Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/9AFBDD587C0B11EB886A2F62C4F9AE02.roa
File: 9AFBDD587C0B11EB886A2F62C4F9AE02.roa (raw, json)
Hash identifier: Hau9jTPWQvtX1GnXt7gemGkZn8ZCqjS0iFywcOSzCfM=
Subject key identifier: FF:C7:14:2A:69:95:3F:FD:08:EB:62:DD:0C:14:8B:6F:9E:2F:23:C6
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 25B0
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/9AFBDD587C0B11EB886A2F62C4F9AE02.roa
Signing time: Wed 08 Jun 2022 04:22:47 +0000
ROA not before: Wed 08 Jun 2022 04:22:47 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 30058
IP address blocks: 122.254.116.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9648 (0x25b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Jun 8 04:22:47 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62a02417-98c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1f:d3:84:a7:6e:4a:8c:ad:61:0d:d9:bc:da:
cf:6e:b7:87:6d:1b:bc:c0:cb:de:8c:a5:49:23:96:
de:0f:c3:58:be:35:79:f1:d4:fe:3f:82:10:ae:f0:
f6:49:b0:59:e1:7e:68:68:23:b1:22:f0:db:fc:fd:
62:af:6e:25:b9:4c:31:b3:a1:ca:dc:cb:3a:92:15:
9e:4f:4f:e3:f2:cb:07:06:4f:19:9d:f8:c0:60:bb:
61:84:fc:05:b7:d5:b0:f5:7a:82:5d:5d:32:4d:f1:
db:d0:a5:17:e2:70:ae:dc:3a:6c:28:b6:fe:ef:b5:
07:c4:8b:13:64:60:d0:b5:f2:de:b5:58:be:f5:45:
ae:86:11:0b:b3:66:a5:25:bc:98:f7:94:f9:c7:b3:
59:0b:0c:58:1f:d6:b2:20:d4:3f:d6:39:51:0f:d6:
b9:e3:c8:65:5f:b9:43:6c:de:d6:55:ac:54:dd:f7:
44:7e:1b:8f:d3:ce:49:4d:64:14:83:79:d3:4d:63:
99:fe:6d:15:86:60:81:d4:54:d0:dd:ad:e8:e4:46:
b8:a8:fe:35:19:df:dc:c3:ce:f0:43:75:fc:09:22:
ee:98:73:67:5a:ca:95:2a:48:81:0c:58:73:b7:2d:
52:55:6e:95:86:b3:02:d7:40:7e:3e:45:d8:a7:9f:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C7:14:2A:69:95:3F:FD:08:EB:62:DD:0C:14:8B:6F:9E:2F:23:C6
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/9AFBDD587C0B11EB886A2F62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.116.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:d3:86:e8:1d:1b:f2:a3:08:e3:3b:e5:4a:a7:a9:c1:37:4c:
68:8f:84:fe:46:54:a1:79:50:90:05:41:98:f9:b1:42:49:fe:
34:a7:6a:a7:01:e1:61:10:db:05:6f:4a:2a:7c:f9:67:ec:b8:
ff:e7:40:fb:e8:41:2a:61:8f:5f:7b:cc:9b:6b:b6:26:98:9c:
78:6f:0d:7e:c7:11:8c:d1:b6:5c:e2:c9:0b:88:9e:21:a2:00:
cb:8a:0c:1e:2b:24:55:1b:84:4c:0f:c0:be:fe:35:94:57:43:
b2:a7:de:ad:2f:51:30:cb:a9:21:e6:1c:9e:3a:fa:67:ff:a1:
c6:7e:b9:25:82:a0:75:dd:b0:65:87:fc:b1:23:21:86:b1:be:
ec:39:45:18:4f:f0:4b:2f:2e:98:3e:c6:14:8b:a5:4d:3c:30:
fc:37:a2:f0:a0:02:62:23:62:1a:f5:8c:1a:3d:1c:25:07:0c:
cf:67:36:7c:42:7d:6e:48:82:f2:f1:f4:09:24:6d:d1:13:f4:
b0:19:a5:72:5e:be:84:7f:6b:2b:cf:d7:b3:2d:14:89:36:bc:
e6:5f:09:04:4a:ea:08:38:3d:63:e9:16:48:62:40:6d:39:48:
49:54:50:d7:24:cf:80:b8:44:79:b6:8d:b5:7f:ff:c6:98:38:
80:b4:13:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:15 2023 by rpki-client on console-fra.rpki-client.org