Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/24D345D2A9B211EC9C177A56C4F9AE02.roa
File: 24D345D2A9B211EC9C177A56C4F9AE02.roa (raw, json)
Hash identifier: lKCFul3Y79r7Cz+GhNctmbkddEkzO9flwqdT5N9OXOA=
Subject key identifier: 84:BC:93:BF:72:BD:EB:16:32:4B:19:28:19:E8:65:CE:F0:A8:D9:CE
Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial: 02B7
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/24D345D2A9B211EC9C177A56C4F9AE02.roa
Signing time: Tue 03 May 2022 14:53:32 +0000
ROA not before: Tue 03 May 2022 14:53:32 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 398704
IP address blocks: 123.253.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695 (0x2b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Validity
Not Before: May 3 14:53:32 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=627141eb-cf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:11:c4:5c:05:af:4d:46:45:7f:1e:ef:bc:24:
59:48:13:62:f7:91:21:e7:f6:88:0b:e7:bc:32:b6:
83:20:fb:48:67:86:0a:44:64:ff:e4:61:28:1d:33:
9d:1b:a6:62:a8:28:9c:29:de:34:09:55:63:e7:37:
29:82:c5:ec:4a:0e:18:39:cd:26:88:ca:7b:66:d3:
5b:ac:11:bc:88:24:44:b0:da:c4:2a:16:7e:ee:49:
32:e9:c9:96:23:86:7f:9e:6e:13:25:33:d7:35:b6:
aa:9a:6e:5b:4c:2f:02:70:21:2e:e0:f3:0e:bf:4c:
35:3a:0b:2d:57:31:d7:24:eb:d5:3b:3b:20:22:39:
27:df:97:55:d7:08:05:3b:78:1c:c1:dd:3c:fb:65:
59:3f:de:a4:a1:09:4f:e6:b9:a7:68:bb:08:96:96:
ee:09:23:d1:fb:38:c6:c7:17:2e:47:3a:d9:09:bc:
e6:50:cd:af:2b:e1:72:75:ba:77:9a:72:0e:81:ca:
78:4b:aa:fe:07:df:06:2b:f1:e2:68:f6:ca:f7:ca:
49:53:f2:e6:e0:4a:34:b0:dc:e0:86:4f:e3:4f:f1:
e7:6d:4a:8e:ac:f0:44:46:19:94:f0:59:ca:52:8a:
48:a1:41:f5:75:b2:65:a8:98:3c:9c:8e:e4:16:f8:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BC:93:BF:72:BD:EB:16:32:4B:19:28:19:E8:65:CE:F0:A8:D9:CE
X509v3 Authority Key Identifier:
keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/24D345D2A9B211EC9C177A56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.253.224.0/24
Signature Algorithm: sha256WithRSAEncryption
46:92:3f:e4:9a:4f:19:07:3d:f0:c7:37:82:1f:dc:f4:3e:15:
e9:6b:da:5e:24:d5:b8:86:bc:11:3f:70:aa:2e:ea:7b:33:81:
75:48:cb:05:e9:cf:28:08:53:10:d6:7e:0d:7c:70:c8:db:14:
09:1b:65:1c:1a:2b:2a:a5:71:50:74:52:88:02:f2:0c:cb:89:
aa:d4:9e:2a:f8:92:34:dd:9b:5e:ac:d8:5f:df:41:05:27:6c:
17:a3:54:34:2d:16:10:d3:f6:32:e8:ef:d5:7b:5d:80:d4:05:
98:f3:f1:69:63:4c:13:73:2f:c4:3a:92:0a:67:93:a3:51:1b:
eb:e2:19:d5:c7:bd:54:02:ca:fa:c0:dc:b5:63:8a:ab:68:f2:
d8:58:c6:7c:73:3d:8b:43:0a:ec:30:16:50:b2:9b:fc:d0:60:
be:bc:e0:89:2c:a1:0d:64:35:20:b7:34:48:f4:a2:f4:d5:5c:
df:27:1d:73:30:17:2c:e9:ad:7d:1a:33:ae:0f:70:3c:ff:f6:
de:7f:02:f8:67:5a:d5:68:72:b1:f6:a2:15:28:b2:93:58:69:
08:e7:5a:c9:2d:fa:10:f1:ec:df:ea:35:9a:95:1c:8e:2d:1b:
e5:43:56:47:48:dc:26:63:2b:6c:05:00:4a:9a:68:41:5c:85:
38:12:56:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-fra.rpki-client.org