 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.104.0/22 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.152.0/21 maxlen: 24
202.92.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3681 (0xe61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 15 07:50:34 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=657c054a-ded0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6f:97:80:f5:4a:7d:f3:82:97:c3:85:50:fb:
0d:cc:c4:b4:cd:93:0d:06:3f:5d:8d:e9:1b:cc:f7:
44:f8:5b:1b:21:f5:b2:f3:dd:5c:d3:1e:07:64:d7:
5a:6d:a0:a4:61:ed:21:49:49:8d:e7:10:70:8d:3c:
aa:f9:13:c3:1f:00:4c:5b:46:4d:d0:65:96:87:92:
ed:0d:3c:04:de:ca:6c:e9:41:0c:7e:07:7b:48:31:
5a:a1:72:81:60:fc:55:4a:d4:09:85:1f:e2:cd:1e:
cf:41:41:7f:0c:17:97:d9:61:e9:a2:e6:8f:bf:41:
e6:ab:af:61:01:89:1d:0c:0b:f6:18:d9:74:88:53:
ae:fc:3f:68:c7:b3:52:d0:62:92:c9:9f:cf:8f:12:
49:bd:87:2a:88:40:4c:c9:ab:43:2b:ab:c9:0c:ec:
e7:d6:71:18:67:7e:cf:2e:cb:fd:0e:9c:f0:87:28:
d3:4f:3d:67:9c:d3:2a:ca:92:b2:e1:ed:0b:df:b1:
31:73:b8:12:63:0d:e3:a8:1b:03:4b:46:40:ae:8d:
0c:b6:b9:23:bd:6b:f6:16:c0:84:09:a5:44:52:33:
38:f4:64:c0:72:59:0e:74:13:dd:0e:a5:c2:ff:be:
91:97:1a:1b:7b:c4:35:e5:fc:36:8d:95:46:25:d9:
91:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:78:62:46:46:EF:A9:10:E6:7B:9B:69:54:8B:BD:FE:D2:82:BC:4C
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DD1CC0289A6011EEA5B50D32C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.1.0/24
115.167.16.0/22
115.167.56.0/21
115.167.104.0/22
115.167.112.0/21
175.110.68.0-175.110.91.255
175.110.104.0/22
175.110.111.0/24
180.178.152.0/21
202.92.20.0/24
Signature Algorithm: sha256WithRSAEncryption
54:61:08:f6:82:7c:6d:f0:7b:08:51:9d:18:e8:40:6e:d0:fc:
8d:79:b7:ec:7b:79:b6:a3:cc:6a:b8:46:c7:96:c9:e9:bb:73:
57:b9:6d:76:13:71:36:d8:1c:ff:58:e2:c0:aa:b5:c8:a1:84:
07:1d:4c:38:68:9f:41:3d:87:57:c4:05:e9:92:2c:3b:02:c2:
d1:d1:a2:0e:f0:72:dd:95:31:ba:2f:e1:ce:2c:c8:f1:b3:7c:
2e:ca:6f:d7:7c:16:a6:fc:f1:29:69:2a:6b:3b:e9:4f:4e:b0:
ab:6e:ee:b8:6a:7f:61:c2:59:1b:e3:87:f6:4c:c8:5b:e0:7a:
71:69:67:56:83:6e:4a:8e:69:c3:c4:cb:d0:44:2e:40:12:fe:
9c:2b:ca:4c:56:c1:fb:e2:88:0b:ef:a8:50:08:1e:1b:b6:64:
93:ac:a7:d8:72:71:a3:cb:bf:7a:fa:60:96:bc:91:01:87:5e:
69:79:fb:77:38:d8:ec:58:1c:7c:c3:28:04:dd:4f:9c:40:33:
83:00:43:dd:e7:de:0d:68:e5:15:8b:3a:28:0d:38:58:05:28:
fc:77:17:aa:e3:fc:8c:ef:4f:e3:4a:2f:a9:60:8a:5b:3e:9f:
60:c7:87:2e:79:77:64:f2:db:12:7f:d7:58:86:f7:70:4c:dd:
3a:74:f9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 20 12:06:11 2023 by rpki-client on console-ams.rpki-client.org