Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/711C1A984F0811EEA7034D23C4F9AE02.roa
File: 711C1A984F0811EEA7034D23C4F9AE02.roa (raw, json)
Hash identifier: pUsVq+mQNGCtzRUbZ+gpj3ayqOnXUlk5xEpxy9V/yKs=
Subject key identifier: 28:2C:AF:49:48:65:86:67:09:A5:96:1D:D4:30:5A:BC:F4:07:A4:85
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 27CE
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/711C1A984F0811EEA7034D23C4F9AE02.roa
Signing time: Sat 09 Sep 2023 12:00:17 +0000
ROA not before: Sat 09 Sep 2023 12:00:17 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 9678
IP address blocks: 122.254.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10190 (0x27ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Sep 9 12:00:17 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64fc5e51-3fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:34:71:ec:51:39:7b:72:fd:25:4d:97:06:
98:36:ff:74:59:c5:69:44:94:bf:d6:fc:cb:65:77:
37:4d:62:ee:c3:84:ef:80:78:e5:fa:9e:26:7f:de:
ad:35:2a:b5:e5:de:79:b0:84:99:43:95:13:d3:49:
8e:60:5e:61:27:da:a4:c7:55:41:25:9d:97:8f:9f:
f6:09:fd:0f:f0:4c:80:97:ac:1b:76:b4:91:48:41:
86:dd:81:bc:a6:19:b4:a9:f4:51:eb:20:b1:90:ec:
98:b6:94:c0:f9:54:69:a7:8b:5f:81:a8:e5:9a:ce:
9a:2c:17:9a:2f:8b:9e:5a:b9:32:2f:69:91:e9:e3:
7c:28:2a:2a:22:c3:c3:cf:25:9d:16:43:e0:b8:e8:
3c:5a:46:0c:16:87:4d:2d:e9:36:ed:42:a9:2d:e6:
d6:6e:02:bb:92:0e:6a:a6:8c:91:32:ad:f0:2b:64:
1c:a0:74:ea:9b:13:1e:c7:67:28:64:51:75:82:43:
87:bf:69:f1:d4:b4:5c:bb:35:62:cc:24:2a:23:1e:
ec:02:6f:94:90:02:0b:83:30:68:88:85:a8:92:18:
ce:99:d8:a4:ab:7d:dc:c6:6e:e0:e6:34:03:2d:32:
fb:c5:f4:46:64:9c:68:20:a2:ed:f9:20:65:f7:8f:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2C:AF:49:48:65:86:67:09:A5:96:1D:D4:30:5A:BC:F4:07:A4:85
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/711C1A984F0811EEA7034D23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.64.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:ac:e5:08:5b:b4:eb:6e:85:59:ac:ab:37:56:90:4b:50:9f:
a1:7e:82:ea:2a:9a:20:88:1e:e5:e6:eb:0e:4c:fa:c3:6d:67:
12:31:e9:89:54:90:c3:4d:a9:98:bd:31:81:13:1e:57:70:f9:
24:30:bd:bc:46:04:ac:c5:80:e1:05:a1:d9:32:7d:9a:c5:71:
f2:99:eb:4d:d8:d5:47:8a:84:3e:f0:f8:c5:b7:ab:b9:49:86:
95:c5:24:1a:ca:0f:09:e8:d6:3f:43:4e:96:f1:34:a7:82:ed:
ef:fe:4d:00:45:4f:da:18:e6:0a:50:99:b4:47:64:fc:5a:2c:
1c:d0:93:41:50:b9:88:c6:2c:eb:68:33:39:ac:92:a9:e9:b1:
6a:b6:21:4d:86:25:2b:8e:7f:8b:f6:d1:b6:c5:6e:46:8f:b8:
74:82:d2:e0:57:3f:36:2f:01:68:07:41:33:e9:d6:e5:43:91:
db:1a:67:e7:c0:90:33:1a:8c:5e:93:eb:d9:ba:d5:79:86:fa:
28:04:db:07:f7:89:6b:4f:a3:ce:3a:1b:b9:1d:82:7b:9f:94:
4d:7f:cb:d0:e2:b5:97:c4:48:0c:94:7a:de:f7:20:b1:96:56:
5b:27:38:c5:06:24:3c:73:da:f6:77:59:6b:18:fa:ce:08:17:
69:1e:64:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 08:34:04 2023 by rpki-client on console-ams.rpki-client.org