Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/C3757B6C4A5811EF94DBBD71C4F9AE02.roa
File: C3757B6C4A5811EF94DBBD71C4F9AE02.roa (raw, json)
Hash identifier: sBXcDYEW6rbBOCmsNAK2LFyicYigYT/68E0wfDON6a8=
Subject key identifier: 97:3B:55:86:3E:19:51:60:D6:AD:4C:15:7F:A1:55:3E:07:03:7E:D3
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 339E
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/C3757B6C4A5811EF94DBBD71C4F9AE02.roa
Signing time: Thu 25 Jul 2024 08:05:14 +0000
ROA not before: Thu 25 Jul 2024 08:05:14 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 6079
IP address blocks: 122.8.44.0/22 maxlen: 22
122.8.48.0/22 maxlen: 22
122.8.64.0/22 maxlen: 22
122.8.72.0/22 maxlen: 22
122.8.100.0/22 maxlen: 22
122.8.104.0/22 maxlen: 22
122.8.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 26 Jul 2024 08:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13214 (0x339e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Jul 25 08:05:14 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66a2073a-f9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9b:68:cb:49:bf:ec:69:dc:c0:ed:08:ee:cb:
11:86:00:a5:9b:52:50:21:a0:27:20:69:23:06:b7:
cf:3f:da:3a:67:8d:98:00:a7:f0:ac:4b:7d:dd:17:
7a:cc:ab:c5:cc:45:d3:03:fc:db:5e:30:99:81:ad:
83:5f:21:da:3c:40:5c:35:0e:b3:f9:b8:90:e8:6b:
29:79:ba:b8:ce:1d:97:f9:a3:1f:e6:78:2b:a2:e4:
df:26:95:92:86:1b:aa:86:89:3b:dd:a8:c9:03:45:
90:33:4e:0e:14:81:ea:78:bb:e5:35:6f:62:3b:57:
02:60:cf:bc:87:77:4e:bb:33:96:05:f2:b2:ea:e5:
09:ba:fe:4f:0d:5e:de:1a:d1:ee:49:5a:95:02:1b:
a2:51:9e:05:8b:f6:e7:8f:f5:55:3e:8a:c9:98:85:
7a:1a:03:82:8f:ce:94:a6:b0:8f:f2:db:cd:c7:76:
c3:5e:93:94:02:e5:3f:4e:e5:e6:74:22:b9:82:ad:
20:a5:3b:3a:4b:8a:4d:cf:c5:e9:f2:db:28:02:04:
35:57:48:a5:5c:d5:c4:3f:9d:22:8e:5c:32:69:e0:
48:88:59:dc:ad:eb:02:d6:24:dc:9c:21:09:4c:a8:
0d:99:c9:92:61:e5:26:4e:0b:f5:8f:82:f6:2a:cd:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3B:55:86:3E:19:51:60:D6:AD:4C:15:7F:A1:55:3E:07:03:7E:D3
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/C3757B6C4A5811EF94DBBD71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.44.0-122.8.51.255
122.8.64.0/22
122.8.72.0/22
122.8.100.0-122.8.107.255
122.8.120.0/22
Signature Algorithm: sha256WithRSAEncryption
38:38:8f:fd:1f:02:03:c6:68:1f:ee:28:c1:db:3a:c4:90:39:
d1:20:2b:5a:a6:63:4b:40:15:d7:bc:a0:36:ce:e3:92:7c:ef:
99:29:0f:01:5c:f8:be:c2:8c:c2:cf:7d:1a:24:fe:f9:50:d6:
1d:f7:83:ff:f7:9a:dc:37:80:df:cc:07:08:7e:8d:08:70:17:
49:9b:5e:f6:87:79:e8:f1:fa:a3:60:4d:4c:16:20:91:60:04:
26:7c:13:58:01:d7:ab:d7:51:60:85:3e:0e:53:78:f1:04:32:
dd:3f:3c:53:58:b3:30:fd:f5:0d:89:5d:54:1d:a5:26:d7:d9:
52:08:b7:28:46:ec:47:e3:23:b9:4f:cd:8a:c2:8d:63:c2:10:
90:c6:5e:c9:d8:35:28:16:6d:98:15:58:f7:02:c1:a6:62:5f:
3d:ca:be:56:ad:bd:14:b6:6d:5a:5a:04:4e:dd:08:b2:14:c7:
da:8c:f0:29:cc:8c:cb:ae:df:dd:b2:a3:e7:e3:a2:86:69:99:
ca:49:97:66:81:dc:ea:94:48:72:34:a9:e6:53:85:f6:ae:02:
e3:96:92:e0:55:14:72:43:49:84:a6:85:5f:6e:b5:a0:3a:bc:
1a:9e:7b:5b:35:3f:bf:b6:6c:6d:2e:e8:6e:f5:86:05:d5:12:
a9:55:b8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 10:21:38 2024 by rpki-client on console-fra.rpki-client.org