Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FE921E78ADDF11EE8FB5B075C4F9AE02.roa
File: FE921E78ADDF11EE8FB5B075C4F9AE02.roa (raw, json)
Hash identifier: 1yzdy1qJxzqJi/82ETdO1Q2aSmqRYfOeO/xOUX306C8=
Subject key identifier: 5A:F1:F6:69:91:2A:10:6B:5D:03:93:76:1D:23:7E:8A:D6:71:CA:68
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0F0F
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FE921E78ADDF11EE8FB5B075C4F9AE02.roa
Signing time: Mon 08 Jan 2024 04:40:05 +0000
ROA not before: Mon 08 Jan 2024 04:40:05 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 115.167.56.0/22 maxlen: 24
175.110.76.0/22 maxlen: 24
175.110.104.0/22 maxlen: 23
175.110.104.0/24 maxlen: 24
175.110.106.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 08:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3855 (0xf0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 8 04:40:05 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=659b7ca5-83a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:6a:00:a5:94:86:fd:f4:7e:e9:f6:de:a8:
a0:f9:3f:f1:c9:62:54:7e:4c:bd:55:1e:ba:df:98:
a7:ab:24:e9:bc:2a:4b:a9:29:ac:96:24:5c:a9:40:
bb:cd:fa:45:7b:1b:30:e8:ee:60:42:e1:3c:40:c5:
13:b5:38:6e:be:14:60:f3:02:8b:19:80:da:34:90:
e8:20:f2:77:35:a7:d9:2f:17:29:cf:0d:28:c6:f2:
72:71:78:1c:71:ed:ae:57:57:72:a5:9c:4e:b6:ec:
3d:64:51:e2:78:1a:65:5e:3b:ee:fb:d8:6a:f5:73:
b0:cc:09:90:30:3c:c1:82:9e:09:37:35:c1:4d:fb:
2a:aa:db:b6:5b:81:4f:ae:8d:e0:aa:24:fd:6e:a3:
1f:b2:1c:c8:e1:5b:6a:d3:bd:ce:04:aa:48:bb:8f:
8f:10:46:bc:39:1b:d3:89:11:29:41:d7:9d:35:60:
d7:3d:28:97:1f:1c:5f:92:d1:d4:f6:9e:0e:9d:25:
6d:e1:fe:ae:fd:8c:2c:12:b7:8f:12:b0:f4:d4:14:
2c:0f:f4:35:67:34:48:13:b4:2e:1d:ae:7f:5f:f4:
88:b3:4d:83:d1:f9:34:a3:1d:4d:75:e2:c3:6e:e5:
4a:5d:86:71:21:cb:40:95:fa:ab:40:11:13:7c:ff:
0f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F1:F6:69:91:2A:10:6B:5D:03:93:76:1D:23:7E:8A:D6:71:CA:68
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FE921E78ADDF11EE8FB5B075C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.56.0/22
175.110.76.0/22
175.110.104.0/22
Signature Algorithm: sha256WithRSAEncryption
34:8b:2d:52:ae:35:d6:5c:9c:0c:48:94:00:46:db:08:21:c7:
1d:58:9a:8c:a8:43:ae:31:94:06:92:98:73:4e:65:1d:73:34:
87:45:9d:d5:bb:06:94:c8:5e:a1:05:23:18:26:cc:50:19:b7:
ad:c0:49:e8:85:41:f1:14:37:e9:85:ef:bd:73:5b:b1:43:a6:
51:91:b9:8c:f4:19:33:f7:49:d7:ad:17:a1:6a:24:53:1f:9b:
67:b4:ab:de:6a:64:fd:a2:28:07:f6:99:e8:2f:e3:9c:a1:60:
ba:79:d2:0c:fa:92:ae:1e:68:f8:e4:66:13:16:7e:89:ae:1c:
a2:40:09:61:41:8e:c9:87:be:12:8c:60:d3:2c:30:c7:6e:08:
c4:e6:9b:fd:cb:a7:f2:bd:25:14:9e:f1:11:28:6e:ce:1b:a4:
c6:fa:19:64:72:fb:23:44:7f:57:69:01:cc:1d:ac:d1:3d:e9:
e1:44:87:92:b4:84:2f:d8:30:b1:7f:84:03:61:f6:21:c3:71:
df:8d:a1:e0:a9:c6:b5:7d:9f:af:de:75:0b:73:d8:4d:e2:3e:
06:79:45:3f:74:8d:7d:12:2e:f7:3a:41:74:91:27:96:56:6f:
69:83:ac:4b:2e:a9:c8:0c:55:e1:3a:f5:eb:47:61:dd:42:f9:
c7:25:80:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 12:45:25 2024 by rpki-client on console-fra.rpki-client.org