Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/38E9176402D311EFB9E2A81DC4F9AE02.roa
File: 38E9176402D311EFB9E2A81DC4F9AE02.roa (raw, json)
Hash identifier: JSJnJunUi3/sV1zruVq7DPv3vPvu3ZTt4tszV94odow=
Subject key identifier: 1E:10:49:BD:71:48:D0:E7:B2:C9:AA:6E:BF:CA:AD:71:99:42:20:1E
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 124A
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/38E9176402D311EFB9E2A81DC4F9AE02.roa
Signing time: Fri 24 May 2024 22:32:19 +0000
ROA not before: Fri 24 May 2024 22:32:19 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 131275
IP address blocks: 223.29.232.0/24 maxlen: 24
223.29.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jun 2024 16:53:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4682 (0x124a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 22:32:19 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66511573-ed87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:ff:66:e4:2d:1c:44:69:91:45:91:80:55:
8b:d2:18:a5:c7:d8:73:82:c6:cc:85:88:6c:9b:cf:
22:44:5a:37:f8:bb:ae:4f:ab:cf:12:b1:a0:a6:27:
0b:1d:68:dd:a1:79:4a:ba:7f:d6:09:93:c1:c6:2e:
64:44:03:5e:75:f4:36:8d:59:76:fc:1c:3a:fa:2a:
10:46:4c:91:3e:58:9c:ea:03:4c:91:4a:58:4e:71:
32:26:d0:16:b1:09:1c:a8:22:52:b3:f7:2e:b3:e3:
c5:27:16:d1:82:8d:fc:99:0b:c1:29:e6:61:9f:76:
a4:a3:2a:fc:6d:be:e9:b3:9d:64:05:97:5a:6c:24:
fc:b8:eb:81:42:da:54:99:7a:7e:e6:7b:38:80:74:
ad:ef:1c:9c:6f:9f:2d:65:b4:b8:66:ff:18:66:9f:
23:47:9c:01:99:61:e4:67:e0:ff:86:70:5b:49:4a:
1f:8d:1a:73:5d:66:85:93:7a:69:de:cb:b8:a3:fc:
60:ff:db:4d:34:43:9f:a2:18:f2:57:a9:7b:09:38:
f9:04:9e:c8:56:72:25:f5:8b:02:02:7b:e9:3b:13:
b1:24:e9:53:e8:94:03:eb:a4:00:09:4f:31:55:d2:
a3:f8:85:06:c2:2b:d8:90:aa:a5:e2:69:44:7e:ce:
d9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:10:49:BD:71:48:D0:E7:B2:C9:AA:6E:BF:CA:AD:71:99:42:20:1E
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/38E9176402D311EFB9E2A81DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.232.0/24
223.29.234.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:37:25:d6:c9:63:8b:c7:aa:4b:52:7b:21:be:65:63:9f:cf:
4b:c8:54:49:54:aa:e7:35:2d:8f:af:8b:a6:5e:b9:f5:69:4c:
dd:08:19:07:f3:30:27:95:9b:34:04:35:16:6c:96:8a:b2:dc:
a5:e1:9d:63:38:72:35:df:fc:55:eb:94:fb:29:d9:ec:bf:dd:
53:48:d3:e4:0b:4f:66:d8:0f:30:f8:7c:29:40:19:d9:9e:90:
4b:f4:0e:12:4f:a0:ff:df:29:5a:7f:ee:bf:c5:55:46:2e:63:
64:88:49:39:0d:3a:59:3d:75:6b:7e:85:0a:14:5d:76:69:14:
a6:4b:f9:f5:5e:b7:5c:74:41:0f:85:dc:68:3d:5a:d4:95:aa:
85:85:09:c0:66:04:78:60:cb:e0:7c:f4:1e:5b:99:8b:04:4c:
c3:96:e0:73:b8:b7:8c:fc:0a:4b:46:86:5c:75:39:4e:99:93:
1a:14:ef:07:59:00:ca:bb:9b:71:8c:d9:69:9f:b6:15:49:08:
87:6f:b6:e2:50:e3:80:8d:73:6c:ae:3d:1a:33:d2:db:de:c3:
39:c0:56:4f:17:eb:fb:f7:89:4e:a8:bc:c5:14:1f:5c:0b:77:
01:85:d5:27:0d:16:1b:ca:9e:0a:d7:f4:54:56:9d:31:78:db:
32:fc:da:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:01:35 2025 by rpki-client