Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/8E76449C7D6511EF81D24F15C4F9AE02.roa
File: 8E76449C7D6511EF81D24F15C4F9AE02.roa (raw, json)
Hash identifier: Un0ah1/qczN8LMrAlfhcNVRCjuYCGuEcVg+iFvrnyRs=
Subject key identifier: 3D:61:BE:56:35:93:B9:F2:6C:32:82:51:93:56:22:6F:B9:58:F3:16
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 17B3
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/8E76449C7D6511EF81D24F15C4F9AE02.roa
Signing time: Sat 28 Sep 2024 06:49:36 +0000
ROA not before: Sat 28 Sep 2024 06:49:36 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 134489
IP address blocks: 122.129.86.0/24 maxlen: 24
122.129.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 07:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6067 (0x17b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Sep 28 06:49:36 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=66f7a700-2a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:4c:90:22:c5:fc:39:3b:58:d2:e4:f1:6e:
16:e6:d2:ca:bd:4b:5a:1d:cd:fc:f8:63:ce:24:15:
02:dd:15:28:d3:25:42:29:85:e5:44:bd:35:9c:70:
84:cb:da:8b:ba:42:c6:d2:3d:e0:da:6d:11:af:26:
a9:79:2a:cf:6a:ef:f7:d0:dd:36:3c:83:ea:64:eb:
30:0a:0f:42:0a:93:b6:11:88:64:57:18:29:63:8b:
d4:bb:0e:f5:18:41:4d:f9:ef:49:ad:81:a6:16:ac:
b4:d6:bb:70:c4:7b:a2:d9:2f:09:36:24:09:8f:1e:
68:b5:13:70:79:94:d4:4b:c0:86:0f:66:93:29:49:
49:8b:42:d6:aa:9c:31:fc:b7:5a:9f:87:58:30:42:
6a:bd:10:c2:a5:c3:d2:ec:a5:1b:69:25:ee:fd:47:
62:4d:5b:14:66:63:42:c8:2f:c7:b8:2a:72:d3:b2:
3c:01:e1:d2:41:f3:81:94:3a:f6:c3:ea:0f:b2:3a:
67:3d:07:44:27:ca:01:5a:70:cb:70:ba:dc:39:dd:
3f:1c:a6:e7:5c:b4:2b:63:f1:e0:52:f7:e7:94:9d:
90:f9:2f:3f:01:1b:bf:47:96:63:f1:f8:bb:bf:23:
aa:41:80:c6:da:8a:fd:be:01:ab:e6:df:93:64:44:
7b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:61:BE:56:35:93:B9:F2:6C:32:82:51:93:56:22:6F:B9:58:F3:16
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/8E76449C7D6511EF81D24F15C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.129.86.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:f5:6e:94:12:af:f0:96:81:5d:6b:45:ab:72:91:c9:ba:0b:
14:9b:25:f4:4a:63:77:19:7d:e0:8b:f9:a6:4d:76:6a:63:f5:
fe:0f:fb:41:89:de:02:61:2a:29:c7:31:20:0a:03:d2:5d:0d:
cd:d2:06:a9:24:48:d6:34:fa:dc:32:8c:5b:fe:75:e4:1a:66:
eb:12:93:34:d8:64:9d:39:b5:90:90:3e:0a:82:c7:41:f5:c7:
89:86:56:97:ba:49:2c:6f:29:ce:5a:75:ef:22:df:4f:c5:28:
69:3a:4f:2d:e0:03:ec:44:ae:26:d0:d9:88:76:82:72:1a:00:
25:31:6a:76:5c:01:5f:fc:37:a0:31:b4:c6:05:88:ef:c8:37:
80:5d:df:9d:8e:d7:71:32:96:93:21:25:ed:74:97:a4:0d:a6:
c3:a6:98:61:e8:cc:4c:8c:b6:f9:2d:b9:c1:a3:0c:a1:e2:41:
64:e1:47:99:07:8f:11:90:69:b5:03:c3:75:5d:ca:60:d7:ab:
1b:61:a0:7d:2f:00:5a:40:22:56:3c:ca:b9:18:ee:54:d0:8b:
fa:9f:b6:7c:00:58:98:08:65:26:13:6d:65:13:dc:40:6d:a6:
c1:65:3c:c6:80:5e:cf:92:b5:0e:f6:1b:ed:db:c1:c2:1a:02:
4e:08:19:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 08:53:00 2024 by rpki-client on console-fra.rpki-client.org