Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/44BF79C04EFB11EEBE6DAA4DC4F9AE02.roa
File: 44BF79C04EFB11EEBE6DAA4DC4F9AE02.roa (raw, json)
Hash identifier: 2uJwyIwFk5mSo2cW8DleMUBixmSHwIobCPxi8c1ySpI=
Subject key identifier: C4:96:B3:18:0E:3D:B0:E2:0B:6B:39:71:D0:C8:A5:DC:70:B3:2F:66
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 27C6
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/44BF79C04EFB11EEBE6DAA4DC4F9AE02.roa
Signing time: Sat 09 Sep 2023 10:25:59 +0000
ROA not before: Sat 09 Sep 2023 10:25:59 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 54467
IP address blocks: 122.254.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10182 (0x27c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Sep 9 10:25:59 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64fc4837-74f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:b2:2c:3d:ba:21:c4:d6:c5:0e:5b:a9:dc:
d0:13:3c:ad:c8:fa:b3:98:ce:89:54:74:90:10:a8:
e9:22:c6:0e:33:2f:87:ea:92:10:57:03:74:0c:7c:
62:03:58:2d:8a:f6:8c:ad:bc:1a:31:8b:ae:c8:e6:
7c:e7:60:c0:1c:eb:7f:17:d4:87:79:a8:9b:7a:ba:
56:dd:86:80:46:60:87:88:ae:c4:45:a7:04:4d:f4:
ac:41:21:d9:09:92:84:cf:64:89:ab:03:44:9e:07:
02:b3:6c:87:7a:d0:22:83:f1:fe:99:5b:4e:4a:45:
f6:63:7a:a0:17:a7:d2:d1:59:e1:3e:a8:61:33:14:
6b:b4:51:00:4a:da:43:92:9c:b1:36:ec:67:3d:33:
45:6f:d4:0d:03:32:1d:c7:ff:0b:11:42:de:c0:28:
cf:87:2a:0e:a1:95:ea:84:2c:24:f9:c6:72:39:95:
74:ff:96:6e:a1:fb:31:dc:77:1b:6d:23:9c:0d:59:
53:46:a4:04:44:f8:e0:66:ad:35:27:11:e5:fe:2c:
bd:04:f4:d6:ee:3a:b0:43:d5:b8:c6:39:31:af:16:
47:db:b6:93:5f:13:2b:e2:15:bb:09:8a:fc:df:c5:
66:33:3f:fc:74:71:86:1d:39:3a:91:4e:a2:e8:ce:
5c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:96:B3:18:0E:3D:B0:E2:0B:6B:39:71:D0:C8:A5:DC:70:B3:2F:66
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/44BF79C04EFB11EEBE6DAA4DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.64.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:75:c5:8a:3d:fd:6a:65:64:7d:a9:33:27:d6:72:69:24:dd:
a1:e3:fb:0d:c5:b5:c0:5b:81:1a:33:f3:57:91:d8:1a:c6:41:
18:c1:ac:cf:5a:10:29:40:40:c9:f7:9b:cf:f6:17:b2:1a:81:
84:71:42:f7:f3:4e:ed:5b:9f:28:8a:4c:0a:1a:50:97:a9:3e:
e7:f3:e7:c1:61:ac:2a:b5:8b:cf:38:04:05:13:a2:e0:17:1b:
98:9c:f3:43:f1:67:25:87:5c:42:74:3d:49:ba:9f:b0:09:8e:
97:16:77:f3:24:59:11:a8:54:83:c3:5f:6c:4a:a6:4b:39:d2:
86:36:9f:ed:d8:b7:4a:bf:4e:5d:d1:6e:75:11:ae:9f:16:1d:
44:29:8a:2e:71:3d:7b:d3:c1:11:ac:3d:6b:a2:24:fb:01:e3:
26:ee:88:e9:ba:fc:e6:0a:3c:3e:d4:21:d0:1a:6d:a8:de:7f:
df:c1:c7:69:ac:3f:7f:f1:1a:25:30:cd:6d:a6:60:6e:4b:12:
fb:7b:79:fe:7f:4c:df:0d:f3:95:27:6b:eb:3b:16:5f:c4:11:
94:50:58:77:94:73:41:ab:9e:a8:fe:8e:27:ae:09:0a:64:1a:
91:03:75:e0:89:24:f7:dc:6a:6f:1d:27:6e:d5:48:1b:de:df:
42:ed:1e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 9 12:39:56 2023 by rpki-client on console-ams.rpki-client.org