Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/72DDF97C4B2511EF96508715C4F9AE02.roa
File: 72DDF97C4B2511EF96508715C4F9AE02.roa (raw, json)
Hash identifier: xkOtZQ/Mz/p4jJZri/EnIf6FBroxf6IDm/HXlcFjmhc=
Subject key identifier: 43:DF:16:5C:37:02:5D:8B:7B:45:3B:B6:04:02:70:E8:D9:C1:38:DF
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 33A3
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/72DDF97C4B2511EF96508715C4F9AE02.roa
Signing time: Fri 26 Jul 2024 08:03:39 +0000
ROA not before: Fri 26 Jul 2024 08:03:39 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 6079
IP address blocks: 122.8.44.0/22 maxlen: 22
122.8.48.0/22 maxlen: 22
122.8.64.0/22 maxlen: 22
122.8.72.0/22 maxlen: 22
122.8.100.0/22 maxlen: 22
122.8.104.0/22 maxlen: 22
122.8.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 31 Jul 2024 08:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13219 (0x33a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Jul 26 08:03:39 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66a3585b-3b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:d4:8f:73:62:90:e3:00:1f:8c:02:4e:03:
11:e5:38:4b:af:20:bc:4f:cc:a6:0f:fc:61:97:d0:
f9:df:f2:1f:ce:d2:cc:8b:8e:ab:74:14:b4:76:e0:
78:70:d0:eb:87:96:83:b7:72:4c:f9:a9:73:98:51:
1b:46:b5:5c:c7:80:77:2c:90:25:e3:81:52:b9:50:
bb:59:5a:5d:d3:cf:4d:29:3b:72:30:06:48:94:d0:
5c:6d:28:e5:cc:45:48:28:83:9c:2a:78:39:9d:ae:
c9:c0:8e:bb:b1:5f:c0:31:f5:00:e9:68:94:54:99:
c5:ca:7b:bb:80:62:ad:c8:85:49:22:46:6b:ee:7f:
d7:41:95:f1:37:dd:9c:65:0b:2a:09:cd:f2:ee:89:
31:be:b8:e3:0b:4f:86:c6:62:dd:39:c3:cc:c5:eb:
03:01:c9:4e:cf:70:00:29:cd:47:15:f0:88:f1:34:
4f:2a:0f:d3:37:25:d5:50:32:af:2f:2c:3f:8d:e5:
34:83:07:f2:4a:2e:6e:fe:9a:c0:9a:6b:0a:7b:1e:
b6:04:f3:c3:f2:6a:df:29:5d:0b:f2:96:8d:14:a7:
24:c8:3d:07:2a:51:5a:a6:ef:69:5c:21:72:61:47:
4d:2e:ea:c8:36:4a:52:3e:fa:08:98:46:75:78:9d:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DF:16:5C:37:02:5D:8B:7B:45:3B:B6:04:02:70:E8:D9:C1:38:DF
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/72DDF97C4B2511EF96508715C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.44.0-122.8.51.255
122.8.64.0/22
122.8.72.0/22
122.8.100.0-122.8.107.255
122.8.120.0/22
Signature Algorithm: sha256WithRSAEncryption
47:12:09:10:f5:46:dd:f2:5a:53:8c:8f:65:63:2d:87:65:ea:
b3:f3:78:98:fa:b5:4d:ab:85:b9:a3:02:10:d4:bd:28:9c:31:
d5:b2:9e:3a:c5:19:4f:09:55:57:e2:52:3a:c0:ed:3b:8b:cc:
d2:5b:3b:93:21:23:fe:13:e4:17:18:ec:27:55:09:05:5d:4e:
aa:93:b3:0a:ce:20:8d:f9:87:e2:1e:fb:9a:74:74:bd:b7:d5:
1a:8e:54:05:35:60:8b:00:dc:49:51:fe:f2:6d:13:3c:fb:e5:
15:64:3b:98:15:94:70:8c:86:98:f4:e5:6a:64:fe:be:8d:11:
98:a9:2a:f6:d3:00:ed:eb:61:41:77:95:27:e3:79:ba:eb:fc:
4e:c8:21:f0:06:59:eb:e5:e2:51:03:1f:00:df:e4:71:c4:97:
da:ac:3e:a7:f2:73:23:f7:9c:79:0f:0e:94:34:26:1b:52:22:
82:c3:5a:2d:47:e2:af:09:34:1b:35:d9:b0:7b:95:90:67:a7:
c0:37:d5:90:f9:59:06:11:0e:03:df:a8:00:df:02:f1:89:29:
b4:a9:73:13:26:10:0f:75:da:f7:bd:ea:ea:19:41:a7:ca:32:
2d:96:ea:b4:dd:24:bb:0b:74:63:40:9b:be:b4:99:eb:fc:eb:
6f:b0:50:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 12:12:33 2024 by rpki-client on console-ams.rpki-client.org