Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/4A1B5F70F7AB11EE974BED35C4F9AE02.roa
File: 4A1B5F70F7AB11EE974BED35C4F9AE02.roa (raw, json)
Hash identifier: xdBRXkasFnCdbDnj95lTNkr0DxJejtqN1VUwwCouJ7U=
Subject key identifier: DC:CD:0C:8B:D6:95:8C:CE:F1:E8:E6:06:45:D8:BF:C7:DB:D9:7D:AE
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 3343
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/4A1B5F70F7AB11EE974BED35C4F9AE02.roa
Signing time: Thu 11 Apr 2024 02:29:15 +0000
ROA not before: Thu 11 Apr 2024 02:29:15 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 34549
IP address blocks: 122.8.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 28 Apr 2024 02:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13123 (0x3343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Apr 11 02:29:15 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66174afb-6d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1a:51:b3:e0:30:67:44:29:01:a7:e5:08:67:
64:11:27:ed:83:b4:78:d2:6b:69:e8:f8:69:b0:b3:
d4:6c:c4:45:5d:aa:51:2e:b1:d4:9c:86:ca:b3:ad:
d7:42:18:81:10:3e:30:05:ea:60:81:7c:48:41:db:
75:46:40:98:de:24:19:89:89:d8:4f:56:20:92:29:
c6:0f:e0:12:e0:62:05:66:27:7d:85:b5:8b:8d:ce:
ed:18:38:03:8f:cf:32:8d:06:98:c7:04:e0:ec:3b:
25:0b:a3:06:97:50:e1:b5:66:29:7f:ca:62:01:f3:
93:bf:6d:82:61:13:18:09:0c:88:a1:41:cb:c7:3f:
0f:69:5a:15:a5:44:55:15:53:4b:fc:0a:d6:f5:b5:
83:bd:f7:95:f6:d1:29:c0:c9:ee:d1:ea:aa:d6:2c:
9f:19:3c:34:0e:38:2f:82:d4:dd:14:0b:1a:cb:bd:
5e:cb:b4:83:c0:d1:ff:84:da:62:af:01:f6:2e:a5:
3c:19:ad:ca:f5:2c:e4:62:17:55:a4:60:5a:50:d9:
79:1c:f3:18:38:7a:fe:b4:70:24:d0:90:07:a3:96:
3b:28:bb:af:ca:29:4f:4a:5a:36:4b:8d:78:00:52:
bb:0b:8f:a9:c7:78:9c:4a:b3:ee:43:0c:39:09:0d:
f7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CD:0C:8B:D6:95:8C:CE:F1:E8:E6:06:45:D8:BF:C7:DB:D9:7D:AE
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/4A1B5F70F7AB11EE974BED35C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.60.0/22
Signature Algorithm: sha256WithRSAEncryption
83:ae:60:4b:a9:0e:76:9f:4e:64:6f:42:e5:61:7f:55:6f:be:
95:8f:ef:59:6e:90:6d:c1:97:16:52:36:e7:6b:ab:2a:07:9c:
26:2b:ec:09:9e:34:81:95:1a:41:b1:74:01:b2:68:10:0d:5a:
88:8d:72:f4:3a:cc:6c:ff:9d:a2:15:18:d0:ab:04:f1:8b:ac:
b1:81:03:00:d8:32:e5:d1:df:91:82:64:73:90:5d:7c:73:1a:
0f:70:d8:2b:a5:7b:3f:be:ee:a3:d1:2a:87:0d:eb:a2:6b:cc:
47:f9:f0:a2:48:90:3f:77:5e:26:b8:72:f6:ed:19:4c:83:3a:
3b:0d:8d:53:c1:c4:58:7a:88:98:89:ac:e3:0c:eb:66:ac:87:
97:48:ca:a5:0a:ca:78:0e:d0:a4:91:69:c3:61:e7:6a:c1:24:
09:25:1e:90:3d:37:c8:98:dd:93:fb:a0:e3:5a:e3:00:f7:59:
15:7c:c9:18:41:4a:46:34:b4:21:2d:3e:54:ab:52:e2:71:f7:
80:c9:cc:0f:6e:d0:2f:e8:9e:09:f2:73:d9:5c:93:56:6c:7b:
08:d9:f5:67:a6:44:84:02:fe:d5:d5:ba:18:0a:f4:1a:5d:95:
57:8f:d6:71:52:d6:0d:e1:a2:6d:a7:5a:05:8e:8b:45:3d:4b:
b6:0a:d4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 04:44:52 2024 by rpki-client on console-ams.rpki-client.org