Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/4439E1B64EFB11EEBE6DAA4DC4F9AE02.roa
File: 4439E1B64EFB11EEBE6DAA4DC4F9AE02.roa (raw, json)
Hash identifier: rHbgNxPl6n/wxitixX7trBlRcYGKzGqCjKaN5vaSdYs=
Subject key identifier: 93:85:C8:E2:69:18:71:76:53:95:A7:5C:73:01:41:67:5C:10:18:B1
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 27C5
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/4439E1B64EFB11EEBE6DAA4DC4F9AE02.roa
Signing time: Sat 09 Sep 2023 10:25:58 +0000
ROA not before: Sat 09 Sep 2023 10:25:58 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 32558
IP address blocks: 122.254.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10181 (0x27c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Sep 9 10:25:58 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64fc4836-245c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:57:7a:b0:1b:cc:83:55:a0:23:c6:75:a2:10:
94:46:8f:3d:a6:31:20:22:bf:cd:3a:d3:d3:5f:46:
76:f0:29:28:46:c2:3a:ff:08:cf:9f:ce:25:45:ca:
26:c5:b5:ad:44:13:94:71:15:6c:ec:17:40:46:5e:
6b:18:01:bd:0e:69:dc:ca:e5:bd:a8:bb:f5:e5:50:
88:3a:3b:ae:9f:dc:39:e2:9e:fc:0e:59:c6:7c:8a:
dd:d9:f8:13:6a:60:68:33:f8:1c:51:ef:b0:ac:2d:
ac:1d:94:94:3b:06:8b:a4:16:64:05:8e:80:25:6d:
b3:0a:b3:f9:86:b8:56:03:82:eb:d9:e5:0f:f9:83:
fe:ca:f6:08:4e:7b:86:75:51:20:91:d2:31:3c:30:
c6:41:e9:7b:41:36:e1:e5:b4:9b:3d:23:0e:8c:ed:
95:aa:0a:61:fc:43:12:fd:57:b6:4e:69:a5:b8:77:
d8:b3:03:aa:42:5a:52:c5:19:df:7f:6d:61:31:30:
f4:c9:ca:57:7c:ac:e1:0d:11:b9:b1:92:77:78:fe:
c5:e8:09:de:2f:06:14:f2:58:05:dc:50:6e:b0:5b:
46:e0:93:58:25:a8:ac:9e:ff:f7:cf:95:52:4d:1d:
78:cc:c6:11:f7:b8:5a:40:14:5a:ef:07:e3:3e:fe:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:85:C8:E2:69:18:71:76:53:95:A7:5C:73:01:41:67:5C:10:18:B1
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/4439E1B64EFB11EEBE6DAA4DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.64.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:c0:f1:58:e7:24:9f:16:f2:3e:57:1d:ef:27:bf:fe:71:df:
30:8a:44:ee:af:dc:2f:1c:69:23:39:55:5d:9a:b5:bf:57:cb:
73:67:63:6e:77:82:fc:57:da:27:69:b7:da:86:d0:74:c4:b4:
52:5e:7e:d5:e7:be:de:0e:bb:75:54:2e:77:90:57:4b:c0:6c:
96:87:35:5f:74:24:18:95:fd:74:ab:54:38:cf:b9:af:35:03:
0a:66:c4:70:54:ee:77:62:77:73:ed:4f:56:88:f6:70:5e:12:
58:31:f1:db:89:9e:08:f0:4f:c1:37:92:5e:23:4a:6c:5d:1b:
28:5e:a7:e0:9f:76:e9:67:6a:e3:52:ca:66:2a:b2:76:f5:09:
2c:0b:82:87:d1:d2:8e:9e:5b:0e:7b:5f:49:7d:de:28:80:18:
4a:1b:26:5f:be:b3:46:6f:21:5a:fc:d0:d9:47:9a:b6:c4:f1:
5c:4e:e5:9a:5e:5e:ae:45:c3:f2:ac:bf:b2:aa:c6:13:7d:b6:
ac:cc:bc:ba:ad:50:79:cb:15:19:00:18:16:ec:ca:d6:94:83:
5d:43:a2:12:53:47:3f:f4:0d:7f:0e:e5:59:dc:9a:8a:a5:1b:
99:27:98:81:46:b0:7c:bc:f1:c5:0c:2d:29:3a:00:10:7e:48:
74:6f:63:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 9 12:39:56 2023 by rpki-client on console-ams.rpki-client.org