Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/AD5E0124669A11EFAA2C7969C4F9AE02.roa
File: AD5E0124669A11EFAA2C7969C4F9AE02.roa (raw, json)
Hash identifier: qVEl+Oac3fCWQMzgkUIoYI8q+vKc0K4R9MQ/zDdTTN4=
Subject key identifier: DB:9F:EE:4D:75:77:4F:4A:91:BE:7C:2A:DA:43:D9:92:1A:7A:F5:75
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 33D1
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/AD5E0124669A11EFAA2C7969C4F9AE02.roa
Signing time: Fri 30 Aug 2024 06:39:59 +0000
ROA not before: Fri 30 Aug 2024 06:39:59 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 5650
IP address blocks: 122.8.76.0/22 maxlen: 22
122.8.112.0/22 maxlen: 22
122.8.116.0/22 maxlen: 22
122.8.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 08 Oct 2024 07:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13265 (0x33d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Aug 30 06:39:59 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66d1693f-5058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:56:8d:21:89:16:35:51:4f:0c:ac:60:7b:fe:
e4:cb:6e:26:bf:23:64:87:96:cd:1a:ba:aa:01:cd:
fd:59:5f:d5:87:54:1d:0d:ba:91:bd:b6:89:9b:40:
26:b4:c8:ba:84:da:3b:ed:ef:0e:e8:7e:59:a8:36:
40:c6:31:65:d6:06:c9:05:db:c1:3b:9f:4e:eb:ad:
0d:74:3d:5c:2b:ec:ed:6c:38:ca:80:8a:2f:4c:9b:
aa:9c:e1:ab:43:a3:12:f9:d0:4f:18:c2:bf:7c:b6:
ac:42:05:ff:70:c9:cc:2e:04:3c:58:ad:4c:ba:68:
a5:e6:d2:0f:a1:b3:1a:b4:c0:fe:c7:72:6f:13:f4:
cd:ba:41:75:05:9d:73:18:31:e6:80:19:d3:c0:f2:
c9:ea:bc:9e:29:7b:79:e9:6b:7d:79:16:0b:1f:e3:
dd:fc:ac:8a:7e:ba:24:d4:f4:74:5b:78:4d:a4:d3:
32:f2:0d:d8:f9:68:ae:6c:a4:64:a2:53:88:1b:68:
81:43:ab:b7:a3:a9:4d:22:6d:b0:8d:74:4b:bb:70:
f2:a0:90:4d:39:72:e8:86:70:94:1c:9a:af:a1:a4:
8f:52:e1:45:9d:4e:9f:51:28:2e:5f:c3:ec:f3:78:
cd:b6:b1:dc:19:ee:15:9b:0b:ab:f7:75:f7:15:84:
eb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9F:EE:4D:75:77:4F:4A:91:BE:7C:2A:DA:43:D9:92:1A:7A:F5:75
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/AD5E0124669A11EFAA2C7969C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.76.0/22
122.8.112.0/21
122.8.124.0/22
Signature Algorithm: sha256WithRSAEncryption
95:8f:93:2c:d1:0c:6c:22:63:ef:93:bf:ba:20:1f:31:eb:13:
91:5a:b7:2a:33:ed:f6:4d:52:87:b4:aa:2f:24:97:f6:fb:27:
ac:7a:4d:9d:4f:d2:05:3d:4f:a1:94:e6:9c:82:43:fb:1b:19:
dd:18:59:70:f0:e5:d9:ad:35:80:ee:f3:49:33:c6:bd:e0:05:
5a:d9:25:36:c9:44:4d:d0:c1:7f:8b:18:aa:2a:04:ce:87:ba:
d2:81:e1:7f:af:65:80:ac:7e:9c:4a:de:38:68:d8:89:bd:3c:
a4:80:09:fd:4f:58:aa:f1:16:2f:6a:42:fe:b7:59:b0:68:f0:
60:f7:1e:d5:15:e8:60:90:b8:3e:6e:1b:9e:ae:3b:c3:8d:41:
e6:f7:c7:c1:99:1b:d7:28:44:fd:c0:4f:1d:c7:a5:c9:a2:d0:
3f:41:9b:b2:cd:3d:e2:62:d5:c0:47:a4:49:be:c1:cb:e5:27:
c5:d6:35:1d:00:46:7d:5f:7f:5d:76:29:b6:65:f6:33:6a:6e:
92:34:20:d3:57:15:ac:2a:e7:84:ee:88:80:37:71:47:f6:91:
77:86:bf:f7:96:a6:5d:f5:17:d4:c7:a3:e8:36:dd:90:59:80:
2b:5f:01:6d:6b:e0:35:08:e9:84:96:6d:f7:af:09:4a:ae:7e:
ec:9a:7f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 10:05:55 2024 by rpki-client on console-fra.rpki-client.org