Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/5D9C14A2554F11EF9BA2DE46C4F9AE02.roa
File: 5D9C14A2554F11EF9BA2DE46C4F9AE02.roa (raw, json)
Hash identifier: 15M94h6NKKh9tK+XkxRxGEsBsPk21EjN/Ks6HoRg3WM=
Subject key identifier: F3:6B:4D:DB:69:46:B5:EF:2F:5D:F0:BF:BA:E8:7F:E9:E8:AB:1C:D9
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 33BE
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/5D9C14A2554F11EF9BA2DE46C4F9AE02.roa
Signing time: Thu 08 Aug 2024 06:28:03 +0000
ROA not before: Thu 08 Aug 2024 06:28:03 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 174
IP address blocks: 122.8.44.0/22 maxlen: 22
122.8.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 08 Oct 2024 07:37:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13246 (0x33be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Aug 8 06:28:03 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66b46573-8c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:f3:e2:e7:09:a8:8c:2b:2b:26:81:59:8e:
92:e9:f7:eb:72:64:02:f5:84:09:ce:20:db:50:5e:
d8:af:dc:bd:27:94:61:2c:b1:a5:ed:e9:69:9f:14:
31:47:1b:99:01:96:69:11:f7:b8:09:94:f7:7d:a7:
18:23:e9:bc:95:3a:b8:d1:20:ac:6a:9a:88:b0:75:
64:94:83:0b:e0:9a:26:e4:12:21:7a:85:ab:25:72:
50:5b:cf:af:30:a1:37:97:fd:f4:bf:d2:be:f1:61:
be:65:d0:64:e8:c8:42:5b:08:3e:d9:f5:c6:19:a1:
45:e1:bd:89:bb:a2:91:2e:eb:d2:b4:92:3e:a0:6c:
e4:8d:e5:11:a1:b9:2b:20:2d:af:80:0b:29:3f:b9:
15:75:28:2e:5c:18:11:5e:7b:73:a2:bf:68:c2:8b:
bb:8a:a4:ae:3d:58:aa:3d:a4:b8:89:27:6b:42:30:
92:a5:5e:ac:cf:b4:d8:07:1d:35:24:8d:be:a0:39:
cb:23:7e:6d:c8:a1:ce:f1:92:d6:da:31:71:12:7b:
14:ff:c2:c5:54:a5:76:05:69:00:e7:0e:41:f5:bf:
71:e1:d3:6e:a4:37:db:cf:7c:8b:e3:05:3c:90:dc:
b5:b9:7d:4b:a1:4b:bf:c7:d7:c4:52:85:f1:1b:d5:
e2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6B:4D:DB:69:46:B5:EF:2F:5D:F0:BF:BA:E8:7F:E9:E8:AB:1C:D9
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/5D9C14A2554F11EF9BA2DE46C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.44.0/22
122.8.56.0/22
Signature Algorithm: sha256WithRSAEncryption
85:e8:f0:62:7e:a2:d1:42:85:9f:fe:56:d8:62:6f:ad:99:8a:
a6:d3:28:f6:07:34:09:2a:aa:72:09:31:8c:d4:4a:e3:7a:18:
04:36:43:0b:c6:56:4a:74:19:72:a0:02:e0:02:7b:70:94:80:
ed:78:ad:c8:c7:ba:87:23:0e:05:39:73:8a:50:18:b1:d3:87:
78:72:a7:24:7e:4a:ff:c9:05:ad:bb:80:e9:1b:01:ef:a9:b0:
2d:1c:03:72:c7:be:c2:8d:ba:c6:c1:ce:4b:67:6a:28:dd:a4:
7d:ee:5b:5d:7e:7f:37:d4:84:f5:56:62:d0:74:42:50:12:3a:
2c:2c:3f:d9:cc:16:dc:f8:e2:e2:30:ef:8d:5b:c5:0f:85:19:
87:3d:2b:c3:b4:b5:e4:2f:ad:ad:3c:69:e6:82:40:c0:d9:2a:
55:07:5e:0c:fb:8f:4e:f2:dc:d2:96:2b:6a:b7:9e:b2:2d:0c:
cb:a1:9e:49:1f:ce:07:11:ca:22:02:05:11:d8:db:7c:a5:54:
b9:1f:6b:7d:26:3e:d8:85:6f:80:9f:70:d5:31:85:97:75:f2:
47:df:0e:f7:32:2f:75:95:95:63:a7:cf:05:d9:57:fa:98:3d:
c5:0f:13:54:17:6b:33:66:c4:ba:de:b9:04:8e:d9:53:49:e9:
fb:0d:6d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 10:05:55 2024 by rpki-client on console-fra.rpki-client.org