Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/BC18C5E8FA0C11EC88515F18C4F9AE02.roa
File: BC18C5E8FA0C11EC88515F18C4F9AE02.roa (raw, json)
Hash identifier: 0iLdbHD+xJ/2XoamB7zYWcC7x4QJCGUHLUF0/0aQ6vI=
Subject key identifier: A2:29:20:D2:D5:20:97:B7:3C:EC:BC:83:BB:0C:B2:0D:2A:CF:DA:94
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 25EB
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/BC18C5E8FA0C11EC88515F18C4F9AE02.roa
Signing time: Sat 02 Jul 2022 13:41:55 +0000
ROA not before: Sat 02 Jul 2022 13:41:55 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 328867
IP address blocks: 122.254.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9707 (0x25eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Jul 2 13:41:55 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62c04b22-0db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:2a:3b:4e:54:f1:86:ec:14:1a:ed:8f:51:
bf:d4:e7:63:a6:fe:31:7e:46:24:a4:49:51:7b:fb:
47:99:cf:da:d8:b0:f1:c4:20:44:a5:9a:c9:da:5e:
05:50:55:57:75:b6:96:5b:93:4c:46:b0:9f:0a:c7:
5d:64:61:4a:d6:8c:ed:3c:7c:db:fa:d5:37:91:16:
4b:22:42:75:6c:30:7d:e5:fa:a1:b8:fa:85:3a:63:
cb:02:49:7e:7d:35:93:3f:3f:43:61:bf:d8:3f:86:
b2:65:8d:59:9f:81:7e:9f:2b:7b:68:8e:01:b8:15:
9a:0a:7d:20:4b:98:6f:2f:3f:96:9f:9e:4f:3d:4b:
af:49:91:ba:1d:2f:4d:d8:3c:79:a3:be:6d:e4:67:
a6:52:d9:49:95:12:3e:99:ff:6b:1f:6a:77:06:4b:
90:57:9e:67:39:a8:39:40:c9:f7:93:4a:54:88:80:
89:10:bd:4b:13:20:21:64:18:92:5f:e3:41:02:79:
f8:3c:81:17:6e:ee:4d:c0:86:f0:28:e9:71:f2:86:
ef:c1:ec:ab:a6:f0:ff:0e:20:13:16:f5:c4:f9:0f:
0e:f3:c1:71:4f:e8:86:7c:3a:48:21:c0:d4:88:32:
c5:ec:69:41:ff:c8:e1:af:59:8f:8c:ae:af:6f:3f:
cf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:29:20:D2:D5:20:97:B7:3C:EC:BC:83:BB:0C:B2:0D:2A:CF:DA:94
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/BC18C5E8FA0C11EC88515F18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.110.0/24
Signature Algorithm: sha256WithRSAEncryption
68:94:bc:eb:a3:7a:a0:f7:66:25:cd:a8:b9:da:64:8a:f6:92:
17:0e:15:b5:e8:c3:1d:41:1d:92:fd:ea:58:a3:50:4a:a0:cb:
10:19:1d:3b:f6:b3:2e:f4:72:68:91:01:09:2b:bf:f9:9d:d6:
f4:8d:4c:c5:3e:1e:63:b4:5a:5a:f8:fc:78:8c:42:d6:f5:27:
81:bd:58:83:c8:7d:fe:0e:9a:d0:60:25:dc:50:7e:56:2b:6b:
c4:c9:8a:2f:ac:bb:a0:f1:22:bc:3b:13:4b:de:13:9e:a4:aa:
e1:24:59:b6:bf:8e:12:14:d6:cd:51:76:49:33:a6:1b:8a:7a:
fd:f8:e6:b4:48:53:39:2c:5b:44:01:e4:c2:2c:68:c5:96:3e:
1f:b1:7d:60:f1:12:86:45:d5:9b:80:40:a8:60:ef:52:f0:e3:
13:4e:fd:c4:9f:5b:f3:a7:e2:36:a4:d2:7c:55:ca:86:d4:be:
b6:74:87:e1:8b:97:00:e2:4a:72:9b:69:f4:27:ed:d0:23:28:
3d:73:ad:f8:09:f5:f2:cf:78:cf:3b:ab:35:dd:81:69:30:ec:
61:03:5a:af:b3:39:6b:9d:45:ac:8c:a5:69:cd:aa:16:e7:c0:
db:09:52:bc:56:86:d3:7d:11:36:86:08:09:15:d8:e7:ae:63:
c8:e5:af:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:15 2023 by rpki-client on console-fra.rpki-client.org