Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EE4F785406A511ED9C973B2FC4F9AE02.roa
File: EE4F785406A511ED9C973B2FC4F9AE02.roa (raw, json)
Hash identifier: tUmJTzpMkO0m1ylC7yySyzSYx6pjw/gWDnSsNSDX3W0=
Subject key identifier: B5:DB:9B:BA:96:4C:62:DB:4E:A6:0E:99:3D:16:42:F7:D3:72:11:7C
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0836
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EE4F785406A511ED9C973B2FC4F9AE02.roa
Signing time: Mon 18 Jul 2022 14:28:46 +0000
ROA not before: Mon 18 Jul 2022 14:28:46 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 397373
IP address blocks: 115.167.20.0/22 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.60.0/22 maxlen: 24
115.167.104.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2102 (0x836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 18 14:28:46 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62d56e1d-ad48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:4c:5f:71:d4:c4:13:db:53:47:31:1f:81:
97:94:e0:48:4a:01:58:fd:a4:cc:63:3a:19:14:4c:
1f:df:6d:f8:a8:c4:18:67:ef:ec:e8:7c:20:70:ef:
f1:28:5e:c2:f3:59:30:55:32:f7:5b:10:4a:94:d2:
9e:c1:bb:b4:3d:61:e3:0e:48:3f:0b:45:e3:5a:bf:
54:c5:de:71:32:54:6b:f3:f6:9f:cb:9c:00:92:f4:
0d:c8:46:d2:86:5e:1f:5b:f4:70:5f:97:9e:62:4d:
3f:bb:ca:ac:d2:bf:5c:c8:7d:24:cf:06:5a:d5:43:
3c:31:92:70:7d:40:09:9b:40:46:22:1b:0c:5d:7a:
f0:cf:3f:de:ee:88:2e:2f:9e:5f:89:12:ec:0e:df:
16:f3:09:84:98:7b:6c:06:ab:f8:15:2b:da:e1:ff:
af:82:34:71:08:9e:2d:f4:a4:22:38:a4:62:87:d2:
a7:1b:6e:6d:34:af:77:5e:26:1a:d5:38:d8:de:84:
dd:0e:4d:03:94:c6:f0:cc:b0:49:97:41:31:c0:4c:
64:09:da:96:0f:78:0b:bc:ae:e9:83:1f:38:c9:40:
b0:3f:6a:5e:99:35:27:f7:2b:a9:4e:ad:c1:08:70:
d5:6d:9e:33:dd:fc:c7:c6:6b:44:ea:d9:97:81:0d:
0e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DB:9B:BA:96:4C:62:DB:4E:A6:0E:99:3D:16:42:F7:D3:72:11:7C
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EE4F785406A511ED9C973B2FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.20.0/22
115.167.56.0/21
115.167.104.0/22
Signature Algorithm: sha256WithRSAEncryption
91:ec:74:07:18:e6:68:a8:86:43:f9:10:91:d8:f1:77:cf:f8:
28:b2:94:26:80:e0:70:cf:fd:55:4b:01:93:f9:2f:97:7f:9e:
46:e5:33:28:60:86:17:c7:a6:26:35:ed:66:ec:3e:3b:c9:bd:
29:a9:c2:27:60:24:2c:3c:e2:07:fe:cd:b0:b0:59:f7:9f:74:
8a:bf:f6:4b:f1:5a:7c:d7:0f:b9:8c:65:76:65:49:c0:56:30:
2e:ee:9d:2b:af:17:1c:42:0a:61:ff:f0:9a:8e:cb:6f:17:8d:
a7:bc:96:27:95:d5:58:a0:8b:c3:6d:f9:3d:85:67:8c:74:f3:
a0:8c:56:55:3e:60:88:9b:8f:e9:02:e1:71:1d:f1:e8:02:4a:
92:f3:67:de:51:db:dc:31:f7:b4:54:a9:55:e7:92:3f:8e:6b:
19:82:4b:45:f3:55:12:cd:e6:48:d5:d5:a8:59:25:06:a1:89:
56:6b:05:5d:e3:29:41:70:32:f9:e5:03:0c:f8:67:72:41:df:
5a:cb:64:dc:53:7b:c9:af:ec:c0:7c:83:2d:16:23:8c:ca:84:
02:72:83:fb:76:e1:05:9f:22:11:6c:7c:5f:56:30:e0:64:4d:
e4:d8:e6:7e:e9:3c:d7:e5:65:b4:17:00:19:ae:36:fe:2c:46:
40:b4:af:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-ams.rpki-client.org