Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/B6B004188AA211EEB59A4017C4F9AE02.roa
File: B6B004188AA211EEB59A4017C4F9AE02.roa (raw, json)
Hash identifier: loOS5IJ6DCU2lXHB9d4uCCb7UnHwi/pr/27C2/qvzwI=
Subject key identifier: BF:68:84:8A:21:3A:D3:6B:23:BF:D0:B9:E2:E6:CA:65:4B:47:FE:FD
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 2811
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/B6B004188AA211EEB59A4017C4F9AE02.roa
Signing time: Fri 24 Nov 2023 08:23:15 +0000
ROA not before: Fri 24 Nov 2023 08:23:15 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 47757
IP address blocks: 122.254.70.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10257 (0x2811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Nov 24 08:23:15 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=65605d73-f8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7e:22:20:27:21:42:b6:f3:5a:a4:45:67:65:
eb:08:5e:3b:f1:37:4c:b1:af:44:49:61:4d:02:1b:
67:f5:15:fb:4e:f4:5a:15:8c:cd:19:9f:36:89:50:
df:5a:f2:2f:00:0d:0f:1b:14:c8:9d:9c:73:73:0c:
3f:a2:e2:5f:3c:f5:1a:68:05:26:02:b3:df:7e:60:
ff:c9:75:f9:e1:a5:f7:01:5e:7f:05:71:4d:23:a8:
b6:ff:f7:01:bf:3d:2a:b0:1e:d6:27:09:f4:ec:39:
3e:06:fb:39:44:3c:89:81:96:af:49:a3:91:0b:95:
1b:8d:e1:72:64:e6:44:b6:4a:5d:30:7e:be:df:5e:
36:a0:60:4c:3f:cc:1d:3e:8e:58:52:c8:d7:96:2a:
50:4b:ee:d8:a2:1e:86:6c:96:0f:75:5e:e5:70:91:
33:80:a6:90:91:c7:e1:ae:03:03:ae:c6:ec:1e:75:
a0:e9:71:40:eb:76:91:bc:85:39:d6:fb:8c:0c:0c:
fa:30:73:2b:f1:70:7a:59:87:dd:2f:f4:b0:83:4a:
88:0c:b0:1f:f3:10:84:06:a3:1b:3c:c7:84:ee:26:
fa:aa:95:53:c8:ca:eb:f1:a1:53:6f:74:99:ad:06:
3a:e8:a9:78:d0:4e:ac:ec:e4:a3:f2:f0:3c:8b:f1:
46:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:68:84:8A:21:3A:D3:6B:23:BF:D0:B9:E2:E6:CA:65:4B:47:FE:FD
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/B6B004188AA211EEB59A4017C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.70.0/23
Signature Algorithm: sha256WithRSAEncryption
17:e7:53:dd:ae:64:e9:80:73:90:2f:c3:e0:2e:f5:fd:5c:19:
31:14:dc:4c:4b:85:56:67:f1:5c:52:25:06:cf:35:23:34:5f:
e8:0a:fc:2b:6f:17:ee:9a:00:02:1c:37:92:4a:95:44:34:35:
c4:af:45:14:2f:79:35:93:ed:bd:90:da:c7:32:95:d4:80:19:
ca:42:b7:3f:18:97:04:19:2b:e7:bb:08:21:05:9a:fb:81:cc:
f3:02:51:f4:c1:48:98:8f:64:e2:7c:1b:45:89:2b:4e:a0:bb:
54:1c:07:59:d8:1d:86:c4:48:5d:6a:9a:db:34:ae:b4:91:d1:
e6:6c:5a:14:51:62:f2:f0:c0:b2:1e:a0:c9:53:d4:1b:66:c8:
67:79:ad:db:ec:d8:bb:e3:e5:01:07:ef:e0:ab:53:04:b4:a5:
00:56:93:d9:d3:f2:39:75:e2:47:91:7d:86:a6:90:48:31:05:
a9:27:de:60:e6:00:12:52:b7:29:64:90:5e:a5:47:44:6f:7c:
7a:74:99:64:12:0d:c9:66:cc:b3:29:0b:31:35:17:43:0d:ba:
3f:44:ef:0f:3d:6f:48:3b:0a:a2:59:6c:b7:55:cf:25:46:f8:
70:d6:80:4d:e9:d0:0d:e6:12:28:90:9b:b7:01:d8:ed:01:21:
88:59:a5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 13:58:45 2023 by rpki-client on console-ams.rpki-client.org