Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/046B615C9C4511EF814ECF5DC4F9AE02.roa
File: 046B615C9C4511EF814ECF5DC4F9AE02.roa (raw, json)
Hash identifier: uJ7DZHHkmkNXwxvP1Q7hYbsI1ycWCZI9uoKTw6xv6Vs=
Subject key identifier: 47:B4:9F:48:78:91:5B:51:13:88:BE:27:49:3A:36:31:FA:FA:E7:B1
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0B75
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/046B615C9C4511EF814ECF5DC4F9AE02.roa
Signing time: Thu 14 Nov 2024 09:51:37 +0000
ROA not before: Thu 14 Nov 2024 09:51:37 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 62425
IP address blocks: 14.192.142.0/24 maxlen: 24
14.192.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Dec 2024 07:27:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2933 (0xb75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Nov 14 09:51:37 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6735c829-f74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:e8:00:6d:50:3f:5b:e1:90:42:32:34:ab:
04:ea:a6:70:19:1c:00:69:98:8f:d7:1b:24:5f:17:
1d:ca:d4:59:49:65:b0:30:df:7a:fd:c1:09:65:c3:
17:65:d5:20:15:a0:2c:ec:2e:fe:28:4b:ba:74:f4:
9a:46:a3:2a:04:88:98:09:64:30:9a:87:76:d7:f2:
0b:6f:f5:57:b4:18:77:9a:c7:2d:68:86:56:7f:49:
c8:5f:bc:6a:02:59:9b:ac:6a:a7:56:0f:37:00:d1:
41:99:17:ee:cd:c1:b9:70:a5:cb:21:e0:7b:f5:89:
29:0a:b5:80:0e:fe:ab:9e:5a:5c:6f:f1:e8:19:87:
9c:2b:11:4e:1f:6f:70:26:0a:87:73:df:2b:66:3b:
4f:6a:f7:f4:95:c8:9a:29:8d:25:82:8d:b1:91:5a:
66:7a:7d:93:c8:53:88:f6:58:b6:a3:c1:d1:18:3f:
fe:d7:4f:32:d2:f4:a2:a2:fa:89:f3:28:8b:5a:c2:
25:3b:a0:da:02:74:85:7e:43:70:ca:1f:72:72:df:
b1:05:0f:5a:0b:9f:1d:ed:a0:6d:57:e2:e4:20:e0:
ec:3e:64:60:47:c2:a5:70:e4:26:e7:32:ce:25:b5:
f0:6b:3c:cd:ae:02:63:33:64:52:2b:74:20:56:e6:
15:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B4:9F:48:78:91:5B:51:13:88:BE:27:49:3A:36:31:FA:FA:E7:B1
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/046B615C9C4511EF814ECF5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.142.0/24
14.192.157.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:88:a6:b0:67:9c:4e:3b:8e:c7:2b:8a:32:cc:d4:0e:6f:75:
79:27:ab:e2:a0:b5:0f:b1:ce:71:c0:24:20:22:74:55:7f:ec:
d7:47:4c:0d:75:df:c5:24:e6:32:d7:55:9c:44:f8:50:5b:e4:
76:d1:59:2a:43:67:cd:87:8e:9e:6a:0c:42:4b:89:f4:f3:b0:
77:1e:3e:eb:a9:07:cb:75:55:79:e0:ff:a9:2a:c9:6b:45:f0:
66:90:d5:3a:1f:4c:22:54:84:da:83:89:79:1b:ef:64:ba:a9:
d3:a0:77:1b:e8:a5:1c:28:21:14:3a:c2:e6:18:a8:c3:5b:8f:
66:3d:9e:cb:64:79:25:e1:46:6d:4d:64:2c:5b:8e:2b:fa:83:
3d:62:2a:d3:b7:cb:6d:3e:15:9e:46:53:21:52:78:2a:82:47:
37:2c:06:f1:32:1e:c1:4c:66:e8:b6:6d:61:af:7b:d1:93:89:
a5:8c:72:68:8d:2a:d2:fe:66:15:d7:3e:05:0a:dc:9d:ec:f5:
15:bb:7c:8d:4a:cb:64:3b:58:7f:44:e7:6d:bd:4a:63:a9:4f:
8f:92:de:4c:42:7f:7d:40:0b:c0:a5:b4:7e:dd:f4:49:47:94:
60:9c:7e:fa:dd:ca:5b:c7:ce:82:f5:28:04:b6:31:f4:e6:6e:
8d:57:bd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:12 2025 by rpki-client