Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/5C311662554F11EF9BA2DE46C4F9AE02.roa
File: 5C311662554F11EF9BA2DE46C4F9AE02.roa (raw, json)
Hash identifier: V1nbY7EfTr3MGh3ltXZsEieQsmr9DZlgmvnkcd2nJOw=
Subject key identifier: 9C:2B:23:C1:58:4F:DC:BA:95:A2:83:95:56:20:A4:D3:88:88:C3:28
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 33BD
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/5C311662554F11EF9BA2DE46C4F9AE02.roa
Signing time: Thu 08 Aug 2024 06:28:01 +0000
ROA not before: Thu 08 Aug 2024 06:28:01 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 215784
IP address blocks: 122.8.48.0/22 maxlen: 22
122.8.72.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 26 Aug 2024 09:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13245 (0x33bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Aug 8 06:28:01 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66b46571-400f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:45:3b:94:76:e6:b7:f5:c0:6a:98:34:f3:
c9:86:32:9c:cf:d7:7f:2e:2c:cb:6c:9d:08:85:0e:
d6:d7:0c:36:54:52:6e:c3:7f:a7:77:0c:4e:29:d8:
a8:a2:66:e4:0f:1b:ea:21:14:4e:22:7f:d8:d2:bb:
50:73:f4:10:58:f9:15:91:d3:f0:82:f7:00:19:b0:
d2:77:14:4b:17:c0:94:ab:96:94:c5:df:cc:47:fc:
a7:58:59:a5:0a:6a:aa:8d:4c:f9:f9:d8:07:af:41:
cd:e8:43:71:75:a9:9d:20:fa:15:2e:c1:2f:52:32:
91:4c:ea:02:d9:28:6f:48:62:b3:27:f3:51:d8:53:
ee:a5:9c:be:ff:5b:c6:0f:9b:7d:1a:7f:8c:b1:52:
b3:f0:81:35:6a:99:33:73:a0:d5:f1:36:3b:90:cb:
75:ac:de:bc:15:cc:d1:29:5f:41:dc:71:1b:66:a3:
d5:74:93:30:13:ba:0a:4f:d6:57:d7:86:6f:42:aa:
df:7f:f9:ec:ba:f4:a6:4b:8e:06:9e:0f:1c:3d:77:
85:a3:77:a4:68:51:3f:be:db:72:5d:2b:e8:40:e9:
83:d9:ce:ab:1b:a0:91:3b:5c:cf:82:ae:d8:86:7d:
9f:30:1a:9c:b6:7f:6f:65:9f:7f:67:21:dc:ff:9e:
43:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2B:23:C1:58:4F:DC:BA:95:A2:83:95:56:20:A4:D3:88:88:C3:28
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/5C311662554F11EF9BA2DE46C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.48.0/22
122.8.72.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:33:57:54:7c:15:a0:75:04:ca:95:6a:8f:3d:3d:ea:90:e2:
b5:37:d3:9d:b0:00:8c:77:13:33:6c:b3:c0:d2:6b:16:21:c1:
f6:33:db:ee:bd:2d:7c:a2:76:b0:72:96:71:75:ab:3b:c9:1d:
e9:c8:57:94:8f:6e:13:6b:4c:98:ce:cb:84:d7:b6:55:03:12:
21:99:ec:96:97:23:e9:dc:54:df:01:ab:18:9a:c3:e3:5f:66:
5d:28:9d:2f:54:46:1f:87:7b:51:73:22:12:b1:b3:6b:5b:31:
30:27:f5:8c:2f:d6:91:20:76:b8:92:39:6b:b3:5f:83:81:0b:
6b:4b:29:3b:53:5d:c5:ea:61:fa:e6:38:8f:af:52:08:8a:78:
dd:b0:40:92:b8:8b:b0:08:d8:1e:89:1c:94:f9:91:fe:09:c2:
79:6a:b5:49:5c:a9:1e:1a:55:88:02:5d:aa:84:12:cf:36:fd:
36:62:6a:2d:fc:33:91:d9:a5:73:aa:89:dd:0f:cb:7b:28:3e:
b6:a3:03:e1:4e:5d:2a:33:63:e8:3f:06:02:90:1d:54:1d:38:
0e:f3:a8:8f:12:ae:ce:31:21:23:5b:9e:3e:d2:66:3e:55:30:
3d:d0:eb:67:c7:d5:9d:8d:4e:d3:56:60:34:cd:c3:85:81:c0:
92:3f:e9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 12:49:06 2024 by rpki-client on console-fra.rpki-client.org