Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/9C51A0D47C0B11EB886A2F62C4F9AE02.roa
File: 9C51A0D47C0B11EB886A2F62C4F9AE02.roa (raw, json)
Hash identifier: x2wTJQCtQi4ZdA/z5I89QqN3WSKIbXk5b9lPU7zZ0FA=
Subject key identifier: FB:A9:98:82:BF:B3:44:5B:8B:6A:60:3A:51:B0:85:F4:88:3E:9D:AE
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 25AF
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/9C51A0D47C0B11EB886A2F62C4F9AE02.roa
Signing time: Wed 08 Jun 2022 04:22:46 +0000
ROA not before: Wed 08 Jun 2022 04:22:46 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 2914
IP address blocks: 122.254.116.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9647 (0x25af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Jun 8 04:22:46 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62a02415-61c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:67:38:e6:28:8c:30:74:c7:90:15:85:2d:91:
f0:a8:51:5b:82:0d:46:f5:0d:1c:42:80:51:16:be:
a1:13:bd:82:f2:67:3b:2d:8b:a8:de:d3:21:7a:1a:
e1:ad:99:21:81:63:e1:7c:2c:b7:c5:41:47:96:37:
5e:c6:29:9a:6a:24:2e:9e:4b:a9:17:21:50:e8:f0:
3b:4a:7e:53:bf:6c:d8:bb:08:69:97:52:c8:b8:f3:
f3:6f:b7:d0:da:93:ef:ef:d8:ab:6a:bd:08:bf:30:
54:3f:08:14:98:99:43:31:63:50:60:0d:bd:72:8a:
df:d6:1d:00:9c:2d:ed:0c:14:f4:78:65:95:60:e1:
8f:48:c5:a4:c4:74:d8:18:f3:1b:4b:a7:58:0b:34:
30:91:86:8f:c4:5b:89:6e:7e:d0:c4:3f:c0:2e:48:
fa:86:f0:67:cc:a4:43:30:36:c1:d6:4e:d3:11:2f:
e0:a7:cd:2e:27:96:c5:91:7d:18:f6:42:88:9b:42:
79:db:a7:b7:e8:db:ca:b0:10:d0:f0:cb:76:b0:8e:
4c:67:76:0e:5e:a8:39:5d:d6:1f:7c:01:73:13:d2:
68:17:de:63:02:67:e4:c9:b2:ab:8a:34:7a:a4:38:
69:7d:10:4c:96:ce:96:5d:f6:75:2e:a1:fe:24:92:
67:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A9:98:82:BF:B3:44:5B:8B:6A:60:3A:51:B0:85:F4:88:3E:9D:AE
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/9C51A0D47C0B11EB886A2F62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.116.0/22
Signature Algorithm: sha256WithRSAEncryption
83:35:77:fc:16:26:c2:21:f5:0e:9b:a6:48:33:27:8f:c2:27:
e2:30:fb:83:e8:aa:76:8b:e1:d3:93:b6:21:51:87:80:b3:eb:
8e:0f:4a:5f:a3:cf:b2:37:bb:0d:23:7d:40:5a:79:ba:f3:87:
05:14:75:1b:60:0b:f5:2c:bc:88:b5:1b:de:02:30:a2:2e:8c:
f5:e4:90:0a:02:af:b2:aa:86:15:fd:7b:82:cf:70:ab:81:46:
ec:47:2c:3a:e5:01:a4:95:d5:91:50:96:5f:de:20:57:93:67:
dd:1f:8f:dd:57:da:d8:0c:b8:8d:fc:fd:a8:e2:37:06:07:e6:
71:6c:36:2f:32:e9:c6:85:da:b0:06:d5:b2:48:d4:e0:4f:6d:
3c:61:11:f9:a7:fe:67:ae:29:1c:b9:5a:d8:01:78:fe:4a:f3:
18:b0:3c:74:69:2c:6e:59:4e:63:34:f7:13:bc:3a:ee:8c:3f:
f0:41:74:c2:7e:13:e6:49:05:f4:8e:66:e2:da:fa:43:61:7c:
62:72:30:44:9b:20:75:a4:3c:3f:21:b6:e5:1a:eb:82:93:31:
45:e8:cb:19:38:fc:de:a5:37:1b:dd:e1:70:17:59:82:b9:54:
3c:4b:02:eb:0e:c5:bf:e3:80:be:c7:14:bf:ab:3d:33:cf:a1:
ee:fa:b6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:15 2023 by rpki-client on console-fra.rpki-client.org