Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/5EA243B83F4C11EE90269853C4F9AE02.roa
File: 5EA243B83F4C11EE90269853C4F9AE02.roa (raw, json)
Hash identifier: fTEdUzSpuzsW1Lyj3dMLL/L042pvmnE6eTwbtG6Dw70=
Subject key identifier: CC:D9:8C:A5:97:E2:7A:04:CB:47:83:D1:C6:62:CC:5E:62:B0:A6:EB
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 27A8
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/5EA243B83F4C11EE90269853C4F9AE02.roa
Signing time: Sun 20 Aug 2023 11:26:13 +0000
ROA not before: Sun 20 Aug 2023 11:26:13 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 50131
IP address blocks: 122.254.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10152 (0x27a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Aug 20 11:26:13 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64e1f855-1fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e3:aa:34:03:16:84:e3:c4:4b:c0:0d:05:63:
f6:e2:d7:46:f9:6d:2e:d6:e2:c4:9b:fc:d7:31:01:
6c:17:b7:74:9e:bf:b6:49:d6:cb:60:10:bd:6c:bd:
04:92:7f:ff:1d:6f:7a:6b:de:74:f4:5b:d9:73:e8:
a1:da:85:4a:19:a8:68:1b:7a:f8:c9:93:13:38:a3:
d8:a0:bc:45:1d:f5:fc:b5:60:fb:b9:e8:ca:f3:40:
59:f1:8c:5f:6d:0a:53:a2:00:1e:f9:a8:31:a6:c8:
ca:17:e8:cf:33:84:27:61:34:66:61:3a:d9:33:6e:
84:9e:3e:39:47:35:53:b5:c6:b6:8b:45:43:89:09:
3a:40:98:d1:0a:62:a7:92:01:b5:1b:5b:66:bf:8f:
bd:1f:5f:a5:56:a6:ed:57:46:25:9c:af:7f:e1:d6:
f4:59:61:9a:c1:fc:f6:44:d4:4d:0b:e7:c6:66:d8:
ca:98:2c:9c:cf:8d:5c:2f:b8:9c:cb:3c:be:c1:7d:
03:fc:c4:5c:f0:c3:87:82:d6:b9:25:41:ac:5f:c8:
ad:85:e3:e9:37:97:dd:e4:2d:91:63:ae:0d:2c:32:
fa:c2:7e:30:38:94:24:b2:80:1e:da:8e:e7:22:4e:
df:bd:83:31:97:9d:6e:ca:f0:f4:c3:fd:14:84:e9:
c1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D9:8C:A5:97:E2:7A:04:CB:47:83:D1:C6:62:CC:5E:62:B0:A6:EB
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/5EA243B83F4C11EE90269853C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.64.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ad:c9:03:06:e0:8b:86:e5:4f:d9:24:2f:e2:6d:ae:83:26:
37:75:71:52:4b:e7:20:a0:ff:16:00:13:7d:41:53:73:a1:8d:
b0:37:6a:67:93:f4:83:b5:d4:02:8d:e7:26:2e:d9:e4:06:41:
7e:d5:d7:a0:57:f2:09:3a:11:fe:a4:e6:33:1b:db:c6:0d:c6:
0c:0f:66:41:ad:3a:e7:4a:10:6a:21:34:c0:29:b1:34:b6:e2:
ed:71:33:d6:49:6b:4b:29:b8:ce:5e:64:c0:ed:73:5d:c4:a2:
86:98:c4:30:60:e2:81:f6:f1:53:40:93:6e:01:61:33:06:52:
d2:12:f1:2c:92:6b:36:46:1f:69:72:81:c0:e7:7a:52:cf:2c:
63:c1:17:49:26:b3:6b:ba:c2:c7:94:68:a4:48:83:79:4f:b9:
2b:56:60:39:30:1a:58:fe:f0:12:d2:44:62:d1:a3:f6:7f:60:
4c:94:c5:51:4d:ba:e5:c9:3f:0a:c1:0a:1d:50:ac:75:84:f4:
c1:ba:7d:87:6e:a3:a6:10:50:36:a6:3c:27:8c:62:58:2e:2d:
f3:32:d5:dc:b8:84:2c:ba:2f:2b:67:00:50:92:6a:02:33:55:
6f:e9:ea:b2:ad:1e:db:24:93:6a:30:29:bf:f2:55:ed:e1:47:
c2:d5:1b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 08:34:04 2023 by rpki-client on console-ams.rpki-client.org