Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/C96706B24D6511EEA3946653C4F9AE02.roa
File: C96706B24D6511EEA3946653C4F9AE02.roa (raw, json)
Hash identifier: R9phN0Tf5XmF4Tt1RIYfBnwM3TVimR19VzejCRjlvZ4=
Subject key identifier: A1:C7:46:34:5E:FE:C3:D3:EB:28:E4:DB:7E:65:7C:46:6A:87:5D:9B
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 27C2
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/C96706B24D6511EEA3946653C4F9AE02.roa
Signing time: Thu 07 Sep 2023 10:03:26 +0000
ROA not before: Thu 07 Sep 2023 10:03:26 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 132325
IP address blocks: 122.254.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10178 (0x27c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Sep 7 10:03:26 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64f99fee-faab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1f:ee:1f:25:05:8b:ca:4d:b7:cb:56:f4:db:
6d:e0:c9:50:df:1d:80:99:75:5a:b6:a6:a3:4a:27:
3e:3b:67:8d:c1:2b:7f:d2:17:73:06:19:38:ad:1e:
04:e1:8c:88:64:e9:dd:41:ae:62:96:68:04:d8:17:
3a:0b:40:11:13:bf:ef:42:c1:59:58:36:73:e7:cc:
15:06:f7:d6:1d:95:cb:13:d1:0b:7c:db:e1:da:c1:
d5:58:ce:ad:09:96:24:57:c3:c5:8d:97:28:0d:bb:
93:bf:97:16:50:0d:3a:5c:3e:eb:c9:47:81:d4:c6:
e4:05:42:32:cd:f7:06:2a:db:b2:d8:d7:51:e1:03:
55:d2:b7:60:8b:7b:2c:a7:15:aa:9a:10:42:2e:22:
b1:e5:0b:f2:4f:0f:c4:c0:ae:17:76:8e:1a:df:52:
e8:7e:b2:6c:35:2c:c5:18:38:8f:0a:cc:d5:2a:18:
7b:11:f6:39:54:a2:44:80:c5:12:4d:8d:9d:a0:a6:
59:5d:80:17:ef:f0:6a:de:67:b9:d4:51:a6:39:48:
c8:50:4e:d6:bc:cf:b7:32:1c:7d:11:cf:70:23:30:
4f:3d:26:25:a6:6a:f3:29:0b:85:78:32:2e:a0:ab:
bb:29:54:10:a4:db:d6:d6:c1:00:09:c7:ad:0e:3f:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C7:46:34:5E:FE:C3:D3:EB:28:E4:DB:7E:65:7C:46:6A:87:5D:9B
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/C96706B24D6511EEA3946653C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.64.0/24
Signature Algorithm: sha256WithRSAEncryption
86:58:d2:c8:1d:00:d6:fb:0d:be:1c:3f:52:27:fc:3a:0b:d1:
18:52:7e:b5:71:ab:3e:06:1a:a2:c5:22:86:5d:55:14:36:b2:
30:3a:a0:dd:7d:4d:16:d2:95:08:12:1e:f2:ef:68:b3:9d:6e:
bd:d7:f4:66:51:11:b7:21:dc:34:bf:7a:33:ae:c3:69:46:ee:
b6:e5:da:bd:a0:93:db:40:eb:e7:20:b7:d3:a1:11:50:08:31:
f8:5e:70:25:4e:51:21:d1:09:dd:32:81:5b:a7:41:66:36:50:
52:d9:30:02:14:e0:84:1d:40:4d:3e:de:bf:5f:b5:de:47:1b:
48:52:13:4d:9d:69:ce:05:e6:cf:96:f6:e0:9b:06:e1:62:eb:
d2:8c:45:a5:ba:e2:ff:79:28:d1:0d:88:24:98:23:b5:09:91:
dd:55:ca:c1:f2:25:1b:37:e0:58:0c:f0:d2:a4:a3:11:c0:dc:
f5:ca:d7:65:bf:08:07:74:60:e7:b3:1e:a2:9b:24:66:f5:e4:
ae:e3:b7:7b:51:7d:a4:75:0a:97:a0:24:6e:47:a8:f1:31:b5:
3e:ec:f9:53:01:e0:04:b6:a5:38:ea:5b:08:10:e1:97:11:7e:
83:e6:11:2c:82:d7:15:34:94:ed:cf:48:8d:8f:0e:c0:c6:5a:
e7:05:0a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 08:34:04 2023 by rpki-client on console-ams.rpki-client.org