Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/5B1D0FAA4F7A11EEAAA71941C4F9AE02.roa
File: 5B1D0FAA4F7A11EEAAA71941C4F9AE02.roa (raw, json)
Hash identifier: RcHeGvWm93L6H0aNl6bZmiozQYxyJNYNmCF8m+vlxTM=
Subject key identifier: 46:DA:4C:A6:8C:79:EF:F9:46:FB:15:00:BC:4A:67:4D:C9:FC:A8:A3
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 27D0
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/5B1D0FAA4F7A11EEAAA71941C4F9AE02.roa
Signing time: Sun 10 Sep 2023 01:35:43 +0000
ROA not before: Sun 10 Sep 2023 01:35:43 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 205794
IP address blocks: 122.254.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10192 (0x27d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Sep 10 01:35:43 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64fd1d6f-f833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:0b:a4:41:3b:70:9e:8b:fd:1e:ce:7e:60:
f7:29:ec:9a:31:18:9b:9a:57:e9:13:5d:f9:bf:4b:
14:20:e7:79:34:96:2f:57:9a:88:7a:bb:7e:6b:2c:
11:e5:f6:81:48:7b:5e:3e:b6:08:65:2a:e5:ef:61:
ec:4d:39:22:21:59:1d:a4:66:68:58:6f:b4:74:ca:
27:ad:5a:f7:50:f7:31:44:15:ff:cb:91:e1:22:20:
83:0f:aa:9c:c1:58:25:5f:4a:81:81:4b:52:4a:ff:
ae:2e:e9:2f:62:2e:0c:f4:4d:90:30:d4:61:4b:99:
bb:8d:8d:58:f6:8a:9c:cb:85:07:f5:01:8b:2b:a3:
3c:5a:16:0d:88:53:37:61:34:44:75:45:b6:19:ca:
20:9b:80:85:64:00:ea:b7:f8:6c:68:4d:35:f7:78:
4a:d3:34:9b:b7:50:ee:b3:11:e7:6f:8d:a8:7f:ea:
50:39:3f:0b:f9:e5:76:2f:20:cf:3a:f4:86:4e:b2:
19:77:fd:ed:94:ef:5e:dd:df:ce:18:66:9f:e0:57:
e1:7c:60:31:53:45:1f:4c:7e:de:46:be:fa:a1:36:
5f:76:ae:34:d3:16:99:31:b6:86:74:35:29:81:62:
5d:44:11:1e:04:6f:bc:f5:13:9b:04:b7:9a:19:67:
69:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DA:4C:A6:8C:79:EF:F9:46:FB:15:00:BC:4A:67:4D:C9:FC:A8:A3
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/5B1D0FAA4F7A11EEAAA71941C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.64.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:94:52:45:b1:ee:ce:67:b0:31:ea:17:3d:e2:7c:17:40:17:
91:8a:58:d9:64:94:c9:44:e9:af:ff:e5:d3:79:56:c7:bf:1a:
86:6c:a8:05:c1:b1:f0:05:82:56:0f:75:96:30:ab:2c:eb:4a:
f7:cc:de:b4:3d:ca:a3:ea:04:7c:75:51:54:47:43:94:7b:19:
c6:29:9e:15:55:c6:e0:20:04:36:80:74:aa:ed:0b:b9:4d:91:
84:97:53:44:43:ba:00:82:da:4d:95:a9:f9:23:05:65:21:06:
e7:77:62:e8:a8:41:43:c2:8d:7d:e3:0e:b0:ca:f2:e3:91:02:
e9:fe:b9:1c:04:64:e0:88:eb:67:28:15:38:58:41:e8:95:b3:
29:24:6e:00:fe:db:e7:1f:8f:19:00:15:98:3d:6e:09:05:de:
95:2c:50:db:ad:59:e0:81:ed:3b:3c:f6:f8:dc:f7:4f:39:eb:
1e:46:57:60:52:26:38:21:72:a8:b7:80:c9:aa:93:1d:c6:73:
3d:60:d9:36:fc:fd:b3:46:d9:a9:1d:dd:2a:b9:d8:09:13:3c:
77:4b:8b:49:a6:d2:c8:63:86:a1:8a:d8:e0:66:d5:f0:9c:1a:
5a:2b:b7:06:f5:52:85:56:55:3d:f8:eb:db:39:a1:32:da:12:
0f:64:d6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 08:01:30 2023 by rpki-client on console-fra.rpki-client.org