Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/21650A184BDF11EEB089D980C4F9AE02.roa
File: 21650A184BDF11EEB089D980C4F9AE02.roa (raw, json)
Hash identifier: QNvmKpquIzyayVEWqQWr7oz8YcNT9ZAVjQIoDgs9z9M=
Subject key identifier: 34:5A:DB:70:35:52:08:E6:FD:1E:BD:C4:16:5A:C2:37:AF:A9:AB:C3
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 27BD
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/21650A184BDF11EEB089D980C4F9AE02.roa
Signing time: Tue 05 Sep 2023 11:27:01 +0000
ROA not before: Tue 05 Sep 2023 11:27:01 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 55154
IP address blocks: 122.254.68.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10173 (0x27bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Sep 5 11:27:01 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64f71084-cece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:b7:8c:7e:8a:93:09:4f:40:9f:34:a5:a4:
67:ea:84:cd:cf:9f:7b:3d:cd:13:ed:96:93:80:f0:
a1:bd:cb:1c:8e:33:6f:01:dc:78:92:32:86:9f:cb:
46:a3:a4:5e:88:96:54:8e:a8:b9:2a:27:39:94:d2:
b3:e1:98:ca:33:b9:e9:92:df:43:e3:ef:aa:0d:b4:
ba:de:20:75:ed:5b:f8:44:b4:3c:65:b8:a4:c4:f9:
e6:02:31:34:6b:0b:4b:70:c4:42:b5:70:26:31:bd:
06:bc:bb:92:8a:80:98:ce:9d:20:c6:fe:21:01:60:
34:ff:66:33:46:ab:2f:e5:f0:e9:8a:3c:49:d5:4b:
44:a7:d9:33:99:a4:47:2b:c6:c2:7c:04:95:c4:31:
3e:68:77:a6:a7:fc:10:f9:57:83:f7:22:92:3d:89:
45:49:0d:8c:3d:62:09:e6:7e:a4:b6:b5:66:b2:b9:
1a:30:54:5b:39:8d:11:22:09:64:55:d6:a0:89:ab:
80:0e:10:44:5b:89:8f:f8:f1:b1:95:b0:e1:02:e6:
40:5d:6a:f6:db:79:a2:18:a2:ec:2f:63:9e:a5:5f:
e8:66:4e:3f:c7:cf:6c:1e:f6:ae:e9:9d:72:c4:41:
e0:65:69:22:da:9f:62:5c:87:cb:4e:d2:6d:2b:ac:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5A:DB:70:35:52:08:E6:FD:1E:BD:C4:16:5A:C2:37:AF:A9:AB:C3
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/21650A184BDF11EEB089D980C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.68.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:61:e6:9b:d5:61:1f:1f:fa:e3:25:22:48:ec:49:57:24:97:
ec:45:61:f1:c3:06:3f:55:a5:d3:8e:db:cb:43:6f:fd:fd:89:
bb:81:f9:f4:69:36:66:d6:cc:3b:95:0b:28:e4:c6:20:5b:1f:
04:9f:28:72:fe:77:e2:99:87:65:94:82:8e:38:63:6a:cd:2a:
1b:ba:f2:4a:f4:6e:01:7b:f5:9d:16:d3:21:b5:1a:40:63:43:
66:21:74:b5:27:6c:61:7f:93:88:06:b2:aa:d7:7f:86:59:08:
5d:ab:8f:4d:56:b6:e6:f9:9c:54:7c:a3:00:e4:d0:d4:2b:eb:
c6:5f:3a:c5:82:47:75:c0:10:5b:20:4d:ee:ce:55:0e:18:11:
c4:4d:c8:c1:26:f2:fd:00:46:c2:2f:a8:0c:aa:e1:a9:b5:30:
32:68:7c:f3:5b:8d:9c:30:4e:70:53:eb:76:a3:2d:cf:28:18:
f3:7d:9a:d2:66:9b:29:d1:77:a1:03:67:ea:89:7e:e0:07:7e:
37:99:d5:ed:1d:05:90:6e:c2:1e:0d:84:3e:e5:d1:21:b4:d1:
e8:32:b6:cc:87:70:1f:76:7a:cd:90:ba:dd:e9:00:13:bb:b6:
23:1b:2c:78:51:6a:ce:84:e7:4b:d4:a0:49:b0:f5:4f:c2:60:
5a:81:fd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 12:09:56 2023 by rpki-client on console-ams.rpki-client.org