Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/CF087130636A11EEBD3D9750C4F9AE02.roa
File: CF087130636A11EEBD3D9750C4F9AE02.roa (raw, json)
Hash identifier: by2BPke3xRM+TC6NkzD5pm01s4uW+QC5cMG2U8G3WYg=
Subject key identifier: 06:45:14:16:80:3A:70:58:15:EC:29:2E:0C:C3:05:CC:8A:C0:95:6E
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 16DC
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/CF087130636A11EEBD3D9750C4F9AE02.roa
Signing time: Thu 05 Oct 2023 10:34:48 +0000
ROA not before: Thu 05 Oct 2023 10:34:48 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 134489
IP address blocks: 122.129.86.0/24 maxlen: 24
122.129.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5852 (0x16dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Oct 5 10:34:48 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=651e9148-6439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:fb:ca:05:be:8c:bb:19:16:05:16:e0:90:
cc:a3:ec:53:c8:d8:23:05:08:9e:90:d2:c0:89:31:
bc:a6:bd:a5:66:fc:8b:22:17:01:26:47:62:77:b7:
de:45:ac:86:04:a0:88:49:84:67:f0:f1:db:5c:ad:
1d:ed:40:fc:ed:13:3d:7a:c7:51:39:78:c8:21:97:
c5:ff:59:b5:f9:c6:f7:62:f0:fe:7f:9e:80:5d:c9:
f6:84:f9:82:f8:93:52:5f:e2:f4:31:d2:af:cc:23:
34:3e:19:82:7b:18:2b:04:5d:c1:69:cc:f9:05:03:
b6:b7:31:af:0a:ac:cd:62:eb:bc:1d:a5:07:47:c5:
74:9b:41:5e:96:bd:3a:83:6f:4a:e9:87:8e:b1:55:
4c:97:6e:d2:88:10:98:60:08:d0:38:be:de:94:df:
09:27:18:e2:c5:1e:15:55:41:fe:ef:e9:8a:fc:80:
9f:1b:11:ef:6f:56:75:d8:cd:a6:c3:21:b9:bf:f5:
15:c2:e1:15:b3:b0:22:e7:b1:e5:5a:e4:e4:94:6e:
ee:79:c6:16:f5:34:a6:a8:e5:25:e8:5c:63:8b:92:
50:26:87:7c:c0:f0:20:09:5c:a2:87:68:28:3b:94:
2e:3f:3c:c9:ac:ce:60:2e:48:e5:6f:de:ec:12:87:
14:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:45:14:16:80:3A:70:58:15:EC:29:2E:0C:C3:05:CC:8A:C0:95:6E
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/CF087130636A11EEBD3D9750C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.129.86.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:95:68:d9:92:d3:a8:51:66:46:a1:ef:ad:c7:2d:13:ad:e4:
92:48:05:e3:8f:17:56:50:a6:e4:28:08:72:b2:bf:33:c2:00:
be:9a:1d:7c:67:f6:71:2d:a9:83:71:65:d9:31:27:3a:7c:77:
9c:d6:d4:03:d7:f0:3c:7c:6f:21:43:8c:97:c5:a0:2a:c8:cc:
3c:d2:c9:98:68:49:b6:39:de:f9:fe:2e:6d:64:ac:1b:06:99:
71:4f:17:61:8d:bb:00:69:fc:e9:2e:89:57:08:99:56:ee:92:
10:13:8b:5f:ea:f3:91:af:02:08:d1:08:b6:16:b3:6b:c8:5a:
fb:6f:6f:54:0a:ef:f9:75:8a:0a:02:f0:8b:1e:5d:5d:9c:27:
f5:00:fd:a9:d8:19:d9:21:a2:9c:3a:ca:2c:06:a2:6a:1c:47:
29:7c:34:b0:c9:6a:15:1f:5c:b8:c8:78:40:d2:db:21:79:af:
0a:12:30:4c:cc:a8:ab:28:2b:32:be:88:72:17:6a:85:4b:a8:
7c:ef:a4:5b:4b:fe:54:e2:ec:d3:8a:85:05:9f:66:39:b2:46:
94:85:61:f7:31:80:51:d4:ab:58:88:0b:b9:fd:ab:f1:79:5f:
40:e6:8e:aa:15:09:cc:19:db:77:4c:64:fd:e8:5b:1c:79:d4:
63:d4:cf:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 20:04:09 2023 by rpki-client on console-fra.rpki-client.org