Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/FEF3DB787DE111EEBB98F41AC4F9AE02.roa
File: FEF3DB787DE111EEBB98F41AC4F9AE02.roa (raw, json)
Hash identifier: fIu8YAtOM5v/qB3rJLICbv6nI8s/GSUzpsIRjViPP8E=
Subject key identifier: 06:00:01:44:DB:AA:BD:F6:EA:47:C4:75:84:C1:7A:BD:58:92:31:0F
Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D
Certificate serial: 09B6
Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/FEF3DB787DE111EEBB98F41AC4F9AE02.roa
Signing time: Wed 20 Dec 2023 06:31:40 +0000
ROA not before: Wed 20 Dec 2023 06:31:40 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 2914
IP address blocks: 202.6.248.0/24 maxlen: 24
202.6.249.0/24 maxlen: 24
202.6.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2486 (0x9b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D
Validity
Not Before: Dec 20 06:31:40 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=65828a4c-cc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:de:df:4a:ed:c2:54:12:0d:1b:6e:5c:f5:91:
9b:06:a8:45:1f:d2:35:1d:28:56:b9:fd:89:3b:6a:
b7:ef:89:aa:71:bb:c9:76:57:a3:c3:4d:fb:55:61:
86:30:37:3c:cf:f9:b1:82:25:35:09:fb:c5:36:46:
b5:e3:fb:fb:75:a8:8a:70:a8:81:c4:e2:3e:31:e0:
9c:cb:47:bf:7e:10:d7:14:c5:17:44:c3:d2:61:4e:
d5:a2:1f:25:89:2c:0c:49:b0:da:43:f0:da:50:eb:
7e:23:be:90:c9:04:5e:43:65:a5:60:3f:4a:da:72:
64:bc:df:65:ec:db:17:da:1c:9f:ca:93:53:2d:6b:
7f:f2:76:6f:dd:d0:25:5e:fa:8b:08:0b:51:49:14:
d3:b9:c2:ea:ea:e7:17:c2:36:97:9f:11:75:4d:77:
1f:18:51:d8:ef:36:99:d5:3a:b3:51:54:7d:72:61:
92:53:2f:59:8e:ab:ef:c9:b9:a2:8d:ae:62:4b:00:
aa:90:1f:ba:16:4b:ff:28:f0:5c:14:4f:12:63:e1:
a0:51:a0:39:f4:fc:89:a7:67:dc:12:bd:57:da:36:
c2:56:b2:af:83:1b:7a:d5:be:31:d6:be:7b:85:a7:
52:8d:66:7d:20:ee:df:ca:35:39:a4:a4:c5:70:d9:
23:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:00:01:44:DB:AA:BD:F6:EA:47:C4:75:84:C1:7A:BD:58:92:31:0F
X509v3 Authority Key Identifier:
keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/FEF3DB787DE111EEBB98F41AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.6.248.0-202.6.250.255
Signature Algorithm: sha256WithRSAEncryption
8b:46:14:56:26:2e:96:cc:8f:22:e4:51:3f:e1:c8:af:e2:9c:
cd:74:11:e8:9d:cd:52:22:ab:75:24:59:5c:41:1f:b8:fa:e0:
52:72:1a:93:7f:7d:21:78:8c:37:fc:e5:70:16:2b:9d:28:b2:
91:18:10:b4:4a:e3:28:4f:16:8c:50:28:19:87:18:7c:d8:f9:
1e:e8:6d:b5:69:73:ba:0c:7c:bd:bf:1d:06:52:18:b2:a0:1a:
2e:7c:46:82:89:0f:e4:87:e0:48:83:67:9c:ce:d9:bb:69:f2:
af:0c:29:8e:31:67:0d:60:03:02:e9:a3:cb:ab:0a:db:73:b7:
47:3c:eb:ec:75:7e:16:55:d9:08:43:cd:4e:47:4b:2a:e8:a8:
fb:87:57:56:a0:7f:e0:6d:0b:07:fd:b1:5d:70:62:fa:8c:de:
cd:a6:28:95:d6:ed:9d:a4:c7:29:b1:72:bc:1f:cf:79:e1:0f:
87:c6:00:c3:32:c5:da:49:de:21:d5:d3:51:8e:4f:a7:c7:00:
8f:b2:92:95:e8:2a:b6:e3:5c:97:4b:fc:77:30:fb:58:ab:6e:
d3:4f:07:1e:36:7f:ea:c5:20:ff:a8:a4:78:96:d4:95:99:ba:
57:e1:e5:1c:d4:7d:a1:da:b1:b0:af:10:d1:0c:a1:cc:94:58:
99:f1:98:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 10:27:23 2024 by rpki-client on console-fra.rpki-client.org