Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/BC091464EC4911EEBA152436C4F9AE02.roa
File: BC091464EC4911EEBA152436C4F9AE02.roa (raw, json)
Hash identifier: dy8Zh04CIcGUgHNPYAGEpTjePNue/YtWU3V5H7TGhxU=
Subject key identifier: FD:D0:29:27:1D:D8:79:65:2C:5E:29:EB:6C:BC:74:A3:C8:00:FF:DB
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0935
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/BC091464EC4911EEBA152436C4F9AE02.roa
Signing time: Wed 27 Mar 2024 14:53:13 +0000
ROA not before: Wed 27 Mar 2024 14:53:13 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.128.0/24 maxlen: 24
14.192.129.0/24 maxlen: 24
14.192.130.0/24 maxlen: 24
14.192.131.0/24 maxlen: 24
14.192.132.0/24 maxlen: 24
14.192.133.0/24 maxlen: 24
14.192.134.0/24 maxlen: 24
14.192.135.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.137.0/24 maxlen: 24
14.192.138.0/24 maxlen: 24
14.192.139.0/24 maxlen: 24
14.192.140.0/24 maxlen: 24
14.192.141.0/24 maxlen: 24
14.192.142.0/24 maxlen: 24
14.192.143.0/24 maxlen: 24
14.192.144.0/24 maxlen: 24
14.192.145.0/24 maxlen: 24
14.192.146.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.148.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.151.0/24 maxlen: 24
14.192.152.0/24 maxlen: 24
14.192.153.0/24 maxlen: 24
14.192.154.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.156.0/24 maxlen: 24
14.192.157.0/24 maxlen: 24
14.192.158.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
2403:7980::/32 maxlen: 32
2403:7980::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 28 Mar 2024 10:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2357 (0x935)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Mar 27 14:53:13 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=660432d8-85fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:db:64:8b:96:20:c7:7f:51:7c:fb:96:11:d9:
09:1c:e5:80:0b:2a:01:46:4a:3a:ad:ac:e3:e4:f1:
b6:fd:8f:48:5e:f0:45:fa:86:8d:ba:40:f6:c4:3d:
ee:9d:e1:e3:24:f0:4f:f2:f3:8d:82:ab:a8:f0:d5:
91:1b:3e:24:22:6a:33:4b:96:53:fa:2e:6f:18:16:
79:ff:ec:58:71:48:0e:ad:41:33:38:2a:65:12:3f:
9a:93:ee:b3:6f:c6:d9:4e:bd:94:15:4f:1a:74:24:
ca:12:4b:11:42:82:a6:44:05:e7:22:1c:8c:cf:04:
52:59:db:17:be:33:70:0d:5c:08:4c:a4:88:9f:89:
ba:98:e9:cc:5b:eb:79:b2:16:d2:7e:94:a0:12:71:
90:7a:be:ce:53:08:71:5b:45:7b:8d:06:0c:2e:bb:
3b:06:4b:c9:c4:7d:0d:0d:ad:73:9a:53:a1:9f:79:
fc:78:7b:2a:98:3d:71:d8:95:26:be:30:45:56:35:
60:c6:f1:2f:2e:a4:45:bc:59:c6:89:3e:ba:3a:50:
21:26:c1:d6:6c:ff:93:15:19:d0:0f:82:a4:70:e2:
53:1b:10:56:47:ae:26:b7:b4:f1:a9:7e:3a:5b:42:
7b:38:8c:bc:c7:be:c6:5d:16:63:29:f7:d2:af:58:
b5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D0:29:27:1D:D8:79:65:2C:5E:29:EB:6C:BC:74:A3:C8:00:FF:DB
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/BC091464EC4911EEBA152436C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.128.0/19
103.20.135.0/24
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
74:19:6e:c8:a0:22:24:04:b5:52:62:08:37:05:a8:82:bc:52:
47:0e:83:07:46:a7:9d:45:89:48:44:1a:41:0f:fd:95:cd:1a:
f9:8c:07:7b:6e:86:62:2f:31:9b:9c:65:7f:7a:a7:01:e3:97:
27:e6:db:fd:4f:5e:2f:7a:9a:a0:a8:0f:1d:b4:2b:f6:31:1c:
b4:4a:f5:85:4f:60:4d:03:50:9c:a6:e7:f9:13:73:68:58:4e:
a0:3f:5f:3b:cc:ea:56:29:fc:31:02:de:0c:74:58:58:17:1a:
19:0b:a4:1f:26:1a:07:1b:a5:43:81:61:db:69:bd:44:e0:43:
74:49:63:8d:e9:b3:01:d3:42:a2:0f:34:28:af:72:56:4f:81:
4c:49:61:02:06:4e:3e:ad:e3:94:a4:74:cf:67:7e:68:5f:99:
e4:da:3b:ce:34:19:d4:b6:d2:85:df:6f:d4:8d:99:c5:72:ee:
09:86:40:c1:ec:4c:14:3a:0b:54:d1:ba:21:33:1f:75:b5:93:
d2:33:a0:2e:89:5d:a5:54:16:be:0e:a8:ba:35:42:b1:1a:dc:
5c:54:58:9b:a8:6f:17:ac:b0:3f:8a:6c:35:9c:0e:69:98:75:
cd:49:c1:b3:1b:0b:ae:41:d1:56:59:bc:93:7a:54:66:65:03:
f4:14:2c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:03:39 2024 by rpki-client on console-fra.rpki-client.org