Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/867BCBFEEFE511EDB7C2D614C4F9AE02.roa
File: 867BCBFEEFE511EDB7C2D614C4F9AE02.roa (raw, json)
Hash identifier: Gl4V6cZ1dXd3X7E1sEK1SLs9JsElr0QRf+3Ax+i5dGQ=
Subject key identifier: EC:B3:2A:22:C7:B5:59:77:18:15:19:00:60:EB:DC:A9:13:6A:D1:40
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0BCD
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/867BCBFEEFE511EDB7C2D614C4F9AE02.roa
Signing time: Wed 24 May 2023 23:25:46 +0000
ROA not before: Wed 24 May 2023 23:25:46 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.2.0/24 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.78.0/24 maxlen: 24
175.110.96.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
2400:9560:1::/48 maxlen: 48
2400:9560:5::/48 maxlen: 48
2400:9560:9::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3021 (0xbcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 23:25:46 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646e9cf9-6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:6c:ce:db:32:dd:b3:4d:45:9d:69:ac:fa:
7f:ba:fd:96:89:03:0c:c2:16:f3:48:66:57:c4:23:
da:da:ac:35:d0:ed:ea:99:03:ab:58:a6:6b:be:f0:
e9:59:53:9d:bf:c8:54:94:42:ba:73:48:49:69:b9:
46:54:73:ca:6d:f6:fc:21:d6:d9:1e:9b:98:6d:97:
80:5c:aa:74:44:73:09:98:4e:53:bf:55:13:4b:45:
74:cf:f3:e2:e4:1f:5b:bb:56:9a:24:18:ea:c0:c7:
64:07:94:f5:38:db:a3:67:25:e4:ef:ed:d6:65:27:
1e:42:5c:e7:58:5d:79:68:f4:f2:3f:0f:4f:1b:c1:
77:92:f4:2e:89:77:1b:6a:4a:75:bd:43:ba:ae:8b:
90:be:34:9b:b6:3d:4f:12:bd:98:07:b9:c2:10:d2:
d0:e7:63:46:93:ba:a9:2e:ed:c6:35:1f:08:bc:e0:
c6:3d:d1:ec:d7:58:66:70:97:3d:18:94:7b:4d:fe:
b1:b2:c7:e6:a0:86:55:e5:92:09:22:73:00:d6:cd:
fe:68:e3:c7:05:25:86:2e:5a:d9:c2:75:8d:a8:49:
1e:03:ed:38:0a:ad:00:6b:26:b4:e8:6e:37:58:e6:
c9:4c:6e:22:7d:70:bd:98:4a:aa:7b:ba:08:41:b9:
bd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B3:2A:22:C7:B5:59:77:18:15:19:00:60:EB:DC:A9:13:6A:D1:40
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/867BCBFEEFE511EDB7C2D614C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.2.0/24
115.167.72.0/22
115.167.78.0/24
175.110.96.0/24
202.92.16.0/23
202.92.23.0-202.92.31.255
IPv6:
2400:9560:1::/48
2400:9560:5::/48
2400:9560:9::/48
Signature Algorithm: sha256WithRSAEncryption
02:d9:e7:56:18:8b:4a:6c:35:01:22:43:da:d4:3f:83:5b:46:
8c:48:6c:3a:8e:17:02:87:92:0d:3b:47:f5:45:69:b8:dc:cb:
36:f6:49:82:4e:4d:f5:47:19:db:f2:82:8c:90:c0:65:41:6e:
d1:ea:fe:8f:23:77:be:84:e2:16:4e:73:df:c0:46:b4:38:96:
b8:03:65:bd:dc:39:a5:44:47:ac:79:27:de:8e:68:1f:07:66:
54:b1:f2:60:3a:2f:4d:0e:85:85:42:0d:92:be:01:a3:42:67:
c7:32:9d:c9:7c:b2:1a:f2:4a:ea:b6:bb:ea:5d:4b:1b:4d:cd:
6c:ba:04:c6:36:0a:f5:c8:a7:7b:4f:bd:9c:5e:d6:5b:0d:71:
68:7f:68:f7:c1:4c:41:76:6e:1f:b3:a6:fa:a9:05:7b:7f:a7:
95:16:7b:94:d9:32:ca:43:a8:8c:e2:76:c7:4f:51:72:a0:01:
4f:a6:3d:b5:26:ae:9b:00:0c:f1:30:11:35:40:11:e4:a2:b5:
93:ef:e9:a2:1c:34:1e:c2:9a:5e:b6:b7:22:9f:82:01:f2:27:
64:68:1f:f3:6f:fa:bf:4d:8e:2f:16:99:9b:eb:20:18:6c:5a:
2f:d2:31:3c:da:cd:28:5f:35:4e:90:b2:4a:a3:f5:35:4c:43:
b5:9a:56:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:44 2023 by rpki-client on console.sobornost.net