Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/4A096B52801111EDBE87F750C4F9AE02.roa
File: 4A096B52801111EDBE87F750C4F9AE02.roa (raw, json)
Hash identifier: qjVrbaVXR7dKHb8R89iY72PcXmiNT+kUyE9VXBspi28=
Subject key identifier: DD:2F:AE:31:AF:41:F9:5E:4F:D5:8B:3C:9C:96:60:21:73:E6:1B:E3
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 26EE
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/4A096B52801111EDBE87F750C4F9AE02.roa
Signing time: Tue 20 Dec 2022 02:52:06 +0000
ROA not before: Tue 20 Dec 2022 02:52:06 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 38337
IP address blocks: 122.254.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9966 (0x26ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Dec 20 02:52:06 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=63a12356-4b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:77:35:f6:13:92:c3:cb:30:bc:63:e2:58:82:
b6:19:31:47:4b:d6:4d:35:49:14:e4:9b:ac:ad:31:
88:c9:05:93:22:1d:be:60:d8:23:b6:91:1a:13:50:
f6:6f:f3:7e:5f:5c:6c:49:8f:3d:78:30:e0:9c:82:
5d:aa:e4:3c:22:bd:10:2f:69:39:fe:95:fd:ec:35:
99:11:00:a4:86:0b:94:d5:f4:ad:ba:7b:bb:77:0e:
b8:31:0c:81:ff:2f:d2:7e:46:e8:f0:ec:a5:da:2e:
4b:75:88:07:30:cb:3c:8c:1b:4f:95:77:26:76:f1:
d8:81:e2:34:b8:2f:f9:81:2c:6e:a6:3a:f9:f7:2a:
5c:91:61:89:55:76:01:09:73:e8:1a:0d:b4:0a:b2:
0d:1f:e4:c8:2a:a7:a4:a2:19:62:48:c8:55:8f:be:
39:cb:04:c5:d6:8c:25:49:70:33:d2:b1:83:58:fd:
ca:0f:88:b0:e0:d5:a2:9e:85:c0:e9:00:1a:7d:ef:
a3:14:24:32:21:84:87:58:1c:cf:87:e0:31:63:2b:
b3:47:46:64:7c:61:3f:3b:5e:43:ce:bb:20:03:8f:
fc:0e:81:a8:00:ea:6c:ca:0a:3b:67:59:5a:31:a5:
28:86:11:ae:10:67:40:c8:4b:34:19:57:0a:26:a4:
39:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2F:AE:31:AF:41:F9:5E:4F:D5:8B:3C:9C:96:60:21:73:E6:1B:E3
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/4A096B52801111EDBE87F750C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:36:f5:0d:2e:50:10:4b:48:19:cd:ec:65:e0:29:78:9d:a1:
14:ea:5e:49:78:3f:4b:38:76:8a:18:86:03:f1:2c:80:4b:72:
e0:18:ac:1b:2c:86:7c:ef:b7:23:6d:59:b6:6f:87:ef:59:33:
9f:24:1c:e0:11:11:4e:c3:a5:48:f8:59:92:30:90:b1:7f:02:
04:28:52:c0:f5:6f:49:ea:42:57:77:5b:07:d1:c5:6d:32:86:
15:c9:42:85:cb:05:07:42:1c:a3:d9:ff:b9:cc:ed:b9:bf:4a:
77:cc:0f:e5:b4:0c:80:0b:95:c4:6b:18:00:de:01:bf:93:f3:
fb:b1:aa:32:bf:38:6b:7d:e8:1f:d3:91:56:87:da:03:02:ed:
4e:fa:bc:3c:0b:f6:ac:11:74:a4:e8:bb:a2:4f:5f:6b:ae:02:
6c:03:f3:ea:67:02:19:7d:41:85:ed:c4:cc:d9:f9:c9:52:90:
8c:53:78:69:f5:e5:79:01:d3:fb:a8:3f:8d:90:bb:33:e4:09:
fb:a0:2d:4f:61:12:42:70:02:9a:6c:2e:3f:e4:58:d4:81:cd:
7c:0a:23:ea:c1:e4:26:12:5f:0f:1d:9b:07:79:2e:d0:fe:bb:
db:84:b0:81:8c:7f:b0:2d:6e:c9:5a:2b:7f:b3:ed:92:dd:b4:
44:09:6e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-ams.rpki-client.org