Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/189B8CDC2AB611EC93861F65C4F9AE02.roa
File: 189B8CDC2AB611EC93861F65C4F9AE02.roa (raw, json)
Hash identifier: HKmBzjw6nW3KkOxdYtm+7VxaLnkYajY0b5qfyeVNvrs=
Subject key identifier: F5:0F:EA:9B:FC:7A:51:9B:7F:27:D4:EE:5A:A3:6C:60:96:60:40:41
Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial: 3404
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/189B8CDC2AB611EC93861F65C4F9AE02.roa
Signing time: Tue 06 Dec 2022 14:40:42 +0000
ROA not before: Tue 06 Dec 2022 14:40:42 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 4652
IP address blocks: 122.155.252.0/24 maxlen: 24
122.155.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13316 (0x3404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Validity
Not Before: Dec 6 14:40:42 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=638f546a-4021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:a8:fe:45:3e:91:ed:e8:e0:46:a0:2e:b7:
80:ba:04:d1:81:4e:f3:8c:ed:a6:92:0c:71:bf:5a:
0c:25:c5:a1:97:8a:b4:03:ee:a9:cf:f4:c3:ff:f7:
e1:4d:71:83:2e:94:ad:7b:19:71:c5:bb:93:f1:76:
ba:9d:7e:71:8d:fb:96:79:4a:93:fe:e3:4b:0c:d8:
16:09:35:fe:6a:4a:5a:4f:ef:65:50:1d:4e:1c:88:
34:2d:e4:17:78:e1:b5:c2:46:52:c5:ab:7d:ff:85:
c1:de:c3:dd:5d:c5:2b:32:87:ba:5c:b0:25:18:ff:
46:b2:80:fc:fc:8c:35:38:ed:db:7f:c0:a0:83:02:
9a:08:d4:ab:50:20:86:f1:19:8d:c4:3c:62:83:de:
63:10:67:8e:a8:75:31:70:65:33:e1:b7:b4:0b:b9:
0c:11:d4:4e:91:af:f2:4b:bd:55:59:96:45:04:7a:
9a:e1:5c:d2:ec:87:46:fe:01:6c:f9:2a:6e:01:69:
82:94:1c:5f:b8:b8:45:07:b5:2c:99:12:4c:4a:ee:
ed:32:dc:53:1c:fd:1a:ee:77:d8:77:f4:f3:86:50:
d2:69:03:88:af:3d:28:d6:e5:6a:49:14:94:cb:5a:
14:2c:b9:c6:11:f0:45:21:2a:05:34:38:f4:68:79:
70:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0F:EA:9B:FC:7A:51:9B:7F:27:D4:EE:5A:A3:6C:60:96:60:40:41
X509v3 Authority Key Identifier:
keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/189B8CDC2AB611EC93861F65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.155.252.0/23
Signature Algorithm: sha256WithRSAEncryption
79:12:9f:d2:4b:2a:09:c7:8a:c8:e7:d4:1e:21:d0:9e:be:fc:
80:fb:6b:31:4e:09:4a:2b:2d:b3:a7:f1:eb:ff:b4:9b:3e:08:
ef:3a:40:37:8c:4f:55:85:2b:75:e8:98:56:7f:bb:07:7c:9f:
be:d1:06:40:54:dd:58:06:b6:ed:f6:9b:27:b7:30:9d:67:78:
59:81:54:5a:db:97:a9:c8:52:0f:fd:50:93:23:0d:3c:47:b4:
8e:c5:94:15:e9:b1:b6:1f:21:8b:a6:56:a9:93:90:09:ce:1d:
99:f5:b7:ef:c8:10:23:83:0f:4e:fc:80:a5:96:95:94:33:13:
a7:c7:11:ae:a0:e7:3d:95:fd:31:ed:7a:9d:f3:dc:47:b9:8a:
90:ce:be:a9:ff:7d:b9:db:45:1e:c6:4a:08:2b:35:83:a3:c2:
69:36:44:7b:73:85:4d:c6:10:9e:b6:97:50:d6:3f:b3:ef:87:
58:7b:cc:ea:f0:d2:a2:30:24:0e:32:88:e5:96:30:59:5b:66:
cb:e3:b8:98:91:55:75:d0:c4:62:cc:f9:3b:cf:9f:a3:37:45:
59:d6:b5:c8:dd:e6:02:30:71:17:31:a8:a7:7e:8d:79:aa:6f:
2e:83:b0:9e:db:e3:4c:40:db:b6:10:33:9e:51:10:cf:78:09:
9a:80:b1:dd
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz
M0E4ODc1MEUwHhcNMjIxMjA2MTQ0MDQyWhcNMjQwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzhmNTQ2YS00MDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxAeo/kU+ke3o4EagLreAugTRgU7zjO2mkgxxv1oMJcWhl4q0A+6pz/TD//fh
TXGDLpStexlxxbuT8Xa6nX5xjfuWeUqT/uNLDNgWCTX+akpaT+9lUB1OHIg0LeQX
eOG1wkZSxat9/4XB3sPdXcUrMoe6XLAlGP9GsoD8/Iw1OO3bf8CggwKaCNSrUCCG
8RmNxDxig95jEGeOqHUxcGUz4be0C7kMEdROka/yS71VWZZFBHqa4VzS7IdG/gFs
+SpuAWmClBxfuLhFB7UsmRJMSu7tMtxTHP0a7nfYd/TzhlDSaQOIrz0o1uVqSRSU
y1oULLnGEfBFISoFNDj0aHlw7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPUP6pv8
elGbfyfU7lqjbGCWYEBBMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE
NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjU0NzUvQUI0NDc5NzIxRDc4MTFFMkFEQjZGMkM0MDhCMDJDRDIvMTg5QjhDREMy
QUI2MTFFQzkzODYxRjY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAF6m/wwDQYJKoZIhvcNAQELBQADggEBAHkSn9JLKgnHisjn
1B4h0J6+/ID7azFOCUorLbOn8ev/tJs+CO86QDeMT1WFK3XomFZ/uwd8n77RBkBU
3VgGtu32mye3MJ1neFmBVFrbl6nIUg/9UJMjDTxHtI7FlBXpsbYfIYumVqmTkAnO
HZn1t+/IECODD078gKWWlZQzE6fHEa6g5z2V/THtep3z3Ee5ipDOvqn/fbnbRR7G
SggrNYOjwmk2RHtzhU3GEJ62l1DWP7Pvh1h7zOrw0qIwJA4yiOWWMFlbZsvjuJiR
VXXQxGLM+TvPn6M3RVnWtcjd5gIwcRcxqKd+jXmqby6DsJ7b40xA27YQM55REM94
CZqAsd0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-fra.rpki-client.org