Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/D781DF1664DA11ED8D290065C4F9AE02.roa
File: D781DF1664DA11ED8D290065C4F9AE02.roa (raw, json)
Hash identifier: 08KawEysWLDXPahDZAsl3lWwk97wu6gJTUVMFxtT+I0=
Subject key identifier: B8:85:6D:D5:55:8B:3F:C1:E3:C2:26:99:60:EC:E5:AA:A4:51:FB:08
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 2747
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/D781DF1664DA11ED8D290065C4F9AE02.roa
Signing time: Sat 20 May 2023 05:02:59 +0000
ROA not before: Sat 20 May 2023 05:02:59 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 62390
IP address blocks: 122.254.116.0/24 maxlen: 24
122.254.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10055 (0x2747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: May 20 05:02:59 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=64685483-6aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e8:d0:8b:df:d8:89:c2:8d:1f:4a:1a:a7:7e:
17:2d:44:63:d6:8d:fb:ee:a3:6e:5c:35:6d:d5:f8:
c6:8d:f9:6d:ac:fc:3c:ab:24:a1:c5:a6:a4:bb:d2:
b4:fb:38:e7:5a:56:d1:8b:d5:41:19:f8:09:94:1b:
46:ac:e2:61:d2:a0:ee:1b:c2:eb:bb:6d:5e:ac:f1:
45:03:b7:05:d5:2e:94:c7:0e:29:04:50:e9:8a:70:
5a:7e:ea:81:bc:a7:ea:c1:2f:2d:ba:ee:ed:8c:fe:
61:2f:89:64:e1:86:b0:c1:ad:0e:94:c6:14:4b:da:
8d:43:33:33:91:2c:9d:c5:49:51:49:6a:e5:ac:19:
8a:21:bf:86:90:8d:d9:75:a7:6f:a5:36:99:bd:77:
1e:73:24:ae:fd:d0:52:30:6a:9b:f9:25:e8:29:fe:
0d:1c:67:c6:f4:47:80:05:fc:f8:3a:55:10:83:45:
b5:cb:08:d7:f3:57:04:e4:91:5d:d7:c2:ab:b7:df:
4f:e8:0d:d1:b0:11:28:c8:ff:b5:ff:30:51:bc:8b:
35:13:e7:64:7d:19:bc:18:5c:82:cf:2b:4f:1f:7f:
65:68:d3:dd:8f:f0:01:41:87:ca:39:e5:68:0e:af:
4f:ff:6c:bf:fd:29:9e:08:5d:85:b7:d2:d5:d0:8e:
88:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:85:6D:D5:55:8B:3F:C1:E3:C2:26:99:60:EC:E5:AA:A4:51:FB:08
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/D781DF1664DA11ED8D290065C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.116.0/24
122.254.119.0/24
Signature Algorithm: sha256WithRSAEncryption
93:75:45:b8:18:ac:57:16:ae:a3:29:9c:86:1a:dc:50:6a:ba:
26:63:e4:2c:ec:70:64:a9:11:74:ae:6e:bb:92:a7:53:12:7b:
30:b1:ce:ed:37:e9:14:4a:34:24:41:31:a4:c9:84:30:d5:b4:
c8:5f:34:2c:41:2c:9d:83:d3:9d:56:2e:7c:cc:b4:00:c7:98:
53:73:00:58:0e:bb:be:37:44:8f:9a:7c:b2:c3:bb:23:1d:c2:
c3:b4:62:5b:4f:13:b6:4e:4a:82:43:ac:11:44:36:40:77:34:
5f:51:d0:a5:7d:17:c9:fe:1e:83:c5:90:23:ed:d2:1a:cb:7c:
09:7c:fb:30:4a:3a:e7:75:d8:a0:6c:42:86:29:db:10:fe:49:
3a:76:de:14:1b:00:c1:ee:bc:07:42:a3:ac:6f:4f:c3:8e:4d:
52:a5:dc:33:e6:e9:df:6a:75:da:bf:63:87:ca:bd:84:b9:be:
13:21:6a:da:45:5d:43:50:c4:6b:c8:f3:c5:5a:a2:04:bb:c9:
f4:fa:95:2a:a8:17:7e:37:73:66:5c:32:bc:f1:c0:76:55:e6:
8a:be:7f:89:01:8c:ef:e5:56:9d:3f:55:36:c2:cb:90:70:af:
7f:3d:99:f2:db:d1:61:ee:b1:3c:be:9b:4a:53:ea:fb:b3:07:
1a:53:5c:88
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICJ0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3NDkxMTAvBgNVBAUTKEYwMEU3RTRDODA1M0NGRkEwNjhFQjczRTk1ODg5MkRE
OEJFNjFBOEMwHhcNMjMwNTIwMDUwMjU5WhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDY4NTQ4My02YWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2+jQi9/YicKNH0oap34XLURj1o377qNuXDVt1fjGjfltrPw8qyShxaaku9K0
+zjnWlbRi9VBGfgJlBtGrOJh0qDuG8Lru21erPFFA7cF1S6Uxw4pBFDpinBafuqB
vKfqwS8tuu7tjP5hL4lk4Yawwa0OlMYUS9qNQzMzkSydxUlRSWrlrBmKIb+GkI3Z
dadvpTaZvXcecySu/dBSMGqb+SXoKf4NHGfG9EeABfz4OlUQg0W1ywjX81cE5JFd
18Krt99P6A3RsBEoyP+1/zBRvIs1E+dkfRm8GFyCzytPH39laNPdj/ABQYfKOeVo
Dq9P/2y//SmeCF2Ft9LV0I6IkwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLiFbdVV
iz/B48ImmWDs5aqkUfsIMB8GA1UdIwQYMBaAFPAOfkyAU8/6Bo63PpWIkt2L5hqM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc0OS9CRDY0NDE5MDlG
QTQxMUU0QjhERkREMzdDNEY5QUUwMi84QTUtVElCVHpfb0dqcmMtbFlpUzNZdm1H
b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhBNS1USUJUel9vR2pyYy1sWWlTM1l2bUdvdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkU3NDkvQkQ2NDQxOTA5RkE0MTFFNEI4REZERDM3QzRGOUFFMDIvRDc4MURGMTY2
NERBMTFFRDhEMjkwMDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAB6/nQDBAB6/ncwDQYJKoZIhvcNAQELBQADggEBAJN1RbgY
rFcWrqMpnIYa3FBquiZj5CzscGSpEXSubruSp1MSezCxzu036RRKNCRBMaTJhDDV
tMhfNCxBLJ2D051WLnzMtADHmFNzAFgOu743RI+afLLDuyMdwsO0YltPE7ZOSoJD
rBFENkB3NF9R0KV9F8n+HoPFkCPt0hrLfAl8+zBKOud12KBsQoYp2xD+STp23hQb
AMHuvAdCo6xvT8OOTVKl3DPm6d9qddq/Y4fKvYS5vhMhatpFXUNQxGvI88VaogS7
yfT6lSqoF343c2ZcMrzxwHZV5oq+f4kBjO/lVp0/VTbCy5Bwr389mfLb0WHusTy+
m0pT6vuzBxpTXIg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-ams.rpki-client.org