Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B3E6A716CE2F11EEAF078018C4F9AE02.roa
File: B3E6A716CE2F11EEAF078018C4F9AE02.roa (raw, json)
Hash identifier: jbl/yZfjtacFHJLXIZQnqzQmIA4/kNlkUibqczFg0Gg=
Subject key identifier: 7D:D0:C6:DA:F5:F5:CC:58:43:BB:9E:1C:2C:73:B3:B1:91:71:F3:03
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 3329
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B3E6A716CE2F11EEAF078018C4F9AE02.roa
Signing time: Thu 14 Mar 2024 16:01:11 +0000
ROA not before: Thu 14 Mar 2024 16:01:11 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 21700
IP address blocks: 122.8.28.0/22 maxlen: 22
122.8.40.0/22 maxlen: 22
122.8.92.0/22 maxlen: 22
122.8.96.0/22 maxlen: 22
122.8.108.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 25 Jul 2024 07:53:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13097 (0x3329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Mar 14 16:01:11 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65f31f47-9ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e7:4c:a0:96:5e:f6:8f:57:93:46:d0:e3:02:
9d:4c:7c:9c:42:de:80:5c:8d:60:75:56:4f:97:e1:
6f:b1:3c:a8:86:4c:59:b7:56:bc:af:73:7c:c9:38:
a6:f6:00:54:ba:cc:28:b7:af:b5:dd:95:4c:a8:e7:
2f:62:d0:60:3f:2f:aa:6b:4e:a5:66:a0:03:2a:11:
4a:e6:b6:32:01:49:5e:db:ec:01:6f:6e:d5:f9:0e:
ef:62:db:3b:e8:f8:2c:52:4c:82:4a:2a:25:cd:0d:
c8:ab:e7:87:14:51:51:2b:61:c7:35:99:8e:30:f9:
5e:bf:07:dd:db:91:b3:a6:60:73:09:d9:c2:67:62:
6c:fc:a2:42:ec:2b:3a:34:d2:f7:68:e8:ce:19:96:
10:8e:6b:0e:ef:5a:01:e2:c9:68:92:18:11:fe:16:
75:51:1d:c4:be:ae:e7:c7:90:89:96:ac:1f:68:8c:
9e:55:09:f1:3f:69:c6:e3:a9:2d:97:cb:d9:1b:f3:
f3:0b:13:eb:dd:5b:9c:72:c5:89:2e:23:5e:34:34:
54:71:c9:d6:d9:12:5f:d8:9c:07:95:b8:53:7d:7f:
57:ba:5f:1d:bd:1d:88:55:ea:20:89:fe:68:d6:31:
4e:e9:98:18:d9:bd:fb:cb:41:c2:73:48:1a:2a:bc:
5a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D0:C6:DA:F5:F5:CC:58:43:BB:9E:1C:2C:73:B3:B1:91:71:F3:03
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B3E6A716CE2F11EEAF078018C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.28.0/22
122.8.40.0/22
122.8.92.0-122.8.99.255
122.8.108.0/22
Signature Algorithm: sha256WithRSAEncryption
70:6c:5d:5f:a7:97:6d:10:15:d6:1a:a8:b7:47:f1:fc:5e:ca:
cc:14:32:15:e7:db:63:8b:f2:f5:09:ce:79:c6:e9:35:64:10:
bf:da:04:b2:71:6e:5c:93:c6:b8:61:78:e0:ac:8e:81:2c:ce:
d8:e7:eb:c0:55:2f:77:e6:f4:10:dc:a7:33:a4:b1:d4:1c:f9:
0d:b5:16:aa:30:f4:c1:e9:74:67:67:aa:ee:6b:2f:f7:1f:26:
c9:a0:b6:51:fa:11:fc:2b:0d:63:ee:27:9d:f5:fb:cd:e2:71:
72:fe:2f:1a:9b:c1:41:fa:24:02:db:7e:cb:1e:ae:09:75:63:
69:63:d2:97:61:1e:f7:e5:8a:d5:53:ec:0e:ac:0b:a5:98:4c:
00:a0:0e:aa:59:c5:b6:a3:92:1b:20:7a:fe:54:42:d4:cb:01:
64:df:4f:a6:ad:41:01:79:5d:7e:3f:db:ef:21:1d:99:03:0f:
e9:f6:2d:e7:07:26:af:e3:1f:f0:d7:c7:a4:31:c8:56:fb:0a:
d3:bc:9f:84:32:2a:d2:a3:43:b0:0b:fd:28:6a:74:96:ec:85:
44:0b:fb:75:7f:21:08:c7:8f:e6:c4:b3:43:eb:6c:8b:3b:2f:
b6:ad:06:60:17:e4:82:9c:82:ae:33:9d:05:f4:0e:15:15:51:
b8:d4:e7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 09:27:17 2024 by rpki-client on console-ams.rpki-client.org