Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/F2E17D044A5A11EF8F828477C4F9AE02.roa
File: F2E17D044A5A11EF8F828477C4F9AE02.roa (raw, json)
Hash identifier: 3di/C8wWBCXz8fMk2KIZ0E0xk6znrfg8HXApP71CCJE=
Subject key identifier: A6:30:00:A3:A8:71:22:8B:6B:50:21:BD:FC:37:19:11:BC:46:77:92
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 33A9
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/F2E17D044A5A11EF8F828477C4F9AE02.roa
Signing time: Wed 31 Jul 2024 08:38:56 +0000
ROA not before: Wed 31 Jul 2024 08:38:56 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 174
IP address blocks: 122.8.44.0/22 maxlen: 22
122.8.48.0/22 maxlen: 22
122.8.56.0/22 maxlen: 22
122.8.64.0/22 maxlen: 22
122.8.72.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 01 Aug 2024 06:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13225 (0x33a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Jul 31 08:38:56 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66a9f820-df58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:18:bc:05:60:8d:60:42:7b:fe:95:48:87:df:
1f:a7:79:49:8f:af:6f:0c:82:90:3e:60:67:91:a0:
85:51:72:5f:58:ad:3c:3c:8f:14:5e:79:39:ba:51:
f7:f9:ad:22:25:cb:c3:5b:fe:22:cf:da:2f:b9:49:
bf:15:b0:e2:ca:21:e8:b4:a4:df:30:2e:26:f6:7a:
de:46:2b:c8:54:e7:b8:23:2f:b3:cc:af:e3:6b:92:
0d:3d:96:5b:d8:eb:dd:16:4c:73:55:d1:97:8b:56:
e8:90:6e:8d:5f:41:71:9e:9e:b5:d1:8c:fd:bc:16:
c3:79:24:bd:0b:7f:eb:26:23:01:2d:20:b9:de:46:
eb:da:db:86:84:f1:72:b9:28:3e:19:48:3e:07:7e:
8c:1f:d9:23:9d:c2:c0:a0:fc:28:37:d2:e0:6a:81:
3a:53:d9:12:77:9a:6a:69:60:fd:37:d5:13:47:f3:
ab:97:88:62:9e:e4:fc:4b:87:12:93:e2:a5:f6:81:
35:58:9b:ac:4d:b5:ed:0e:9a:39:fe:8e:61:ca:54:
f9:15:4a:9a:b5:21:f6:4b:94:27:41:cf:16:6c:36:
81:b8:ec:2c:44:e5:aa:1f:cd:68:7a:b0:f9:a7:2f:
25:ee:c7:4e:bc:4c:eb:19:63:48:e7:94:30:f8:23:
bc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:30:00:A3:A8:71:22:8B:6B:50:21:BD:FC:37:19:11:BC:46:77:92
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/F2E17D044A5A11EF8F828477C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.44.0-122.8.51.255
122.8.56.0/22
122.8.64.0/22
122.8.72.0/22
Signature Algorithm: sha256WithRSAEncryption
96:f4:f3:16:7e:77:3e:75:ac:e1:6f:f6:c1:1e:6b:5f:f2:1f:
24:bc:28:27:13:e1:0e:97:2a:ef:ee:2b:20:c2:ff:4c:32:92:
66:9a:7f:b3:0d:0b:0a:3a:8a:a2:c5:e2:19:6b:81:73:65:eb:
52:70:d7:bb:6d:99:12:bd:51:a4:3e:0d:50:7f:bf:b2:19:5c:
9b:19:7c:ef:7b:98:7c:f1:5d:eb:bc:93:1e:16:4a:86:d5:ed:
a2:57:38:0d:60:9f:e6:78:c6:d3:5f:c2:b6:71:c7:6b:88:e6:
32:59:75:97:a9:e1:8a:06:aa:1b:8d:33:59:c7:2a:aa:35:bf:
04:75:47:c6:0a:4c:63:6e:e3:8d:66:a1:3e:a3:e8:b3:86:04:
f9:a6:8b:ca:c3:f0:0a:d5:4d:c6:b3:24:7b:b0:88:40:c6:4d:
04:df:05:5b:2a:3e:1c:3c:c7:20:2e:ba:89:09:2a:36:a4:b2:
07:9d:c0:ef:33:ad:59:a1:49:fe:9b:ab:b2:3a:da:dd:01:b5:
94:f7:32:0f:b3:b4:59:ac:4e:b4:ca:c8:ab:62:00:87:a5:d1:
ff:1b:e0:f9:92:a0:b2:6e:6b:69:58:66:93:9c:31:ac:ec:81:
cc:97:02:0b:b3:7f:5b:5b:98:21:59:19:a7:dd:2f:31:8f:7c:
c9:60:b0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 08:35:33 2024 by rpki-client on console-fra.rpki-client.org