Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/3106B826CC6B11EC86ACA756C4F9AE02.roa
File: 3106B826CC6B11EC86ACA756C4F9AE02.roa (raw, json)
Hash identifier: mZ+4htafpLelJYTzJtgeg02jOP3GeGvOXk160J6Xse8=
Subject key identifier: 8A:29:17:F0:EF:27:DF:A3:BA:BF:8D:A9:0E:0D:20:6B:DA:1F:39:39
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 27DE
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/3106B826CC6B11EC86ACA756C4F9AE02.roa
Signing time: Fri 22 Sep 2023 06:38:58 +0000
ROA not before: Fri 22 Sep 2023 06:38:58 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 140057
IP address blocks: 122.254.76.0/24 maxlen: 24
122.254.78.0/24 maxlen: 24
122.254.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10206 (0x27de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Sep 22 06:38:58 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=650d3682-300f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fc:f9:d8:ee:79:cb:18:dc:b7:a7:9c:d4:97:
53:69:f4:77:4a:22:b2:5e:6d:1a:20:5a:a7:c4:16:
6e:09:6b:01:14:44:71:cb:6c:ea:cf:a4:84:bf:da:
8f:af:db:ea:75:a8:f2:5d:91:a8:08:28:2c:6b:d0:
44:39:54:3b:e7:05:e7:40:52:8e:89:a8:6b:14:aa:
02:1c:4e:59:c6:1b:77:26:61:c7:f4:c5:e9:1b:6b:
22:41:3b:f5:56:29:83:0a:f5:d1:80:b3:98:53:b4:
4c:5c:50:23:45:ee:1e:59:1f:95:fa:62:e7:e9:85:
1c:de:f7:d4:45:6c:af:de:a6:17:3d:a0:36:3a:91:
a4:ce:5b:dd:69:9d:ae:cf:24:57:b8:ce:12:11:73:
47:03:4b:40:a6:03:aa:63:52:67:c2:14:9e:76:03:
35:3b:b9:99:db:45:d7:0f:d3:15:51:a9:7a:b7:89:
0f:a6:6c:e8:1d:f5:19:5c:68:2a:15:d4:73:b9:22:
f1:7d:fd:cc:6d:34:36:2c:a3:1e:9d:ae:15:ca:c1:
45:ff:a6:03:19:64:62:18:97:7b:86:33:d6:04:3d:
3c:0f:d7:4c:27:a7:d2:17:06:5d:93:ae:10:f3:f4:
87:73:b2:6f:b5:1c:33:df:c5:59:35:a8:26:94:56:
ad:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:29:17:F0:EF:27:DF:A3:BA:BF:8D:A9:0E:0D:20:6B:DA:1F:39:39
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/3106B826CC6B11EC86ACA756C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.76.0/24
122.254.78.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:c5:78:22:0f:b4:f4:91:12:9e:14:b8:d6:b7:8d:b4:26:c3:
0b:c4:d2:9c:8e:f5:21:53:59:7a:52:57:dc:a5:09:3e:f6:8b:
23:71:4a:aa:1f:06:24:ad:68:d6:34:a2:56:18:3c:d9:7a:82:
2a:42:0b:6c:15:00:e2:32:81:11:ef:af:11:bf:03:61:63:c8:
86:65:0d:26:85:4e:37:05:b0:5f:5e:19:a1:4f:4a:1f:c7:bd:
0e:6d:b6:74:92:78:2d:86:d8:66:d7:a4:51:b3:13:a2:e8:43:
e1:c9:d6:16:12:3d:f7:94:d5:b1:76:f6:1e:98:45:ba:84:bd:
62:1f:e9:6b:89:3a:cb:7d:c4:c5:fd:4d:8c:0b:6a:cf:15:ac:
26:aa:68:87:67:62:33:51:41:aa:e3:b9:59:b8:23:57:00:92:
c2:9e:aa:03:35:48:7d:d0:e0:ad:37:53:19:60:d8:92:a7:41:
53:97:95:1e:fd:1b:71:02:2d:64:f6:82:94:2f:a5:7f:b1:d2:
b3:20:75:c7:e7:dc:de:39:e0:01:cd:fe:a5:8c:01:06:a3:ce:
3d:ea:96:98:ea:7d:56:ad:ee:64:8c:2d:7a:6d:63:16:c3:76:
67:dd:ad:e8:61:9c:29:74:52:70:79:ad:96:ed:bf:94:b5:74:
c2:05:93:f5
-----BEGIN CERTIFICATE-----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Generated at Fri Dec 22 05:15:19 2023 by rpki-client on console-ams.rpki-client.org