Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/FE43FEDC4F0711EEBF3B5818C4F9AE02.roa
File: FE43FEDC4F0711EEBF3B5818C4F9AE02.roa (raw, json)
Hash identifier: osYhDyxDqCcaiXdDN2YVAgR4zeKWuhu+3nl9fvUxxdM=
Subject key identifier: 8D:37:FA:B2:5F:DB:CF:9D:99:8F:65:94:95:56:D1:49:F4:FE:B3:29
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 27CA
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/FE43FEDC4F0711EEBF3B5818C4F9AE02.roa
Signing time: Sat 09 Sep 2023 11:57:04 +0000
ROA not before: Sat 09 Sep 2023 11:57:04 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 32558
IP address blocks: 122.254.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10186 (0x27ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Sep 9 11:57:04 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64fc5d90-696c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:d9:cd:59:44:c5:4c:fe:e4:7c:40:76:0b:
b4:b1:b3:26:7b:9a:61:4d:58:aa:5e:ab:42:ce:68:
14:01:ab:d0:fc:23:c7:f5:f5:f1:45:29:73:37:d1:
48:75:fd:5f:da:09:34:ee:40:de:04:c1:76:8d:21:
8f:8a:73:80:fb:cd:28:78:ff:01:fd:7d:d2:6e:14:
11:59:1f:4d:c8:45:bb:bf:76:7f:c3:a6:0d:9e:92:
5e:17:1d:fb:41:a8:5f:7e:b6:77:49:72:67:c1:ed:
b0:42:68:31:e5:3a:b6:bc:af:49:59:87:9f:57:18:
ae:91:fc:e6:7d:b5:bc:32:cb:6c:e0:8c:87:c6:91:
27:68:7f:de:a7:e0:37:cd:b8:4a:55:bb:a4:85:5e:
98:2e:3a:a5:7a:04:62:d1:2c:42:bd:00:c8:5e:c6:
14:82:a1:31:a5:ed:37:3b:3e:f9:29:47:33:16:95:
cd:27:f9:40:21:2e:0f:74:c6:ac:00:4a:75:15:cd:
5e:bc:d5:7b:04:24:dc:90:4d:5d:a7:f4:5f:3e:ff:
97:b7:9f:5b:59:40:85:cc:04:af:33:7e:dc:e7:11:
a4:19:9f:f8:a2:cb:23:d0:59:db:b2:d9:8b:c1:04:
0a:96:c7:26:10:c6:bc:b3:fe:c5:d0:84:20:26:38:
98:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:37:FA:B2:5F:DB:CF:9D:99:8F:65:94:95:56:D1:49:F4:FE:B3:29
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/FE43FEDC4F0711EEBF3B5818C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.64.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:77:d2:f6:f5:40:a3:85:e0:ef:e6:8f:d6:62:36:80:a0:0f:
5c:65:40:10:63:39:d1:4c:2b:c1:c4:df:d7:d8:4c:26:76:86:
54:20:79:60:ea:6f:47:c0:7b:58:7c:81:52:c3:36:b0:e5:8c:
e8:83:85:d7:16:a6:2b:90:a2:1e:fe:13:c5:6f:d7:53:72:b0:
dc:44:ac:ec:8e:36:88:6b:bc:f5:c4:a5:10:22:86:47:f5:dd:
c5:6c:6d:01:08:c8:3d:6e:c7:bf:fd:50:c8:bb:20:e5:53:fc:
94:0a:33:4a:69:aa:07:d6:ca:c2:0e:a2:73:51:75:51:41:0b:
b1:8d:3e:61:f2:43:1d:60:00:a3:d8:a2:86:9e:c1:62:4e:cb:
55:5a:b2:ee:54:1d:93:fc:4e:2e:a8:c7:41:12:36:7e:0f:75:
87:83:21:d7:1b:3a:e4:97:29:ab:37:6d:c7:21:68:ff:29:31:
e9:06:f6:50:eb:9f:82:66:74:4d:9b:01:d3:b4:eb:09:53:ae:
bb:d5:fd:4f:60:29:89:ca:44:16:03:dd:a2:5e:40:2a:0e:d9:
19:3f:2e:40:07:4d:1a:82:37:3e:c7:09:65:55:bb:b5:2c:13:
d5:4f:d3:a1:4a:7f:b4:45:00:c8:9e:36:73:e4:b7:e1:cb:dd:
f4:cd:ac:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 08:34:05 2023 by rpki-client on console-ams.rpki-client.org