Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/F2ED2544586811EEB376100BC4F9AE02.roa
File: F2ED2544586811EEB376100BC4F9AE02.roa (raw, json)
Hash identifier: +f7IBK4AEqx9P3VzL+3pF5L9GacqQO3018xQfaCWM0Q=
Subject key identifier: A2:3C:1B:04:78:11:64:CC:D5:90:A5:EB:45:11:04:C2:27:16:8C:38
Certificate issuer: /CN=A913383A/serialNumber=9ED7BAF63F554F1FEA570E19BAF69EDED0D9E4BE
Certificate serial: 0A2B
Authority key identifier: 9E:D7:BA:F6:3F:55:4F:1F:EA:57:0E:19:BA:F6:9E:DE:D0:D9:E4:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nte69j9VTx_qVw4Zuvae3tDZ5L4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/F2ED2544586811EEB376100BC4F9AE02.roa
Signing time: Thu 21 Sep 2023 10:23:47 +0000
ROA not before: Thu 21 Sep 2023 10:23:47 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 136106
IP address blocks: 123.253.128.0/24 maxlen: 24
123.253.129.0/24 maxlen: 24
123.253.130.0/24 maxlen: 24
123.253.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2603 (0xa2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913383A/serialNumber=9ED7BAF63F554F1FEA570E19BAF69EDED0D9E4BE
Validity
Not Before: Sep 21 10:23:47 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=650c19b3-830b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:85:11:78:54:d5:1a:b7:3d:d0:73:3e:36:1f:
b8:c5:68:5e:a3:52:a7:1c:eb:6f:59:db:c5:f8:3e:
6d:ba:07:af:f0:fa:e0:3b:08:4e:b7:3f:e7:d8:0e:
59:d0:68:02:2d:d0:f7:38:2a:d5:c2:9b:f3:51:05:
1e:f5:d1:ab:b8:7b:e0:2f:ff:cb:68:6b:12:b7:34:
4c:36:90:2b:02:03:44:b7:28:37:27:6b:ac:db:6a:
b1:6e:7a:04:f9:b2:a5:c6:2e:dd:cb:6b:24:56:b3:
7d:e0:cd:fc:d7:e0:b5:26:01:2c:86:67:0e:86:39:
ba:b5:21:db:87:f1:46:0e:a9:f3:e3:2a:9b:e0:ff:
59:3d:de:a7:39:6b:48:62:00:f8:db:5f:a0:88:99:
b3:b0:b4:af:80:88:5f:31:55:6c:b1:e7:e0:8f:92:
0b:1c:f0:00:a3:69:89:5e:aa:60:ad:f6:79:d3:4a:
ce:f6:40:61:a4:c9:2a:9b:3a:2d:c1:2e:7c:1b:94:
92:c1:5c:4b:fd:20:98:97:a4:24:f3:b8:cf:ad:f8:
67:cd:55:76:1b:15:45:67:96:4d:05:70:04:61:09:
ee:20:9e:28:b5:20:24:d7:9b:4b:b6:71:79:0a:0f:
28:ec:95:98:c9:e7:6b:e5:12:0f:41:8f:19:0f:06:
ff:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3C:1B:04:78:11:64:CC:D5:90:A5:EB:45:11:04:C2:27:16:8C:38
X509v3 Authority Key Identifier:
keyid:9E:D7:BA:F6:3F:55:4F:1F:EA:57:0E:19:BA:F6:9E:DE:D0:D9:E4:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nte69j9VTx_qVw4Zuvae3tDZ5L4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/F2ED2544586811EEB376100BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.253.128.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:30:df:5a:61:ee:7d:43:f8:fb:39:b7:d6:73:ae:49:34:f4:
75:e9:1e:33:5f:cb:a5:51:e9:4e:00:85:5f:fa:20:31:37:d6:
f0:af:1a:f7:bd:3c:8c:c0:f2:d0:83:25:99:c3:21:49:f1:6a:
e2:18:c7:11:e6:1b:d2:f0:52:bf:8c:77:0f:ea:4d:a0:27:75:
75:ab:60:de:d2:1e:41:c3:ac:90:fd:77:ca:2e:46:3c:c4:81:
ec:33:e2:71:b1:a0:51:ee:41:b6:9e:0b:e7:1c:5e:df:05:39:
4e:9b:fa:70:d8:92:d4:c1:71:f8:c2:6b:57:fe:b5:8b:7b:09:
fa:1c:ea:1b:12:d3:ec:04:fb:03:95:af:f0:cc:c3:24:63:b1:
f2:d6:44:74:49:f2:2f:dc:1a:07:39:a1:0e:5d:9a:c6:81:f5:
da:19:c1:02:32:f9:ad:a2:9e:e0:c1:33:b2:72:b6:3a:06:11:
61:87:49:21:d6:10:b4:61:fe:4e:10:9f:a0:03:47:e5:bc:e8:
17:fd:b5:b5:8c:1f:c5:04:ae:a4:20:d3:d9:fc:34:d0:99:53:
b0:a0:fa:e4:aa:95:1f:cc:b8:55:35:64:a7:3f:76:fd:a5:2e:
1c:94:4d:58:3b:11:15:ea:a7:9e:c2:d3:80:e8:a1:70:9e:c0:
94:a3:be:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 15:19:03 2023 by rpki-client on console-ams.rpki-client.org