Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BD78753CB90E11EFB213EE7FC4F9AE02.roa
File: BD78753CB90E11EFB213EE7FC4F9AE02.roa (raw, json)
Hash identifier: r9McVnDKpkpDVWei7dHIjDmnk4lNWhHHyyzmYQjrrgk=
Subject key identifier: E0:68:78:4F:21:52:DA:C3:BF:F2:0C:0A:E5:F7:F8:98:A4:B0:3A:B1
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1F8A
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BD78753CB90E11EFB213EE7FC4F9AE02.roa
Signing time: Fri 13 Dec 2024 04:57:23 +0000
ROA not before: Fri 13 Dec 2024 04:57:23 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 329007
IP address blocks: 175.110.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 04:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8074 (0x1f8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 13 04:57:23 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=675bbeb3-6789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d9:84:e5:89:de:56:61:2c:3a:be:74:e8:d8:
7b:be:59:60:1e:08:56:9e:c2:d4:fc:41:6d:35:af:
ce:e4:e9:9e:83:b1:a4:d5:1b:3c:c2:6e:aa:3b:49:
65:d8:b4:db:2b:39:b2:0e:9a:3c:43:f0:58:76:46:
15:40:be:4a:02:b0:06:3f:10:10:56:68:4b:14:74:
e2:12:23:5c:7d:5a:a9:1d:7b:fa:c2:bb:e5:c1:bc:
6d:f7:c5:ab:57:51:93:bb:6c:aa:89:ab:1d:85:f7:
12:73:ae:31:fd:6d:86:b2:de:b3:a9:88:45:74:fd:
3e:1a:a5:06:1d:ae:42:29:af:0a:c5:c5:8b:0c:72:
ab:5f:a3:0d:06:53:80:d5:31:2e:e8:05:90:bc:38:
f5:fd:eb:66:ae:49:4d:a4:be:84:7a:55:2c:f8:b1:
e0:c8:24:92:a6:f5:5a:d8:ad:8f:28:51:af:0e:01:
a3:f7:dd:35:72:0a:26:d8:09:b1:6f:2c:e4:7e:c8:
4f:85:ee:bc:0d:87:a1:1f:73:ec:40:50:9c:9b:cf:
92:20:28:74:f2:24:6d:a2:a3:6f:99:74:f1:b3:ad:
17:b4:ad:43:02:68:4f:c1:a9:99:b1:54:84:00:9a:
14:da:cb:ca:37:0d:50:83:a1:1d:33:62:b1:79:63:
b3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:68:78:4F:21:52:DA:C3:BF:F2:0C:0A:E5:F7:F8:98:A4:B0:3A:B1
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BD78753CB90E11EFB213EE7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.110.111.0/24
Signature Algorithm: sha256WithRSAEncryption
16:0a:6b:5b:a5:91:1f:9d:1c:c9:0d:db:19:ab:16:97:ba:66:
0f:9d:be:85:50:d4:72:68:f9:aa:4d:f5:ba:e0:f8:10:19:01:
23:e3:75:4f:a6:f0:6e:c5:26:5d:53:a1:dc:49:66:2b:e2:b4:
a2:5c:5b:ef:92:c3:78:79:b5:4d:6a:b6:03:02:09:be:68:9f:
1d:32:35:0d:0d:50:8d:bb:bf:2e:99:ca:d3:37:15:ca:29:6a:
42:b7:45:bb:82:6b:ef:1f:41:e1:94:dd:36:9d:9f:05:f3:0a:
55:cc:9e:c2:a8:f5:98:8c:52:a6:33:3e:45:1b:95:3f:25:05:
95:9a:97:4b:5a:e8:f0:a5:7f:c3:4b:ff:d8:f6:49:97:9c:59:
16:4a:1c:2f:cf:90:d9:0c:bc:33:39:26:02:91:44:34:ba:0d:
6e:4f:8c:ef:cd:8a:88:ac:19:66:b3:f5:2b:9b:a4:88:9e:a4:
d0:cf:0c:f9:7b:bf:e6:58:55:36:77:c1:88:5f:0f:84:b5:90:
38:72:3d:d9:91:3c:95:71:55:fd:3a:2e:f1:dc:e7:43:3a:02:
50:5a:1d:98:de:dd:ba:d4:e6:3d:90:d9:89:ca:e2:ba:20:3c:
0b:08:de:81:13:2a:72:43:87:d2:b8:c8:27:4c:2b:ec:f1:a8:
2b:0b:47:6b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICH4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQxMjEzMDQ1NzIzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzViYmViMy02Nzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8NmE5YneVmEsOr506Nh7vllgHghWnsLU/EFtNa/O5Omeg7Gk1Rs8wm6qO0ll
2LTbKzmyDpo8Q/BYdkYVQL5KArAGPxAQVmhLFHTiEiNcfVqpHXv6wrvlwbxt98Wr
V1GTu2yqiasdhfcSc64x/W2Gst6zqYhFdP0+GqUGHa5CKa8KxcWLDHKrX6MNBlOA
1TEu6AWQvDj1/etmrklNpL6EelUs+LHgyCSSpvVa2K2PKFGvDgGj9901cgom2Amx
byzkfshPhe68DYehH3PsQFCcm8+SICh08iRtoqNvmXTxs60XtK1DAmhPwamZsVSE
AJoU2svKNw1Qg6EdM2KxeWOzPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOBoeE8h
UtrDv/IMCuX3+JiksDqxMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQkQ3ODc1M0NC
OTBFMTFFRkIyMTNFRTdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACvbm8wDQYJKoZIhvcNAQELBQADggEBABYKa1ulkR+dHMkN
2xmrFpe6Zg+dvoVQ1HJo+apN9brg+BAZASPjdU+m8G7FJl1TodxJZivitKJcW++S
w3h5tU1qtgMCCb5onx0yNQ0NUI27vy6ZytM3FcopakK3RbuCa+8fQeGU3TadnwXz
ClXMnsKo9ZiMUqYzPkUblT8lBZWal0ta6PClf8NL/9j2SZecWRZKHC/PkNkMvDM5
JgKRRDS6DW5PjO/NioisGWaz9SubpIiepNDPDPl7v+ZYVTZ3wYhfD4S1kDhyPdmR
PJVxVf06LvHc50M6AlBaHZje3brU5j2Q2YnK4rogPAsI3oETKnJDh9K4yCdMK+zx
qCsLR2s=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:54:12 2025 by rpki-client