Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/1D1E3D6845F011ECB9F6C96DC4F9AE02.roa
File: 1D1E3D6845F011ECB9F6C96DC4F9AE02.roa (raw, json)
Hash identifier: mCmZKvEGjlaAkmqOITEkSP8rkcPIebW5I3ohd+zJSxQ=
Subject key identifier: D8:C4:9F:08:52:7E:D6:B2:11:7B:CC:77:AE:8E:D1:88:34:CF:88:1F
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 276C
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/1D1E3D6845F011ECB9F6C96DC4F9AE02.roa
Signing time: Wed 28 Jun 2023 16:02:35 +0000
ROA not before: Wed 28 Jun 2023 16:02:35 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 213030
IP address blocks: 122.254.64.0/21 maxlen: 24
122.254.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10092 (0x276c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Jun 28 16:02:35 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=649c599b-1939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:c1:80:b2:f3:da:2e:8d:8a:d5:cc:a7:73:
18:71:e7:a7:10:69:8e:1e:92:38:11:10:f6:32:d8:
57:4a:ab:a4:43:26:d3:57:c9:b7:e8:f7:d1:b2:6c:
74:23:76:63:8b:88:e9:52:b8:17:48:d5:8d:f5:ad:
55:18:a5:cc:f7:e4:f1:4b:ee:5e:8e:71:2e:dd:ef:
16:5b:2c:7d:6a:2c:23:d3:b1:3d:9d:a7:78:60:0d:
54:e3:ad:e2:28:d6:20:c4:b0:b4:0a:bf:e8:fc:11:
56:89:1f:0f:3f:48:c0:03:01:5b:ce:14:59:06:a5:
e6:cf:ec:9f:f9:b3:50:b2:dc:b0:3c:0e:26:52:c6:
96:0f:f5:31:66:f0:7b:61:3e:51:24:39:56:93:b3:
40:95:52:63:15:b2:bf:3b:23:4e:9f:23:17:ad:af:
c9:f9:eb:14:dc:f0:7d:7c:b8:23:2d:71:fa:4b:72:
38:ba:90:b1:35:f3:da:52:97:6b:87:a0:5e:f5:c8:
ac:dd:43:99:68:ca:db:ed:92:97:81:16:02:08:d8:
2a:04:e5:18:a9:dd:d9:72:22:a9:b7:8e:b3:14:33:
a3:6e:0b:d7:59:62:1e:9a:71:35:a0:a3:d5:90:38:
70:37:f4:e6:0d:9b:1b:ac:91:97:fb:70:41:db:ea:
f2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C4:9F:08:52:7E:D6:B2:11:7B:CC:77:AE:8E:D1:88:34:CF:88:1F
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/1D1E3D6845F011ECB9F6C96DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.64.0/21
122.254.108.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:41:84:c6:ff:e5:92:46:38:11:cd:5c:70:cc:f0:f3:80:02:
15:17:56:4e:69:6b:5e:82:34:60:49:06:2e:4b:9e:74:fd:bd:
e9:95:f8:ef:83:f6:6c:b2:6a:b5:1c:b2:f1:d4:ee:7f:87:11:
5c:5a:27:b5:ae:46:e3:75:87:24:7e:15:d2:f2:78:99:56:bc:
a9:01:58:d8:d0:ac:6b:98:79:0f:cf:14:9d:9b:67:f1:f4:9f:
45:2f:c1:6f:47:a8:92:69:a8:91:f5:a1:26:19:2b:d5:5d:02:
55:ef:55:c8:6c:29:af:07:db:d2:33:0a:2e:c2:76:70:39:ff:
6a:95:86:bc:d7:8b:ef:02:f7:8e:e1:6f:4c:a8:80:c3:30:b6:
c3:6a:41:09:59:d0:60:e2:df:46:bc:43:45:d6:ca:d6:61:30:
a5:86:99:a6:08:94:27:ed:51:ef:ca:41:dd:90:ec:85:57:96:
11:bd:83:0e:76:1b:88:61:0d:9c:10:17:ce:32:ba:68:62:8b:
15:38:87:72:3b:f6:b1:0e:a6:2d:3f:2f:c7:5e:01:a3:86:bc:
84:44:35:cc:4e:c7:16:29:51:9e:8b:9c:71:79:75:a4:03:53:
ec:90:22:60:b4:e2:cf:b7:89:39:0f:3e:ec:87:11:df:1b:35:
4e:f0:ea:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 24 02:54:03 2023 by rpki-client on console-ams.rpki-client.org