Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/BBEDAA78A71D11EF8B416C39C4F9AE02.roa
File: BBEDAA78A71D11EF8B416C39C4F9AE02.roa (raw, json)
Hash identifier: AOdwsUBAT1Ck6dQAFRzgbxW2F6tARi9bmlCoXxjaKO8=
Subject key identifier: FC:F1:E3:BE:52:7E:AD:AC:39:BF:5B:AB:DC:3C:18:91:22:F2:1E:3C
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 3417
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/BBEDAA78A71D11EF8B416C39C4F9AE02.roa
Signing time: Wed 20 Nov 2024 08:59:22 +0000
ROA not before: Wed 20 Nov 2024 08:59:22 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 16589
IP address blocks: 122.8.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 07:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13335 (0x3417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Nov 20 08:59:22 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=673da4ea-f483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a7:60:69:ca:4a:37:00:33:82:58:7b:df:4d:
93:1c:fb:58:d6:51:04:80:a1:1a:eb:f9:5b:48:54:
bf:ba:b9:ec:ab:cf:5d:10:62:61:66:6f:63:5b:22:
a3:87:2b:51:bc:e1:0c:70:5b:72:ca:b3:0d:c0:00:
3d:e1:7a:c1:cc:cf:ea:33:08:bb:9f:ee:9d:43:5c:
f8:84:61:87:45:3b:ba:14:cd:8b:8a:05:97:a0:98:
1f:0f:e1:28:52:21:c6:16:83:09:89:ec:61:d1:42:
9d:12:a3:e6:55:be:f5:f2:ea:a4:32:fa:96:9c:9e:
c7:8c:8e:c8:d1:65:87:e9:b7:a6:cf:46:4c:39:e1:
62:42:fc:90:76:e0:e4:e9:f9:1b:1f:fd:ca:f2:2b:
1c:6a:d9:ea:89:c2:48:9e:ff:d4:99:43:2d:3d:b6:
d6:24:38:88:d7:9a:e8:91:3a:6f:9f:21:4f:28:3f:
86:f4:d7:00:00:6d:78:42:82:b5:5c:4b:ba:5f:b9:
c3:7a:9b:a5:9d:92:16:e8:34:bd:f9:8d:bd:53:10:
dd:fb:79:ca:dd:14:93:2d:50:9c:c4:4a:87:b8:44:
7e:de:4e:4f:db:f7:a5:ab:a1:e1:42:ea:2d:98:ea:
a1:83:71:2a:78:04:2b:e3:b5:36:7d:cb:ed:b1:14:
7e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F1:E3:BE:52:7E:AD:AC:39:BF:5B:AB:DC:3C:18:91:22:F2:1E:3C
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/BBEDAA78A71D11EF8B416C39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.22.0/24
Signature Algorithm: sha256WithRSAEncryption
86:07:24:18:aa:65:db:f7:97:8d:41:4d:11:fc:c0:02:ad:d2:
c0:ff:ff:33:a7:8a:c1:48:55:43:2a:ce:36:d5:94:14:81:19:
43:09:9b:c6:a7:c6:9c:1a:14:2b:30:60:f7:ea:a0:63:0d:87:
88:e2:d4:41:05:31:66:65:29:f4:6c:da:d9:b0:79:4c:9d:bd:
8d:b3:6d:68:78:ef:f3:da:61:96:a2:a5:a1:f8:81:94:9d:58:
a2:28:29:29:c0:f8:2a:58:60:ce:dd:cc:7f:99:59:d1:b4:e4:
aa:6d:e6:1e:cb:a9:20:fb:cc:96:dc:8d:3d:bc:51:a5:c9:ba:
4d:6d:d4:d5:6e:6b:4a:02:ce:17:fd:61:a1:c1:5c:f0:af:37:
9b:1d:2f:19:91:94:85:83:47:4c:55:e3:64:0d:df:5e:0c:8a:
69:89:e4:72:22:b1:14:bc:0b:f2:55:75:3b:c0:a1:de:b2:63:
ae:79:64:03:65:bf:1e:0d:9a:06:84:64:20:b6:ff:4a:94:51:
e0:da:9d:a6:6a:b3:1f:d9:ab:da:3c:41:34:fe:7c:cc:04:9d:
eb:bb:b0:90:33:5b:37:0a:26:d0:80:56:26:18:ec:32:c1:91:
7b:94:43:59:db:bc:c9:47:c9:9c:a7:98:d9:59:56:cd:52:21:
21:d3:88:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:35 2024 by rpki-client on console-fra.rpki-client.org