Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F89FC03A9BC311ED8D3F9E23C4F9AE02.roa
File: F89FC03A9BC311ED8D3F9E23C4F9AE02.roa (raw, json)
Hash identifier: UhwXkUYqfZwF6jdRTUGjhWUPefA9ZpN9iUmueXmEHi0=
Subject key identifier: 0E:86:84:73:98:38:6B:27:B1:75:70:BE:AB:BE:9A:89:50:9F:2B:FE
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0A76
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F89FC03A9BC311ED8D3F9E23C4F9AE02.roa
Signing time: Tue 24 Jan 2023 08:49:11 +0000
ROA not before: Tue 24 Jan 2023 08:49:11 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.0.0/24 maxlen: 24
115.167.1.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.104.0/22 maxlen: 24
115.167.108.0/22 maxlen: 24
115.167.112.0/22 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.126.0/24 maxlen: 24
115.167.127.0/24 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
2400:9560:1::/48 maxlen: 48
2400:9560:5::/48 maxlen: 48
2400:9560:9::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2678 (0xa76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 24 08:49:11 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63cf9b87-3425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:42:0f:cd:0d:fb:a6:6f:5c:fd:f7:5b:a4:
b6:74:22:f4:56:34:27:de:33:15:3b:e8:e9:8b:45:
bd:62:e3:3a:24:9a:65:cd:29:09:bb:1c:24:3b:a6:
f6:6d:2c:80:a5:b1:38:4c:46:25:03:35:f0:30:0c:
cf:44:2a:69:2f:8e:3e:97:38:79:ac:2e:71:97:06:
a8:4a:38:f6:32:f2:7a:6f:22:b9:6a:64:ae:7e:84:
b5:7d:02:98:64:0a:87:e4:68:3d:fb:24:5e:7d:de:
2d:e4:73:87:f0:d9:8b:bf:f6:22:a1:b2:37:4b:1a:
4d:4d:3a:99:6b:53:c0:b6:0b:4a:67:40:a2:77:5f:
d4:15:8e:d3:59:bc:3c:b8:7e:6a:55:ba:d7:db:9c:
db:3b:6b:28:07:3d:04:0d:de:22:30:2a:49:63:10:
a8:27:60:44:07:08:fc:d2:d9:ce:52:03:17:0c:1f:
83:8a:3d:c4:89:ca:38:6e:ae:4f:22:5c:f4:f3:9c:
84:b1:79:7b:e5:78:39:d8:d5:22:f6:f9:f5:e6:d8:
af:1e:7e:83:dc:e3:6c:31:2c:44:b2:65:2e:56:19:
fb:5e:ba:3c:98:6d:43:90:6b:9f:d3:14:48:5a:d4:
13:38:7c:06:13:d8:10:70:01:97:db:9b:ff:a5:7d:
a6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:86:84:73:98:38:6B:27:B1:75:70:BE:AB:BE:9A:89:50:9F:2B:FE
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F89FC03A9BC311ED8D3F9E23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.0.0-115.167.2.255
115.167.4.0/24
115.167.72.0/22
115.167.78.0/24
115.167.104.0-115.167.119.255
115.167.126.0/23
175.110.96.0/24
175.110.105.0/24
175.110.111.0/24
202.92.16.0/23
202.92.23.0-202.92.31.255
IPv6:
2400:9560:1::/48
2400:9560:5::/48
2400:9560:9::/48
Signature Algorithm: sha256WithRSAEncryption
08:aa:94:d8:3c:68:83:be:cc:5b:ef:cb:db:90:4d:88:f1:d1:
43:26:3e:e2:19:ff:db:54:2f:58:3c:0f:5f:33:8c:90:b5:e9:
f2:dd:f9:de:51:3d:60:75:c4:bc:df:41:88:fd:4e:cc:99:0c:
fb:a1:dc:f6:ee:ba:fb:8f:f9:6e:0e:8a:1d:eb:09:3d:88:7b:
a2:7c:cc:9d:fd:95:19:33:21:13:03:4a:2a:59:8c:09:0e:b4:
38:f3:2a:da:c3:ac:24:c5:c5:46:39:b1:08:c3:6f:12:63:d4:
50:fd:26:9b:80:20:20:0a:25:ae:86:47:54:78:f2:24:9d:9f:
8e:4f:16:d1:97:91:d8:d9:d5:d3:42:89:f5:70:aa:8b:d4:3b:
ba:3f:f9:02:bd:15:8e:d3:5f:95:5a:91:1c:a9:37:ec:f3:6e:
30:cb:cf:71:2f:9b:a6:4e:16:e4:ed:47:64:35:03:ea:77:82:
9b:1d:04:d6:53:58:d0:90:57:49:a0:ce:04:97:d2:1a:4a:27:
f1:02:90:c9:ec:bb:ea:12:28:01:5e:33:c2:5d:d8:39:1a:2a:
67:a3:b9:9c:49:52:0b:8e:af:cd:09:d1:01:e0:0e:fa:c4:0e:
24:6b:0b:15:41:dc:57:c6:5f:a4:f3:c3:0b:21:f0:b9:de:34:
39:2f:ee:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org