Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FCF81F40058A11ECA0A2F57DC4F9AE02.roa
File: FCF81F40058A11ECA0A2F57DC4F9AE02.roa (raw, json)
Hash identifier: 2GT2z3/f1Eg4kWgGGgo05xxlxRCP+HhW+UXrMGJoZ+E=
Subject key identifier: 6A:5D:E4:A8:86:09:4D:3A:E4:69:D6:EB:91:B9:06:53:08:B8:F8:ED
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 07A4
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FCF81F40058A11ECA0A2F57DC4F9AE02.roa
Signing time: Wed 01 Jun 2022 11:27:33 +0000
ROA not before: Wed 01 Jun 2022 11:27:33 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 9387
IP address blocks: 175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1956 (0x7a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jun 1 11:27:33 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62974d25-ddc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:b1:1c:25:5f:6a:9a:87:b7:40:9a:82:4f:
67:40:a3:a3:9c:b0:d0:79:0c:aa:83:ff:02:4f:e3:
2d:2e:34:63:dd:4f:cb:40:02:dc:57:1e:15:1f:f1:
d7:05:04:7a:01:2d:0f:6c:44:21:42:c7:19:14:c6:
26:39:71:5b:53:dd:c6:aa:9e:34:04:48:66:0b:b8:
74:6a:66:d7:38:63:eb:7c:72:7b:24:94:02:d1:ae:
57:db:d2:2a:19:30:45:1d:53:c2:3d:e5:0e:03:81:
2f:e4:a7:57:2e:c6:a7:64:da:c8:3b:08:b2:df:04:
ff:4f:68:97:ab:90:57:c6:f3:1c:0a:9c:88:11:94:
88:37:0b:84:2d:08:c1:4e:c6:f8:37:08:2f:b3:97:
c4:6e:14:6d:a9:90:05:32:08:aa:e6:15:9f:68:54:
9f:eb:65:6c:c7:59:89:d2:0b:a3:1c:fe:f3:d2:9a:
1f:6d:3d:11:e0:9a:40:3a:90:65:09:0a:d2:69:9c:
cc:42:44:ec:a7:53:63:60:fd:fb:4b:b7:31:04:36:
e9:0d:f5:fe:57:62:48:83:5d:79:9b:bb:06:2c:d8:
fe:c2:5b:18:cb:ff:d1:93:a9:f9:6d:2d:2e:bf:ee:
50:74:ac:64:3f:00:ca:56:21:61:9f:b7:3b:33:95:
2a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5D:E4:A8:86:09:4D:3A:E4:69:D6:EB:91:B9:06:53:08:B8:F8:ED
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FCF81F40058A11ECA0A2F57DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.110.105.0-175.110.107.255
Signature Algorithm: sha256WithRSAEncryption
1a:6d:bb:b6:5d:12:2d:fc:13:6d:20:8d:d0:45:2b:c9:25:8f:
4c:1a:66:18:30:e0:cc:93:e8:9a:9f:85:b1:0c:b2:e5:fa:e5:
65:14:0a:52:fb:41:87:40:b6:e2:77:50:91:b4:f3:4f:23:f2:
94:0d:75:17:ff:c7:fd:8b:cd:4d:2c:eb:5f:d2:c5:6d:29:ea:
08:88:fd:4c:11:1a:14:4b:b5:a0:fd:2e:cb:07:64:04:66:da:
75:8b:ac:75:ff:b6:1e:1c:31:5e:17:ac:13:77:ce:90:91:7c:
5c:b2:82:ac:cb:34:50:0e:44:c2:5c:52:26:67:ba:68:41:56:
01:31:f6:9f:03:3b:3d:b3:3e:9d:d3:49:53:ef:4b:aa:b5:09:
4f:5d:60:2c:dd:b6:69:ef:46:85:62:33:3e:73:ea:35:bd:d2:
84:22:6d:60:22:14:f1:13:43:a1:f1:b2:04:3f:bf:08:0a:11:
11:e5:ba:91:1e:86:de:f5:99:15:4f:ba:40:cd:3c:4c:be:d4:
44:48:6d:83:dd:53:0f:ca:d8:68:2e:f3:4e:0d:2d:22:9a:e5:
30:d7:3e:ac:b7:44:cc:6a:fd:a1:ce:0a:1a:13:12:43:d9:10:
69:53:56:16:4e:ec:38:af:2e:a3:53:58:bf:43:4d:53:8a:bc:
4a:29:25:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-ams.rpki-client.org