Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/2199DC1A199E11EFA40FD681C4F9AE02.roa
File: 2199DC1A199E11EFA40FD681C4F9AE02.roa (raw, json)
Hash identifier: iM0LRnW2+STZ77/J4II5taiynBEeQ/Rbmz/E1URL5aw=
Subject key identifier: 55:2B:03:9E:FA:07:2B:5C:D0:BF:40:D4:BA:B5:A9:8E:F0:FA:13:83
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 336C
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/2199DC1A199E11EFA40FD681C4F9AE02.roa
Signing time: Fri 24 May 2024 07:20:43 +0000
ROA not before: Fri 24 May 2024 07:20:43 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 53356
IP address blocks: 122.8.32.0/22 maxlen: 22
122.8.48.0/22 maxlen: 22
122.8.64.0/22 maxlen: 22
122.8.112.0/22 maxlen: 22
122.8.116.0/22 maxlen: 22
122.8.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 25 Jul 2024 07:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13164 (0x336c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: May 24 07:20:43 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66503fcb-d7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:13:fe:aa:2a:17:ad:e6:28:93:9d:f2:20:
14:33:32:d7:d5:2b:8f:3e:48:11:9a:a2:1d:8f:92:
02:f7:2d:61:e9:2b:77:ec:b9:42:45:a5:dc:26:41:
56:8d:73:11:20:34:ac:ba:d3:7f:1c:33:64:3d:03:
63:a3:5a:e8:87:d7:2f:54:30:7c:1e:04:b2:c7:4a:
d6:2c:6c:05:59:32:a8:f3:f6:20:04:56:99:26:be:
1c:5a:bf:90:12:e5:86:22:67:81:fe:8c:ab:b0:a6:
04:1d:dc:21:e3:ce:a7:d6:d2:d9:d5:39:22:72:73:
50:c8:c5:86:40:f6:9a:cb:ea:21:05:3d:ab:7d:3b:
30:04:33:52:d5:2b:92:04:a7:47:4b:a5:7c:a2:7d:
2c:97:d9:c0:83:3b:9d:5f:77:61:52:1a:c6:44:14:
e1:3c:a8:06:e9:b1:9f:25:75:cc:77:3e:ce:c4:11:
3b:f0:13:88:83:c1:38:3e:7c:5d:3e:7d:92:23:02:
a1:cb:7d:b1:e2:c6:dd:dc:a9:5f:48:33:a7:d9:c8:
64:e8:b4:f9:9a:b8:c3:27:b2:10:45:90:92:b5:2b:
fe:49:3a:ea:f9:37:46:c5:aa:e3:cc:68:0d:06:f5:
6c:93:77:91:db:b9:aa:1f:58:54:59:e6:66:47:c7:
e1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2B:03:9E:FA:07:2B:5C:D0:BF:40:D4:BA:B5:A9:8E:F0:FA:13:83
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/2199DC1A199E11EFA40FD681C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.32.0/22
122.8.48.0/22
122.8.64.0/22
122.8.112.0/21
122.8.124.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:5d:9d:c4:33:87:98:14:6d:67:f4:c6:52:f0:d8:fe:98:fa:
fc:4d:56:33:f6:f3:01:67:6e:29:2f:c1:ba:1c:91:b7:27:e3:
ea:77:04:b0:bc:65:c6:70:d7:80:60:1e:ab:7f:70:74:4f:4d:
b1:c9:59:1c:c0:89:1e:29:2e:47:71:69:08:45:9d:bf:0d:66:
cc:52:a6:55:f4:da:5a:97:eb:e9:2f:0d:39:1a:f7:59:5e:ce:
2a:38:ab:dc:b1:55:1e:c6:8d:e7:1d:68:57:60:6c:bb:88:4e:
85:dd:91:76:1d:8f:40:0f:eb:6d:48:0a:9e:fc:45:3a:9b:74:
05:c4:56:33:46:32:32:ab:77:3a:f0:e1:87:68:b2:11:ad:e4:
36:ec:06:47:0c:ec:3d:c2:f0:a1:9e:c7:70:00:fa:3d:94:13:
32:bb:4b:62:4a:c6:5a:f5:bd:79:98:05:fc:5a:41:fe:d5:9a:
5f:00:9f:05:e1:cf:b3:38:2f:33:70:3a:0f:7c:c6:60:6a:aa:
46:b4:4e:1f:b6:3e:f0:0b:20:e0:97:c9:48:b0:cb:af:98:b0:
80:de:22:bc:1b:5c:7b:99:1d:c3:ce:b9:c9:09:52:9f:d7:38:
49:13:14:9c:71:84:37:a9:a1:59:6e:48:21:48:01:fa:72:df:
4f:27:4f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 09:27:17 2024 by rpki-client on console-ams.rpki-client.org