Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/54A0E9A4458811EEA7338C19C4F9AE02.roa
File: 54A0E9A4458811EEA7338C19C4F9AE02.roa (raw, json)
Hash identifier: sytwgcbY36+upKcynaJKAw9Wyvr+/qcclFb/MlXrmVg=
Subject key identifier: EC:87:5C:E4:74:79:41:90:37:5B:75:B3:E7:72:48:D0:B3:48:DA:1A
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 27B6
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/54A0E9A4458811EEA7338C19C4F9AE02.roa
Signing time: Mon 28 Aug 2023 09:50:33 +0000
ROA not before: Mon 28 Aug 2023 09:50:33 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 18978
IP address blocks: 122.254.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10166 (0x27b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Aug 28 09:50:33 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64ec6de9-9978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:4f:ee:bc:a6:49:ff:b0:9d:15:5f:3e:df:
4d:5e:89:b0:4a:8e:5e:94:db:ce:4a:75:1d:f8:78:
a7:6d:ca:42:03:ae:1b:2e:15:16:68:17:cd:3d:25:
1b:3e:73:2b:ef:65:79:c7:fb:f9:29:fa:fa:f4:7e:
9f:32:74:28:6e:73:1b:e1:a0:d9:4d:ab:bf:7a:1b:
89:bb:e3:b5:4e:99:a5:f0:24:33:0a:db:35:ec:52:
fb:0e:0e:da:8b:11:83:27:fd:83:cc:07:1f:83:ae:
3d:3d:18:e7:1e:13:82:65:cb:c1:67:f7:b8:a9:ca:
f6:d9:46:5f:73:4e:3a:fa:36:9b:3a:15:9d:a6:e3:
63:67:81:0e:93:1b:94:64:e2:af:6b:68:3c:4e:78:
17:c4:8f:21:dc:4a:d0:6e:37:f1:fa:d5:92:5f:9e:
0d:a5:d1:2f:05:26:c4:1d:e6:27:28:27:ef:ec:77:
ad:83:66:00:4d:38:95:c2:35:93:86:a5:4c:a9:dd:
70:09:be:7c:13:5f:46:4c:b2:14:a7:64:5b:c1:a9:
f2:3e:71:8a:8a:ab:e2:2e:6f:37:5b:60:4d:89:2d:
0a:33:b2:ce:f4:fb:a4:29:04:d5:70:f0:8c:07:e9:
cb:6e:80:bc:32:a7:4a:19:62:c6:ed:28:92:1e:ea:
b9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:87:5C:E4:74:79:41:90:37:5B:75:B3:E7:72:48:D0:B3:48:DA:1A
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/54A0E9A4458811EEA7338C19C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.64.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:1f:12:79:d0:12:1f:bb:6c:d6:53:57:91:16:f9:ac:28:53:
7f:90:60:89:a0:a2:2c:99:d1:f0:f3:3e:b2:90:78:08:8a:aa:
19:73:d0:2f:22:84:1f:d2:ee:88:73:f3:c0:74:0d:a3:8e:72:
c5:f7:c6:5b:f6:37:f7:c0:53:ce:46:fc:9b:e0:70:ad:6d:e7:
f6:4b:7f:f7:25:5d:a1:be:7b:29:83:9a:0c:ed:e4:31:3d:96:
45:b0:fd:3b:08:d2:4a:d5:82:43:9a:6b:87:50:b8:01:fd:6a:
bc:36:31:4a:f7:21:35:72:6f:8f:ef:fb:20:2c:28:b0:d0:47:
f6:12:b4:6b:f7:f7:d5:f5:43:64:cd:86:e2:f8:f1:d2:b4:54:
49:d0:13:7a:7b:94:b5:ff:e6:d6:65:04:48:45:e3:00:3d:77:
40:76:df:52:34:91:eb:af:c0:b1:f6:48:aa:88:c4:c8:c9:06:
a6:24:67:9c:c2:ac:66:ac:bf:43:cc:f7:e0:36:06:db:3c:92:
de:ce:c5:c6:2e:2b:e9:01:02:1e:83:82:89:59:46:6f:27:7a:
9d:a1:5b:f4:1a:eb:4c:e2:12:ce:07:b9:e9:da:6e:04:75:37:
28:c7:cb:a6:24:e6:12:10:3a:d8:bc:78:10:56:57:96:d0:30:
af:58:60:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 08:01:30 2023 by rpki-client on console-fra.rpki-client.org