Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/964D32A83F3F11EE9B275576C4F9AE02.roa
File: 964D32A83F3F11EE9B275576C4F9AE02.roa (raw, json)
Hash identifier: V1nznRS6As9dyOTK0TPhzthqXfxIcsgU7GIbiaM2wU8=
Subject key identifier: 8D:A1:DA:5F:E5:DB:87:58:7F:30:36:55:55:D7:EA:68:33:6B:3C:9A
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 2797
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/964D32A83F3F11EE9B275576C4F9AE02.roa
Signing time: Sun 20 Aug 2023 09:54:43 +0000
ROA not before: Sun 20 Aug 2023 09:54:43 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 201106
IP address blocks: 122.254.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10135 (0x2797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Aug 20 09:54:43 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64e1e2e3-0b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:8e:41:6b:c6:61:4f:fc:c4:35:37:98:1e:
c2:05:21:46:f3:84:d9:0e:f4:34:c8:2c:ac:ee:2e:
db:9d:a8:68:9f:d3:53:5f:87:54:1a:3d:12:be:14:
c4:81:e6:a3:2c:c1:00:37:b0:0e:50:ac:b0:e5:f3:
4c:05:4f:14:03:c5:84:80:56:ab:2c:2f:df:9c:79:
1f:4c:ea:b5:ce:5a:23:d2:04:73:80:43:41:89:2d:
d2:96:ef:c4:88:e7:41:dd:23:26:93:4a:3a:2c:ea:
08:04:65:d1:9b:04:50:3f:5f:88:33:bf:4f:90:1e:
d7:41:ae:a4:8c:66:d5:c9:3a:46:92:b4:1f:68:62:
97:36:fa:a9:15:6f:7b:36:d5:43:d1:04:3d:36:81:
4b:1d:67:35:b7:da:ee:ed:11:ed:a0:15:9f:41:fa:
ba:ba:eb:54:2b:e1:05:1a:d6:6c:d4:a0:71:20:bc:
59:e0:e0:7e:89:73:32:c0:77:4d:5e:b8:d6:21:8b:
10:4f:6a:52:0d:71:82:d0:a0:c6:8b:35:90:9f:9f:
42:36:83:18:78:c0:02:5f:9b:75:14:80:2b:fa:14:
7f:48:27:3e:1e:e5:58:e7:07:38:73:74:02:83:79:
cf:02:ae:85:ac:f4:b5:61:57:44:b5:b6:12:6a:c0:
8b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A1:DA:5F:E5:DB:87:58:7F:30:36:55:55:D7:EA:68:33:6B:3C:9A
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/964D32A83F3F11EE9B275576C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.64.0/24
Signature Algorithm: sha256WithRSAEncryption
95:39:de:b5:eb:31:bf:07:fb:0e:43:75:c2:16:e2:9a:20:ba:
fe:c3:f9:71:f3:e3:dd:63:7b:d3:72:3b:5e:20:fc:f1:b9:19:
8d:1e:64:05:06:85:8e:21:26:dd:91:e2:98:82:12:29:82:03:
54:37:a9:c6:31:1c:65:5f:3f:6c:1b:80:84:e4:2b:42:72:6d:
36:0c:99:c8:93:66:be:30:42:2d:e4:06:a1:2a:02:3b:09:ef:
b1:81:a0:52:7e:72:03:22:ff:b3:b2:15:35:81:2e:c7:97:70:
03:ce:91:b8:f7:fa:97:86:aa:fb:40:f8:d6:41:c2:49:18:76:
e0:cc:25:43:da:fa:d2:3c:8d:82:4f:73:da:68:30:e7:c8:c5:
01:76:4b:8c:71:d3:06:ab:1d:34:fe:7c:6a:dc:b2:dc:70:2d:
c2:b4:b3:ec:fe:ef:01:b9:fb:87:31:18:ff:63:3a:9e:1d:74:
33:2a:07:d5:5a:c1:ed:c8:87:3b:42:31:e9:47:51:d0:fb:7a:
6a:3f:50:12:0e:22:2e:ac:15:3e:81:af:f1:24:e1:1d:ef:9c:
95:dc:99:1c:99:01:2e:78:c2:13:49:bd:fd:ec:2d:39:49:a5:
6f:91:34:47:26:26:6d:c4:77:1d:cc:bc:f0:b5:58:6e:1a:ab:
4d:64:8f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 20 11:35:09 2023 by rpki-client on console-fra.rpki-client.org