Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/DCAD3772D81311EDA7DB5336C4F9AE02.roa
File: DCAD3772D81311EDA7DB5336C4F9AE02.roa (raw, json)
Hash identifier: dAxVMP6xidwNpIchXgTOPNZTw+8cVthPmTC1QiYaIE8=
Subject key identifier: FF:B0:6F:63:15:F1:EC:35:26:1C:EA:93:88:38:6D:9B:DD:6D:6F:FA
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 2731
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/DCAD3772D81311EDA7DB5336C4F9AE02.roa
Signing time: Tue 11 Apr 2023 02:52:14 +0000
ROA not before: Tue 11 Apr 2023 02:52:14 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 31733
IP address blocks: 122.254.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10033 (0x2731)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Apr 11 02:52:14 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=6434cb5e-0df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:9a:b7:b7:5b:a6:31:b5:41:56:6b:61:74:
1c:a7:d7:ab:4b:e7:2d:cf:8c:d7:d2:19:65:1c:31:
96:a8:21:62:79:27:2e:d9:0a:5a:49:d1:4e:23:45:
cd:bc:2a:10:5e:5f:60:ec:da:9f:50:92:ea:15:05:
e1:12:c1:ea:74:ca:40:86:6c:bd:af:64:4e:e3:97:
0a:8c:48:76:32:ae:db:6a:57:f0:c0:9a:39:f3:27:
2d:72:12:a1:ff:b1:02:93:e3:29:ae:b0:5e:f8:80:
fd:e0:ee:e2:c4:b4:91:b5:26:90:93:05:37:c9:79:
05:db:c4:99:7a:1b:30:a8:29:f3:c7:53:91:13:f8:
af:d6:2f:79:3b:5f:a5:63:f6:fd:a4:5d:14:1f:32:
7c:f3:4b:79:da:01:2a:b0:6d:22:6d:12:51:cd:fa:
41:a7:5f:90:fa:66:08:e0:07:2c:9b:90:6a:7f:70:
ab:03:fc:bf:5c:b6:67:f3:35:2f:2f:df:14:6b:e0:
53:72:9e:af:db:92:38:2f:67:6b:a4:cf:4a:40:6e:
64:96:14:9e:56:43:2b:8e:54:55:3e:c1:d5:26:24:
49:5d:7a:e5:a0:c7:a3:a5:09:fb:07:b8:ef:0e:14:
d3:78:3c:84:cf:f7:44:17:4e:bb:1b:a6:59:8b:8d:
ea:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B0:6F:63:15:F1:EC:35:26:1C:EA:93:88:38:6D:9B:DD:6D:6F:FA
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/DCAD3772D81311EDA7DB5336C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.119.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f4:55:3f:9b:6e:d7:b1:3b:0e:43:3c:86:4d:e0:d6:c1:0c:
e7:9a:88:80:25:7d:25:65:0c:fe:f4:5a:1c:50:53:af:28:f7:
0d:76:48:c3:2c:b7:31:0c:f6:b3:2a:96:69:0e:e4:6c:6a:0e:
cb:97:6b:e2:5b:10:85:e6:92:2d:fb:d2:da:64:29:fc:fd:89:
a2:b0:e9:91:41:c8:d5:48:c5:16:68:f3:64:d1:b7:ab:82:5f:
56:39:8e:b8:84:11:c8:91:4f:79:30:cf:a1:90:99:d2:69:89:
45:c9:08:76:9e:30:cd:cf:41:15:a3:5f:f5:4d:60:83:76:80:
14:83:5a:e0:30:8d:2a:3e:43:82:2d:83:25:dd:df:dd:34:55:
6f:58:75:db:a8:ff:03:ab:0c:85:97:cf:a2:7a:b7:1f:86:56:
48:01:4c:47:0f:ca:8c:6d:d4:f2:ed:97:21:0f:c2:90:8a:0e:
16:fb:27:21:9d:17:a6:4a:c1:bf:52:5c:69:a3:e0:45:d5:a8:
d3:13:89:04:b4:be:3d:ac:cf:62:47:b3:28:06:33:d0:25:4a:
38:68:92:47:4a:b0:cf:87:44:d1:6d:af:b5:14:25:89:bc:51:
c2:8d:dd:7a:b6:b7:ac:f7:5a:25:a0:11:7d:9e:bc:65:b1:c8:
f9:3f:18:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-ams.rpki-client.org