Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/D4181596716B11ED9F349A49C4F9AE02.roa
File: D4181596716B11ED9F349A49C4F9AE02.roa (raw, json)
Hash identifier: 3px34S2YnTxrvS1S9Qi61mBWseV6/jqKEKW5f4d7ZWk=
Subject key identifier: FB:BB:6D:BC:01:FD:24:C2:2D:B1:C9:09:E7:F3:BE:02:21:E5:47:17
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 0308
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/D4181596716B11ED9F349A49C4F9AE02.roa
Signing time: Thu 01 Dec 2022 11:32:26 +0000
ROA not before: Thu 01 Dec 2022 11:32:26 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 65001
IP address blocks: 42.104.91.0/24 maxlen: 24
122.15.90.0/24 maxlen: 24
123.63.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 776 (0x308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: Dec 1 11:32:26 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=638890c9-5aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ab:2c:85:b8:d8:44:6f:b3:97:a3:a5:49:69:
4c:92:8f:a1:85:06:bc:7c:d8:a5:ed:a6:ed:71:16:
7d:1b:ad:1a:e7:b4:7f:af:4a:2d:cf:ce:b2:96:ef:
e5:3c:03:60:f5:9c:12:a9:7b:f9:36:8d:2b:48:25:
c3:4a:7b:79:7e:8f:e6:21:53:07:b6:78:f7:33:3e:
52:dc:2d:60:7f:7e:f7:aa:49:3d:45:f1:57:54:6a:
f9:85:69:c1:6f:7c:80:ff:5e:a2:24:60:59:3f:a4:
cc:42:34:be:9a:62:f0:5e:9c:43:9c:b6:1a:82:2b:
96:35:7b:9b:51:66:6d:02:d2:f3:6a:c3:4e:65:89:
ba:c8:e2:bc:7a:8d:bb:a7:d1:06:35:7f:dd:5a:49:
11:76:31:21:00:27:f9:5b:8e:b2:4e:b5:b5:db:a6:
0b:0d:f4:37:b8:c7:55:d9:02:f4:5c:fe:3a:93:c7:
17:43:0a:22:5c:82:82:8c:86:92:1c:da:c9:78:2a:
9b:0b:76:56:90:d9:86:0e:86:73:22:f4:8e:8a:01:
99:cb:bc:83:6b:f9:25:ac:89:93:25:64:2e:f2:90:
6f:b2:a5:a6:e8:0e:8d:7d:75:76:c5:5d:c3:29:88:
c5:04:d6:58:e8:d6:a8:0d:42:ec:6a:04:af:1d:4f:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BB:6D:BC:01:FD:24:C2:2D:B1:C9:09:E7:F3:BE:02:21:E5:47:17
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/D4181596716B11ED9F349A49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.104.91.0/24
122.15.90.0/24
123.63.162.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:96:e4:0f:db:36:ec:e4:6c:dc:fb:b1:b3:79:e7:eb:d8:59:
39:c9:97:f1:e3:02:6f:49:34:1d:5d:b1:96:54:60:2e:46:0e:
36:e5:e1:5c:fd:ef:ab:8b:70:8d:23:f7:49:04:7b:fc:5f:ae:
e9:df:b4:36:83:97:61:c8:5b:14:32:57:b7:27:75:b9:70:aa:
26:77:8e:fa:4d:3e:15:17:a9:e2:a4:d2:d0:58:85:b7:26:d3:
62:16:d3:99:c2:c4:e3:80:2a:58:3e:c9:b5:b5:f3:de:14:d8:
95:2b:cc:de:b3:2a:bb:04:73:2e:49:72:f1:a0:7c:40:6f:fb:
a7:17:70:54:01:5f:a4:fb:44:57:27:5f:c8:c7:24:92:1e:84:
df:49:bf:c9:01:3e:dd:ec:0a:09:69:1b:c9:b0:62:2a:71:a0:
9b:92:26:fa:6c:92:3e:56:35:7c:15:21:c6:38:08:47:af:c7:
ce:01:da:fc:a2:58:ca:8e:52:25:49:09:0f:c6:67:05:12:b7:
5a:90:ab:ff:6e:03:45:e6:ae:43:06:fe:ea:3b:f8:b8:9c:4b:
e8:82:08:01:bc:0e:19:75:33:53:7a:e1:c8:01:52:3f:c2:83:
b4:5d:af:88:0e:7b:cd:25:13:a9:b0:aa:40:0c:67:c0:2b:b4:
4b:c7:c5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:06 2023 by rpki-client on console-ams.rpki-client.org