Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F23C76440D6F11ED90569286C4F9AE02.roa
File: F23C76440D6F11ED90569286C4F9AE02.roa (raw, json)
Hash identifier: gVU2hGIhaMClgzANZllQyBd4mnjxA4lJ97mQGGpyMpk=
Subject key identifier: 2B:20:31:A9:D6:FB:29:D3:0E:C1:1F:07:CC:9B:82:37:69:24:E7:D3
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 088C
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F23C76440D6F11ED90569286C4F9AE02.roa
Signing time: Thu 04 Aug 2022 06:10:00 +0000
ROA not before: Thu 04 Aug 2022 06:10:00 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 54600
IP address blocks: 115.167.0.0/24 maxlen: 24
115.167.1.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.24.0/22 maxlen: 24
115.167.28.0/22 maxlen: 24
115.167.116.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2188 (0x88c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Aug 4 06:10:00 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62eb62b7-f297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:37:a3:ce:21:a3:2d:05:14:a9:08:36:ab:
9b:ec:8b:6a:7c:9a:85:84:d0:a2:ca:e2:0f:c0:62:
f0:5d:72:2a:fe:5d:d9:0f:dd:41:ff:89:61:24:ef:
fa:24:48:00:0c:a2:a2:6e:ef:df:16:94:ee:9a:30:
da:9c:c9:14:5e:ad:fd:3e:dd:8a:f7:2d:01:04:37:
59:28:75:95:1e:08:7a:1f:1c:74:4c:7d:27:dd:1c:
04:09:4d:bf:b0:3f:7a:c1:53:35:32:40:cf:d8:5b:
a9:8c:08:96:fb:e4:40:20:68:d7:0d:c4:12:9e:40:
40:dc:80:74:d0:6a:09:83:40:68:02:f1:c6:63:8b:
51:60:0c:19:85:b2:c1:b6:0a:22:2c:af:86:2e:08:
0c:2b:f9:5d:65:0c:90:84:a8:40:ac:d9:18:3f:03:
15:bc:8c:63:86:6f:b0:3e:7c:f7:3d:65:df:e9:d5:
55:19:72:78:35:b7:81:e8:0f:51:46:24:13:82:1a:
db:8f:35:dc:be:49:60:5a:e4:e0:88:e6:a8:b5:cd:
1b:fa:6e:49:9b:2a:ef:44:7c:6c:21:1b:6a:be:f7:
2e:1e:67:6a:d9:fd:1c:79:87:66:31:dd:a3:d4:9f:
f8:dd:cf:43:29:d9:f5:18:ca:db:58:63:bd:1b:77:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:20:31:A9:D6:FB:29:D3:0E:C1:1F:07:CC:9B:82:37:69:24:E7:D3
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F23C76440D6F11ED90569286C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.0.0/23
115.167.3.0-115.167.6.255
115.167.24.0/21
115.167.116.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:76:4f:0d:4b:51:24:dc:59:4a:7e:3b:e5:13:5c:5b:56:ae:
e7:14:73:ac:1d:07:3f:30:5e:c9:5f:58:7e:12:8c:b2:e1:da:
c0:5e:40:92:a8:fe:8f:31:98:5c:87:0c:7e:a4:0b:cc:c1:47:
35:0a:94:0d:aa:36:88:5e:33:75:6b:2b:d6:50:d3:28:a2:c3:
f2:b6:05:3d:41:e5:41:a8:6a:d3:e5:d8:a1:60:02:1a:56:d6:
4d:7f:de:96:ce:cc:ec:a2:71:7d:aa:f1:cd:e9:22:4f:9f:b2:
14:d3:bd:ef:3e:e0:5b:dc:4a:ac:1e:3d:e3:56:0e:be:e9:4e:
a7:5f:c9:a5:b8:69:b1:0f:81:be:71:10:f2:ee:0e:53:2a:44:
53:f6:59:27:50:84:86:2c:b1:5a:a6:91:71:58:9e:a1:e8:76:
ea:77:f8:8b:64:6e:a3:dd:88:ce:46:46:94:f1:df:32:a6:74:
62:7c:6d:4f:1d:02:23:c2:8a:48:8d:2a:73:12:e3:0d:20:2c:
29:1f:b7:1a:51:60:bf:d0:22:60:82:b5:0a:8a:c7:5d:c3:21:
d5:77:c1:f9:15:ab:91:6a:fc:7f:37:09:42:ea:b3:6c:5c:c9:
80:97:7b:84:1e:32:7c:90:4b:f8:e7:c0:d2:c8:14:8d:ea:9f:
53:bb:29:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org