Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/0416392AEC5211ECAA34E785C4F9AE02.roa
File: 0416392AEC5211ECAA34E785C4F9AE02.roa (raw, json)
Hash identifier: Hq3CxYaJ/z2fUNHWnY2lxP0yjeE75Fc5ffV5BCFbCf0=
Subject key identifier: 78:05:6C:CB:F7:96:03:FE:C6:40:91:05:0F:02:45:60:66:73:42:53
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 25C3
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/0416392AEC5211ECAA34E785C4F9AE02.roa
Signing time: Wed 15 Jun 2022 02:22:34 +0000
ROA not before: Wed 15 Jun 2022 02:22:34 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 7018
IP address blocks: 122.254.72.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9667 (0x25c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Jun 15 02:22:34 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62a9426a-9ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:90:9b:53:fc:44:86:7a:f7:d8:d5:7b:7b:
62:66:7e:ac:8c:4e:a2:c3:5f:55:81:43:1f:a7:b8:
d1:fa:d7:d3:16:8a:27:93:1f:3d:66:7c:b5:9d:8d:
19:f9:8d:f9:6c:91:f3:a3:22:94:3f:20:5a:b7:40:
4d:ae:b9:00:f1:ba:04:85:84:73:6e:49:56:d7:cb:
5f:6b:14:12:14:bd:5c:a6:fa:42:47:01:08:8b:6a:
2c:52:cf:34:33:40:74:42:4e:70:1c:90:93:6e:99:
b8:0d:a6:7b:00:48:de:12:82:f3:4d:33:4f:af:ee:
d4:f5:ce:76:b5:22:00:f7:e2:1d:80:6c:89:ad:2f:
a8:67:33:e1:61:9d:89:e4:d4:07:66:01:8b:06:02:
68:80:b8:4d:46:97:7d:4d:46:f2:1d:b0:2d:38:75:
5d:fb:f0:48:16:fb:e3:a8:da:7e:e6:ee:f9:cf:cd:
cd:c5:4d:59:ab:30:dc:e9:09:5e:5f:e2:be:c4:99:
99:24:8e:21:48:5d:d3:35:8a:95:a3:9e:39:63:93:
48:ea:b9:93:08:a9:05:f6:08:f5:78:72:5f:5b:8d:
95:4a:12:da:61:81:ba:d8:ad:34:a7:ab:14:55:d2:
ce:6a:a8:2d:2a:74:df:f7:8d:a7:97:52:bc:eb:f5:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:05:6C:CB:F7:96:03:FE:C6:40:91:05:0F:02:45:60:66:73:42:53
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/0416392AEC5211ECAA34E785C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.72.0/22
Signature Algorithm: sha256WithRSAEncryption
08:39:0c:25:a9:3f:ac:ea:9f:f4:43:5d:2e:15:51:1d:f6:34:
60:db:0e:32:34:0e:63:b6:3b:bf:a8:54:ef:02:20:f4:83:68:
18:d2:69:13:ec:c2:fd:6e:c8:e4:94:71:6f:f2:11:ba:1e:b3:
f4:6b:5b:a2:ea:d6:61:5d:e0:4c:f9:aa:b0:81:9e:61:a6:07:
44:9e:ba:93:ad:27:c4:1b:4f:6b:d2:f3:50:53:b8:3e:30:1c:
39:10:4e:2d:4b:f2:3d:3d:9f:f5:62:7a:9c:b4:d7:7c:05:54:
0f:a6:af:96:9f:a4:5c:b4:d4:7c:2a:c7:f1:73:b7:76:c2:5f:
de:f6:2b:cf:c6:a7:0b:36:ad:95:e3:33:38:e5:46:26:d6:e5:
40:e6:24:10:23:cf:02:4c:95:90:55:8c:45:a4:1c:4b:80:d2:
35:8d:4d:c0:43:03:de:85:4b:59:c3:74:9f:7c:ed:e3:33:84:
88:d0:df:5d:90:3f:64:5a:3a:78:d8:77:42:f6:d9:a8:04:89:
3f:49:00:28:77:5a:d0:39:a8:70:11:d8:ab:74:95:c8:33:2d:
af:59:69:9f:66:1b:ee:e0:f3:6d:81:b2:5e:b3:26:25:f4:9d:
fe:ac:52:a6:34:33:ba:16:b1:c7:ef:b0:a5:cf:12:9c:0f:a0:
78:62:65:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-ams.rpki-client.org