Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B4B4E810CE2F11EEAF078018C4F9AE02.roa
File: B4B4E810CE2F11EEAF078018C4F9AE02.roa (raw, json)
Hash identifier: xKWytfzC1SvywuZjFw5bBW4OSO5MJ+G6a9q9erT+YAU=
Subject key identifier: 28:2D:0C:3D:8F:CF:FE:40:94:58:F7:5A:EC:0E:B8:12:9C:66:35:03
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 332E
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B4B4E810CE2F11EEAF078018C4F9AE02.roa
Signing time: Thu 14 Mar 2024 16:01:16 +0000
ROA not before: Thu 14 Mar 2024 16:01:16 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 53356
IP address blocks: 122.8.32.0/22 maxlen: 22
122.8.36.0/22 maxlen: 22
122.8.48.0/22 maxlen: 22
122.8.64.0/22 maxlen: 22
122.8.112.0/22 maxlen: 22
122.8.116.0/22 maxlen: 22
122.8.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 24 Apr 2024 09:10:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13102 (0x332e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Mar 14 16:01:16 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65f31f4c-3964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:ac:06:25:f3:80:3a:87:ab:36:c5:3c:a1:
98:2e:3c:41:61:49:f6:d4:e4:3d:42:45:6c:68:c7:
d0:0a:47:32:c1:e8:ba:df:3a:66:c5:95:ec:bf:b4:
c5:63:f6:f3:b4:92:e1:4b:0e:bb:c5:93:e2:22:a8:
c1:97:e7:90:59:68:fa:79:10:df:8e:07:8a:aa:a3:
fc:8a:bc:10:39:a1:c1:2f:9c:8e:5a:57:9d:2f:64:
fa:97:ec:8f:28:06:87:50:9e:be:d9:04:e1:ea:e2:
3b:91:11:e7:2e:7e:4c:7c:b7:72:5c:66:c1:93:c4:
62:63:44:6c:2e:6d:73:81:ec:85:ee:a4:eb:5e:3f:
b8:1a:7a:c3:76:02:6c:2b:07:26:34:51:37:21:6b:
ee:0f:dc:5e:20:02:ab:82:9d:ca:79:b1:f6:3c:ef:
9f:1e:e0:4d:17:10:28:7c:8f:07:06:4f:0b:ba:3d:
87:c0:fa:14:b0:b3:b9:f3:47:50:ac:7b:8b:59:1b:
e5:d7:2d:dc:44:2a:46:d9:40:8f:33:69:5a:38:db:
33:82:bd:00:02:9d:dc:4b:19:6a:91:fc:51:36:70:
8e:12:c1:98:7d:a0:d7:be:7f:bc:5a:27:0d:3d:eb:
ec:1b:47:bd:87:a9:ab:71:e1:7b:49:89:ac:11:46:
84:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2D:0C:3D:8F:CF:FE:40:94:58:F7:5A:EC:0E:B8:12:9C:66:35:03
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B4B4E810CE2F11EEAF078018C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.32.0/21
122.8.48.0/22
122.8.64.0/22
122.8.112.0/21
122.8.124.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:e0:15:de:87:1f:ea:f5:88:09:c5:b0:da:42:82:18:5d:e7:
de:18:a6:84:2d:fb:a5:ac:ea:1d:ea:7c:51:58:52:e8:f2:b7:
d2:b5:96:c7:28:2e:a2:1b:ad:0f:80:c6:25:00:9f:27:59:3a:
e7:8c:a9:b0:2a:5b:8b:b0:9c:d8:88:a8:0d:ad:0e:1b:36:f7:
7a:7d:0f:6f:c2:87:35:7f:1e:23:4e:93:ad:4c:32:b1:87:9a:
8c:a0:1e:e6:fb:4a:25:8e:6e:1a:57:fa:c5:a9:ce:67:10:49:
b8:d6:09:45:1b:e1:d6:25:1f:42:a2:68:5d:66:99:29:18:8a:
2c:56:dd:e6:a6:0d:74:2d:fb:e3:18:9a:da:46:f8:29:35:8b:
02:bf:4e:cd:3b:b0:d2:60:74:0c:72:15:47:d6:d5:93:7a:f3:
0c:a4:ea:84:13:a2:2f:27:c8:68:e6:76:54:23:1d:80:bb:3f:
8e:6b:7a:a3:e4:58:c5:58:da:26:56:68:f3:f4:be:b4:d5:91:
db:5b:ac:2f:cd:9c:28:f3:00:b7:4b:50:1d:34:7d:d5:28:5e:
28:3e:90:e3:5f:5e:4d:f6:e1:75:d9:0e:79:d8:98:44:5e:51:
47:c7:4e:91:99:20:10:77:0a:e4:1d:24:ed:7f:77:2e:2c:a8:
bc:ef:81:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:06 2024 by rpki-client on console-fra.rpki-client.org