Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/A85C7112C00D11EEA7C5F624C4F9AE02.roa
File: A85C7112C00D11EEA7C5F624C4F9AE02.roa (raw, json)
Hash identifier: Ho4v7avD7SiyHYLVCK7g0MJmb55DJseZO0b2EyYPw5g=
Subject key identifier: 40:EE:18:FC:4C:2F:7F:B3:81:D3:F9:CD:86:23:1C:E1:89:8F:A9:19
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 332A
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/A85C7112C00D11EEA7C5F624C4F9AE02.roa
Signing time: Thu 14 Mar 2024 16:01:12 +0000
ROA not before: Thu 14 Mar 2024 16:01:12 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 34549
IP address blocks: 122.8.60.0/22 maxlen: 22
122.8.76.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 11 Apr 2024 02:29:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13098 (0x332a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Mar 14 16:01:12 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65f31f48-3393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:aa:70:b3:73:8c:3b:9f:fa:6f:bd:60:87:
ca:81:0a:1a:08:d9:d1:cd:3a:b0:96:17:02:ae:62:
40:92:01:8f:41:c5:ad:bf:3f:c9:f6:20:77:76:ca:
f8:aa:f1:d0:12:42:88:5b:e6:eb:b7:c2:69:d0:af:
61:d8:54:f8:5a:92:8b:49:a5:e3:d3:97:46:8c:5f:
f2:46:fc:17:70:b8:a5:a1:c8:86:86:b6:70:8e:02:
ac:38:3f:a3:44:e8:fb:43:cf:3a:9d:ea:67:14:ca:
4a:ff:d3:5a:af:98:e8:7f:ef:8c:ca:64:0c:16:45:
83:97:7c:4d:8c:55:b0:8e:d2:ae:53:bc:6d:0c:98:
bc:97:37:b9:76:9d:c8:bb:06:e4:b7:d0:e1:d0:23:
98:53:be:03:98:0a:15:78:7c:af:82:1b:a9:5d:2a:
34:0a:b4:40:08:bd:f9:d2:bf:25:c3:77:19:9c:73:
35:98:af:fe:26:59:bd:c5:4f:7e:40:ec:de:45:fb:
07:2b:a3:5b:45:4d:2d:60:97:38:2a:c8:c3:1d:fc:
54:18:d2:a5:3b:e2:6c:51:6f:2d:dc:5a:7d:e9:b3:
ec:ea:f3:42:97:2b:4d:e2:0d:1d:45:57:a4:10:50:
e0:ec:c7:c6:4d:e1:d0:73:1c:16:5f:fb:2f:02:45:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EE:18:FC:4C:2F:7F:B3:81:D3:F9:CD:86:23:1C:E1:89:8F:A9:19
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/A85C7112C00D11EEA7C5F624C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.60.0/22
122.8.76.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:7b:32:a8:4c:e0:78:41:99:42:47:ae:a6:e1:81:8a:10:9e:
9a:99:38:f0:6f:cd:f5:d1:4c:76:42:f6:9e:a9:e4:3a:41:e4:
c0:a3:37:c2:81:c1:0b:ed:99:a2:88:2c:94:38:db:84:9d:a9:
1f:de:4b:9c:60:ce:41:91:af:3b:5b:e3:df:dd:9f:51:93:a1:
6a:d2:d8:f8:4b:fc:a0:a1:40:eb:ea:df:dd:92:87:40:81:f9:
2e:19:19:c7:ad:d5:1b:5b:26:6b:ae:68:85:47:c2:4f:10:73:
a5:f0:87:95:4e:c7:1d:ea:cd:d0:22:8b:8a:e5:5c:8e:d2:4a:
ca:c3:6b:eb:fa:df:e9:85:e0:ae:0b:6a:f6:f1:65:30:9b:19:
9b:8b:99:88:44:f0:d4:cb:b8:9b:43:ee:fb:cf:c7:27:1e:ea:
10:36:7c:48:d3:55:c0:7e:d7:74:65:66:ae:ed:a5:2b:e1:ee:
b7:ee:74:39:73:2a:74:53:2c:8f:83:25:0f:59:df:63:24:08:
da:d0:42:64:79:86:81:78:4d:2d:27:a5:98:72:57:56:81:a5:
fc:35:58:f9:0a:e5:cb:31:0d:1b:93:93:ba:a9:e5:91:a0:19:
1c:6d:95:6b:6d:d5:9c:7b:ab:fd:2d:33:f6:8b:e9:eb:a8:67:
63:da:0b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 04:33:06 2024 by rpki-client on console-ams.rpki-client.org