Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B3087E32CE2F11EEAF078018C4F9AE02.roa
File: B3087E32CE2F11EEAF078018C4F9AE02.roa (raw, json)
Hash identifier: ZksUYGAcB3L+kUumgikeHffV7i9h1cHbRPb3hxzqu1A=
Subject key identifier: D0:26:4B:44:EA:9D:AA:81:62:BA:7E:D2:3F:B0:FE:03:54:51:D3:2C
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 3327
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B3087E32CE2F11EEAF078018C4F9AE02.roa
Signing time: Thu 14 Mar 2024 16:01:10 +0000
ROA not before: Thu 14 Mar 2024 16:01:10 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 1239
IP address blocks: 122.8.32.0/22 maxlen: 22
122.8.116.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 30 Aug 2024 06:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13095 (0x3327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Mar 14 16:01:10 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65f31f46-1c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:c6:4b:df:c8:22:58:d6:5c:6e:47:68:66:
d8:14:b0:38:4d:f8:8c:46:df:16:86:6f:cb:2d:ca:
bf:23:18:7a:b4:91:43:00:7a:f0:72:64:40:fc:77:
0d:22:35:5d:89:98:f7:06:94:17:7e:d7:1c:7f:ec:
05:46:5b:bc:0a:7d:07:0d:e9:34:fe:51:af:6d:53:
17:71:e1:d0:05:23:21:2a:3c:07:25:e1:71:30:c2:
0c:51:79:d9:f7:24:0b:dd:1a:d8:16:c3:81:ed:a4:
b5:e6:0f:9c:7a:ab:6a:65:b3:5f:83:53:4d:e2:99:
c8:f4:89:ce:eb:3a:ce:71:6d:4c:4e:a5:60:14:6c:
29:e9:d2:8e:a9:65:f5:a7:1a:a5:b0:49:86:5e:8b:
d2:97:e2:dd:a0:69:06:96:a2:15:f8:0d:4d:ae:a3:
f7:8c:3c:aa:0d:17:7c:e4:21:2e:80:64:e6:e5:99:
bd:99:64:72:6b:d8:3d:67:47:cf:88:e0:7e:f5:cf:
6d:90:0e:b3:96:8b:25:31:d2:1f:30:a0:99:af:16:
f7:45:c0:a4:f6:b4:d5:3b:00:2f:25:86:b8:f4:2a:
29:fd:f2:bc:c7:d4:34:26:61:30:4a:82:6c:73:0f:
6f:0e:f4:a2:e4:dd:4c:21:8e:93:2a:1c:0a:2f:b4:
56:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:26:4B:44:EA:9D:AA:81:62:BA:7E:D2:3F:B0:FE:03:54:51:D3:2C
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B3087E32CE2F11EEAF078018C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.32.0/22
122.8.116.0/22
Signature Algorithm: sha256WithRSAEncryption
ee:64:89:a4:9d:79:89:f0:a5:8d:ac:73:59:31:87:ce:5a:71:
dd:12:23:fc:36:df:58:37:af:95:0a:07:49:3a:e8:7a:02:17:
a4:6c:aa:78:1b:6f:45:b8:cc:7b:21:b6:4f:52:f9:53:c3:6b:
f4:88:76:48:22:4f:44:5f:60:db:07:84:0e:8f:7a:bf:a8:3f:
03:13:1a:c6:c1:e5:2b:a2:90:0d:9f:ce:3f:d6:bd:d7:4f:31:
8b:78:a2:10:24:cc:66:fa:7c:95:55:3d:a8:61:29:ca:c3:6c:
3b:63:cb:61:87:24:7d:9b:2e:c8:7c:8b:0c:6f:89:57:9d:43:
c6:e8:63:d5:04:13:73:09:0a:f3:9f:ea:c1:b7:4f:4f:be:c1:
cd:c7:a2:0e:21:f8:a1:05:bc:22:3b:c2:59:f2:e9:e0:6b:c7:
61:27:e0:3b:9e:30:bf:18:0b:e3:be:db:69:32:e4:b1:85:7e:
9f:ee:3c:b4:ae:87:f5:75:03:a9:83:35:4d:06:fc:cb:7d:7e:
6d:f0:08:5b:3a:93:4f:01:84:f8:99:ab:f8:b5:c6:be:56:d1:
75:b0:dc:dc:82:31:ba:b0:49:1e:fc:69:f4:9b:5d:19:8b:a3:
ca:85:71:f9:d1:50:b9:22:4a:aa:d0:27:c0:ce:12:4c:d8:61:
fc:73:3f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 09:05:03 2024 by rpki-client on console-ams.rpki-client.org