Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/6E64AACC494211ECA6E0E21BC4F9AE02.roa
File: 6E64AACC494211ECA6E0E21BC4F9AE02.roa (raw, json)
Hash identifier: 49D5coA1bpTCW4x7Qt/RT3ItEXo3tD7OMzk6mSl5iBA=
Subject key identifier: 04:06:49:C9:37:A0:20:4F:5C:CC:E1:F6:58:FE:74:CB:2E:C4:19:A4
Certificate issuer: /CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Certificate serial: 054B
Authority key identifier: 7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/6E64AACC494211ECA6E0E21BC4F9AE02.roa
Signing time: Mon 22 Aug 2022 00:19:44 +0000
ROA not before: Mon 22 Aug 2022 00:19:44 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 30058
IP address blocks: 43.255.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355 (0x54b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Validity
Not Before: Aug 22 00:19:44 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=6302cb9f-009b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:54:82:53:8d:19:c2:88:89:76:b1:4a:b7:
4a:86:43:c8:08:df:7b:d9:30:30:aa:36:20:15:02:
c2:03:b3:b4:fa:a4:f9:fe:ca:6d:e5:22:69:05:0c:
6b:ae:93:54:c2:d0:ac:ed:b6:da:a7:14:cf:bc:41:
6e:a4:f2:01:68:db:d3:b1:a4:f4:54:e6:61:73:8f:
03:ac:31:73:53:70:d3:cd:0f:db:4c:75:f4:52:76:
96:00:27:ef:74:2f:4b:ec:45:e2:ee:fc:fe:d1:5e:
c3:9b:a3:49:ea:79:00:cf:6a:54:cf:30:04:1d:5f:
e2:b5:d7:4b:b8:42:28:fc:b5:28:58:2e:3d:bc:89:
34:b8:df:8a:dd:43:cb:2f:2d:c9:98:f9:c4:de:36:
19:00:20:6d:7a:50:e3:45:3f:fd:ff:88:e9:eb:37:
4d:99:d8:4c:18:d0:2e:5e:9c:13:73:5a:90:59:d9:
58:9e:9a:64:13:e8:27:77:c4:b3:45:a7:04:ec:58:
0a:54:55:ce:ce:4e:d2:c9:b2:06:7b:3e:21:90:20:
04:4d:0c:be:54:13:57:be:56:cc:dd:af:95:e7:b1:
aa:c5:aa:65:07:36:6a:2f:d2:27:1a:a8:39:52:fd:
58:b5:d9:91:58:8b:b9:20:e0:5b:8f:78:12:ac:94:
1e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:06:49:C9:37:A0:20:4F:5C:CC:E1:F6:58:FE:74:CB:2E:C4:19:A4
X509v3 Authority Key Identifier:
keyid:7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/6E64AACC494211ECA6E0E21BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.80.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d1:2e:4c:b8:23:06:f7:7a:63:7a:3b:c7:94:9a:50:16:9c:
7b:20:c3:55:65:59:a5:54:e8:39:f3:54:c5:24:49:35:c8:81:
d4:f3:af:f7:f7:19:fb:87:fb:04:17:a4:53:10:07:64:ae:ba:
6f:6a:f6:18:31:4f:8d:52:47:39:97:80:2f:43:4c:3b:37:3b:
a4:59:b2:06:4d:a5:f2:1c:a6:e7:ac:f0:af:f0:d3:c1:b3:89:
9c:1f:87:a8:23:10:dc:5f:de:e7:48:5f:7e:a6:da:ac:35:14:
64:7f:9b:7e:0e:7e:5c:ea:ba:44:b7:ad:61:01:df:6f:d4:6a:
58:98:97:c5:13:75:13:84:86:77:17:04:56:56:43:1e:0c:a6:
f1:0b:22:ff:a4:04:ca:8f:f9:62:53:2d:18:87:65:f1:5b:b9:
e5:d9:f0:37:cb:38:a4:d7:02:79:a4:ae:d7:33:68:bf:a9:5c:
d7:5b:0a:b0:98:33:af:e5:24:50:3a:f6:a9:a2:99:aa:d7:09:
90:b2:a5:c8:ce:ea:33:8e:18:ff:db:d4:b5:4a:6d:b3:4f:95:
46:23:d5:c4:e3:45:56:a9:f1:f1:75:67:91:90:b3:c1:ff:2e:
f8:4e:ec:f8:f2:9b:d6:83:26:54:42:bc:6f:fa:c0:c0:ce:4e:
12:7b:72:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-ams.rpki-client.org