Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F5A91F0E84E711EDAF972C0FC4F9AE02.roa
File: F5A91F0E84E711EDAF972C0FC4F9AE02.roa (raw, json)
Hash identifier: ZvPB+TQakNYysPMH649lbCr412ePpd5Jn12Quu/OSNE=
Subject key identifier: 64:B7:73:45:06:CA:53:84:46:77:F3:A1:F6:49:CF:C6:CF:33:38:68
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0A35
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F5A91F0E84E711EDAF972C0FC4F9AE02.roa
Signing time: Mon 26 Dec 2022 06:38:51 +0000
ROA not before: Mon 26 Dec 2022 06:38:51 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.0.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.120.0/22 maxlen: 24
115.167.126.0/24 maxlen: 24
115.167.127.0/24 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.80.0/22 maxlen: 24
175.110.84.0/22 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
2400:9560:1::/48 maxlen: 48
2400:9560:5::/48 maxlen: 48
2400:9560:9::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2613 (0xa35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 26 06:38:51 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63a9417b-3541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:19:07:a1:40:88:24:5f:70:f0:90:e7:36:b1:
16:01:fb:58:ca:ec:5b:a6:fc:55:3a:45:ab:51:4c:
7b:79:44:ba:20:09:65:68:1d:70:10:28:b8:c6:0f:
7f:f6:7d:d7:15:1f:82:36:b3:48:1a:71:12:4f:4e:
05:98:8b:6b:3b:8d:98:61:d8:26:f0:af:a3:d3:42:
6d:23:63:54:f8:0d:74:04:31:12:c0:c5:40:46:40:
83:01:05:cf:6f:e6:c1:ef:df:61:80:df:2b:e8:53:
c6:35:21:e4:5c:cf:e1:51:2d:08:71:e4:25:21:ee:
b6:4b:cc:3f:d0:33:7f:b3:ff:63:68:c5:8a:95:10:
0a:9c:03:69:07:2e:de:99:b8:e6:de:5b:32:05:0e:
ae:dd:c1:91:b0:bc:b6:41:fc:01:98:8b:bb:a6:0c:
7d:b6:17:d7:c2:63:5b:c9:95:93:63:42:64:31:7f:
6e:40:09:65:96:cb:63:a8:8f:54:88:07:2c:c3:82:
d8:c3:55:b0:5a:e4:99:bc:05:f9:ed:a8:d2:aa:9b:
92:9e:f9:9f:92:e9:a3:f2:19:78:52:4b:b6:91:75:
25:92:b7:fe:dc:6f:75:18:49:40:04:2d:43:ce:08:
48:a3:fe:92:c2:9e:c4:3b:7b:d0:d9:d9:f9:69:1f:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B7:73:45:06:CA:53:84:46:77:F3:A1:F6:49:CF:C6:CF:33:38:68
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F5A91F0E84E711EDAF972C0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.0.0/24
115.167.2.0/24
115.167.4.0/24
115.167.72.0/22
115.167.77.0-115.167.78.255
115.167.120.0/22
115.167.126.0/23
175.110.64.0/22
175.110.80.0-175.110.91.255
175.110.96.0/24
175.110.105.0/24
175.110.107.0/24
175.110.111.0/24
202.92.16.0-202.92.21.255
202.92.23.0-202.92.31.255
IPv6:
2400:9560:1::/48
2400:9560:5::/48
2400:9560:9::/48
Signature Algorithm: sha256WithRSAEncryption
84:d5:87:ca:f4:6b:c6:08:2e:e5:51:39:12:df:b9:4e:ff:cb:
8a:03:41:11:ff:34:71:10:90:3d:ee:46:69:49:46:d9:d6:12:
98:64:b3:86:fb:b6:3d:05:50:da:2a:0f:0f:69:9b:54:cf:30:
11:e0:48:bb:bc:93:1a:00:09:79:06:01:94:e1:6a:22:29:a9:
e8:f7:f2:6a:e6:d1:62:74:8d:c9:bd:a8:5f:08:11:6c:90:89:
55:87:9d:d7:97:70:84:94:62:67:0b:28:2f:81:5b:fa:c8:d8:
f4:a5:96:a0:2c:f1:18:5a:9e:c5:3a:3b:b8:f1:91:b1:3f:2d:
0f:17:72:71:43:81:ee:e0:8a:ab:67:89:5a:12:3a:bb:96:bd:
a7:d3:38:f8:de:9d:c0:fc:bd:92:ef:0b:a1:28:8f:bf:f1:3d:
b1:c2:be:c2:4a:e7:9b:7f:61:0c:c3:32:ca:78:ca:8e:3b:d8:
2b:4c:75:f0:a8:f8:90:20:3b:80:00:34:d7:01:a6:a3:17:a9:
d4:90:28:85:54:c4:f1:5a:07:93:0e:a4:7b:0d:b8:69:c1:4c:
c2:70:c3:0e:a0:f3:f1:be:f9:38:80:14:f3:bb:c2:33:e1:55:
38:94:07:79:87:87:5b:8a:f5:6a:49:da:a8:59:78:a7:c9:c9:
6b:a2:01:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-ams.rpki-client.org