Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/FEA0C9668BE211ED9687225BC4F9AE02.roa
File: FEA0C9668BE211ED9687225BC4F9AE02.roa (raw, json)
Hash identifier: 80meUpbTM3D7V+FEM6mB2JR1qWbIwyMxBc6SVsDNO5w=
Subject key identifier: 75:EA:A8:AA:DB:3C:CE:3C:66:06:DF:AB:9D:5A:9B:17:25:C7:16:37
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 320E
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/FEA0C9668BE211ED9687225BC4F9AE02.roa
Signing time: Thu 16 Mar 2023 16:01:06 +0000
ROA not before: Thu 16 Mar 2023 16:01:06 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 34549
IP address blocks: 122.8.52.0/22 maxlen: 22
122.8.60.0/22 maxlen: 22
122.8.68.0/22 maxlen: 22
122.8.76.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 31 Jan 2024 07:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12814 (0x320e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Mar 16 16:01:06 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=64133d42-6835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:69:50:18:98:07:9d:43:b3:3f:f2:5e:fd:bd:
35:61:f0:bf:f5:0a:fa:b2:f4:71:8c:97:78:38:e0:
aa:0a:23:f5:9b:bc:1e:e6:ed:36:75:b3:b6:4f:5c:
92:72:c5:0a:8c:cd:61:8a:ed:33:fc:a1:83:06:74:
e0:75:b1:50:d2:25:44:29:22:c1:6a:fe:9d:d1:47:
63:5e:37:76:14:ea:52:39:0e:74:db:2d:1c:1d:b2:
b9:de:5b:3e:43:05:d7:a5:c1:29:a7:02:d5:7e:4b:
45:f0:5b:42:e7:04:d3:90:76:cd:91:17:c7:65:73:
c1:9d:52:24:23:3c:fb:ca:20:b5:4e:2d:7b:be:68:
0a:aa:52:b2:32:38:68:87:b0:bb:f1:9d:9b:51:43:
20:6d:3c:c9:36:c0:c9:6f:93:33:db:52:ab:fb:a3:
dd:64:48:0b:b6:7d:94:12:ef:ae:d8:5b:0b:17:8c:
11:50:6e:47:ea:5d:a6:16:19:b6:31:19:7b:23:62:
1d:72:4e:bd:3d:01:3c:8e:fb:7f:85:8d:e5:72:fc:
c4:dd:40:74:fb:ef:7b:ad:06:5a:eb:98:b9:15:3f:
ad:83:0a:6d:74:b1:dc:76:3a:61:34:1a:9a:17:b5:
64:6d:2a:9e:77:03:56:ec:a8:a4:b4:0f:7a:b2:2b:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EA:A8:AA:DB:3C:CE:3C:66:06:DF:AB:9D:5A:9B:17:25:C7:16:37
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/FEA0C9668BE211ED9687225BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.52.0/22
122.8.60.0/22
122.8.68.0/22
122.8.76.0/22
Signature Algorithm: sha256WithRSAEncryption
44:f2:8f:a0:6f:c2:22:9c:b1:84:94:17:a5:10:d7:87:88:78:
c7:11:b4:ee:62:1b:a8:a3:98:33:0f:92:35:2f:a2:0b:4c:00:
b2:bb:90:37:27:5f:6b:07:dd:f5:a7:d8:4b:94:05:85:5d:4e:
c1:38:2b:c6:04:b3:f7:32:6d:95:f5:b2:6e:6c:d8:0d:a5:58:
cb:0f:67:ef:7e:62:4e:75:18:95:57:6b:3d:07:f8:89:5d:e2:
57:4e:d9:62:8b:ad:5a:25:a6:a7:f9:5e:02:bc:32:f9:af:86:
72:d6:35:c9:09:0d:dd:b4:25:a1:0e:7e:ae:59:57:9f:f2:ba:
2b:c8:ea:c6:72:6b:b5:25:1b:17:69:29:ce:b0:23:54:f7:28:
35:f7:e8:17:33:cb:3b:ee:77:d2:3b:8c:0a:79:21:54:7c:45:
95:bd:2b:e8:0a:c2:d8:22:e3:df:1a:c8:d4:b7:8c:5d:cf:9a:
f3:fb:7e:d1:9c:c9:f9:70:19:cd:eb:65:62:84:45:58:d7:6e:
28:74:e9:ba:8b:b5:28:f0:02:e6:f9:51:bb:cd:23:15:3a:0f:
2e:44:01:b8:24:8c:f4:ec:38:89:73:6c:36:ab:89:4b:9e:c8:
c3:60:87:b3:89:c0:34:4a:3c:fb:c6:fd:fe:18:70:9c:e0:0c:
5a:28:00:70
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICMg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1
MkZERjYzM0YwHhcNMjMwMzE2MTYwMTA2WhcNMjQwNTI5MDAwMDAwWjAYMRYwFAYD
VQQDEw02NDEzM2Q0Mi02ODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA62lQGJgHnUOzP/Je/b01YfC/9Qr6svRxjJd4OOCqCiP1m7we5u02dbO2T1yS
csUKjM1hiu0z/KGDBnTgdbFQ0iVEKSLBav6d0UdjXjd2FOpSOQ502y0cHbK53ls+
QwXXpcEppwLVfktF8FtC5wTTkHbNkRfHZXPBnVIkIzz7yiC1Ti17vmgKqlKyMjho
h7C78Z2bUUMgbTzJNsDJb5Mz21Kr+6PdZEgLtn2UEu+u2FsLF4wRUG5H6l2mFhm2
MRl7I2Idck69PQE8jvt/hY3lcvzE3UB0++97rQZa65i5FT+tgwptdLHcdjphNBqa
F7VkbSqedwNW7KiktA96sisdZwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFHXqqKrb
PM48Zgbfq51amxclxxY3MB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw
NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ
ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM3MEYvNzM0NkU4QTI2MDQ5MTFFMkEzMDc1NzhEMjk3OUJCMjAvRkVBMEM5NjY4
QkUyMTFFRDk2ODcyMjVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBAJ6CDQDBAJ6CDwDBAJ6CEQDBAJ6CEwwDQYJKoZIhvcNAQEL
BQADggEBAETyj6BvwiKcsYSUF6UQ14eIeMcRtO5iG6ijmDMPkjUvogtMALK7kDcn
X2sH3fWn2EuUBYVdTsE4K8YEs/cybZX1sm5s2A2lWMsPZ+9+Yk51GJVXaz0H+Ild
4ldO2WKLrVolpqf5XgK8MvmvhnLWNckJDd20JaEOfq5ZV5/yuivI6sZya7UlGxdp
Kc6wI1T3KDX36Bczyzvud9I7jAp5IVR8RZW9K+gKwtgi498ayNS3jF3PmvP7ftGc
yflwGc3rZWKERVjXbih06bqLtSjwAub5UbvNIxU6Dy5EAbgkjPTsOIlzbDariUue
yMNgh7OJwDRKPPvG/f4YcJzgDFooAHA=
-----END CERTIFICATE-----
Generated at Wed Jan 31 12:08:29 2024 by rpki-client on console-ams.rpki-client.org