Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/47EAFE703D9511EE93E4A52CC4F9AE02.roa
File: 47EAFE703D9511EE93E4A52CC4F9AE02.roa (raw, json)
Hash identifier: hiVEWJMZHrQH+4Z0r6cnxl8bU0zUDjj0Abldne1Bj/g=
Subject key identifier: 01:1A:B1:78:BC:02:95:E1:5F:B1:7F:5E:2B:A9:9D:62:99:E4:1C:F5
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0CB6
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/47EAFE703D9511EE93E4A52CC4F9AE02.roa
Signing time: Fri 18 Aug 2023 07:03:06 +0000
ROA not before: Fri 18 Aug 2023 07:03:06 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 115.167.28.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3254 (0xcb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Aug 18 07:03:06 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64df17aa-1948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:49:37:c6:f0:c6:8e:a7:45:1b:39:f3:0a:06:
d5:36:4d:36:a2:bb:e6:26:3b:df:76:ac:e3:0c:4d:
47:15:d9:88:37:55:6a:56:c6:68:db:a2:65:91:d2:
cf:22:ba:b7:c8:19:c5:3c:4a:6e:da:d1:2d:32:1c:
43:59:13:5c:14:e9:f3:d9:e6:dc:e5:25:7b:77:fe:
a2:2b:c5:ca:c1:d2:33:3a:69:ca:a4:ff:39:fa:15:
73:e4:97:fc:76:d7:97:0a:27:df:cf:c0:42:d5:1f:
ae:2f:0d:27:81:a3:18:f4:3d:3c:bc:29:32:f5:43:
36:da:18:42:39:e8:9b:5a:c3:04:0c:c9:1c:b3:8c:
1c:3b:ad:a3:66:16:44:e0:51:43:6b:fe:e1:9f:4f:
01:9b:39:62:50:28:d4:8e:9b:9c:ae:00:d0:06:55:
10:c4:c0:a9:29:7e:c8:c3:42:e6:58:3d:1e:5d:f1:
96:45:78:66:4d:3c:27:84:c3:7b:73:9e:07:21:73:
5d:bd:44:45:31:c6:21:69:5e:d7:0a:69:68:4e:b5:
b1:95:39:25:d1:b7:7b:50:43:b3:b3:2b:e6:29:71:
ce:2c:2b:09:5a:94:4b:03:4e:a5:1b:f2:ba:d9:4b:
ef:fa:e7:3b:f6:39:00:ca:05:33:94:5d:f3:b9:88:
02:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1A:B1:78:BC:02:95:E1:5F:B1:7F:5E:2B:A9:9D:62:99:E4:1C:F5
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/47EAFE703D9511EE93E4A52CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.28.0/22
Signature Algorithm: sha256WithRSAEncryption
73:a3:35:70:b4:54:e1:8a:8e:13:89:c2:78:8b:44:51:d3:cf:
f6:41:94:5a:d0:db:02:e8:77:dc:2c:69:1d:61:08:59:57:e3:
80:f6:66:f3:76:94:94:a0:79:50:f1:29:d9:02:97:40:2a:f2:
c5:e1:c0:28:62:ee:59:1b:e2:be:3c:65:d8:e4:f6:64:5c:2a:
32:c8:8a:22:79:c0:48:60:71:af:fd:61:6f:24:2d:5f:c7:b4:
86:64:ee:e1:d8:6d:57:54:95:70:f9:6c:2a:e4:9b:a6:e1:06:
4d:fd:0b:c0:d8:0d:e8:f0:d1:a0:b7:62:d7:a4:19:00:34:dd:
e8:99:33:9b:1b:69:f0:1a:b3:1f:74:47:2d:ae:45:99:cf:3f:
c3:1e:70:bd:04:8b:1c:6e:1e:39:e1:f0:dc:59:d4:a2:5c:fa:
52:1a:44:ba:5f:cc:58:a0:c0:62:a5:21:60:d9:b8:01:4f:1c:
6c:be:88:bc:d5:58:6b:21:82:19:08:ad:81:18:b6:22:0e:86:
0a:79:78:8c:71:23:ab:5b:61:64:61:81:57:7c:42:b9:9a:d7:
c9:be:a0:16:87:ee:40:2f:d5:81:f3:22:95:fc:52:4e:6b:eb:
17:49:9d:b0:b1:50:60:d9:40:67:5a:b9:3e:4e:7c:9a:7d:f1:
80:4e:c5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:41 2023 by rpki-client on console.sobornost.net