Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0C507D2478D911EF9E6B3675C4F9AE02.roa
File: 0C507D2478D911EF9E6B3675C4F9AE02.roa (raw, json)
Hash identifier: 4twNaDVFWaS9npvXmtGPpMc1HafSwLa+4m25D//vQZM=
Subject key identifier: C0:5A:C8:CF:F1:BE:99:6A:74:7B:B2:D9:82:3C:83:61:54:3F:2F:8B
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0ABD
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0C507D2478D911EF9E6B3675C4F9AE02.roa
Signing time: Sun 22 Sep 2024 11:51:49 +0000
ROA not before: Sun 22 Sep 2024 11:51:49 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 55933
IP address blocks: 14.192.132.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 26 Nov 2024 15:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2749 (0xabd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Sep 22 11:51:49 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66f004d4-4ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:47:98:2a:41:0f:df:2a:f0:90:4c:a7:18:
4e:7c:93:d3:6d:2d:55:30:4a:4a:13:10:58:26:f9:
27:ce:5d:f2:05:ad:8d:62:69:ce:35:e8:e7:c5:61:
3e:78:95:f2:19:a2:6f:aa:5c:be:8d:36:82:1d:26:
f1:22:68:e5:84:98:59:ba:fa:e8:a7:cc:0c:33:e8:
fe:bc:96:a2:96:d3:e6:b6:2c:51:d9:a1:26:e7:b1:
2a:4f:6f:ef:4b:5c:29:8a:9b:d6:35:80:fa:4c:6f:
80:00:70:49:45:f2:15:65:e5:e8:0e:9a:ad:ef:65:
02:df:bc:f4:1e:04:73:44:73:c2:dd:e4:03:d0:4d:
fe:2f:ad:bd:b9:a3:00:a3:ca:b6:72:95:21:8c:72:
6f:bb:a6:5e:71:a4:4c:21:5f:a4:e2:a8:90:7b:a5:
54:ae:2f:b3:65:a5:08:68:aa:97:33:0d:03:50:73:
20:08:ac:4f:25:37:0b:eb:ad:0f:2c:75:76:73:eb:
63:4e:70:63:a9:b0:70:76:d4:6f:10:87:8c:5e:6b:
fb:e3:2f:7d:0f:97:db:52:bd:f0:b6:b7:f6:bd:0d:
1a:26:cd:e1:53:e2:8f:de:48:82:9d:32:50:0d:16:
d5:e1:82:f3:05:9b:08:ac:dc:22:21:16:e5:47:9c:
37:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5A:C8:CF:F1:BE:99:6A:74:7B:B2:D9:82:3C:83:61:54:3F:2F:8B
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0C507D2478D911EF9E6B3675C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.132.0/23
Signature Algorithm: sha256WithRSAEncryption
58:f2:66:00:95:36:1c:8a:8e:9e:25:39:ff:44:d8:46:4e:0e:
26:ac:dc:66:65:41:dc:0b:e0:6c:f9:14:36:c1:2c:ce:52:67:
4c:d4:5f:0f:b8:3e:fc:8d:14:91:72:82:79:f9:c1:d7:ec:d5:
49:9d:18:17:7e:d2:fb:33:26:bc:4f:c2:d0:13:c4:16:84:aa:
0f:9a:e9:6f:ae:a7:f1:68:b4:cb:74:b9:9f:a7:62:c0:de:27:
43:c6:52:ca:0d:8b:59:cc:b4:2b:a1:20:2a:ad:6c:84:7c:1c:
2d:9b:d2:ab:9b:63:5e:f3:5d:0f:46:51:ad:14:f7:60:a4:6b:
64:6d:45:88:ba:31:7f:c2:1a:5a:17:76:d4:98:92:78:b6:3e:
f0:55:2e:94:94:55:42:b9:68:55:20:6b:a9:8a:e5:ad:9d:8c:
05:25:f4:8e:7a:72:5d:69:a5:71:b1:06:ee:31:75:9a:ef:d9:
51:62:65:cd:ab:e0:d2:41:a1:ed:5c:76:40:a0:4a:4a:1c:d0:
9c:b2:4d:fe:f6:bd:fb:d5:16:5d:62:c9:7a:fb:ec:57:2c:ac:
70:a4:2b:b8:d0:12:13:13:a6:bf:97:d6:9a:1d:6b:44:a2:63:
e8:e5:f4:d2:54:20:36:c9:0a:68:f6:01:4b:96:13:77:de:19:
88:78:2b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:52 2025 by rpki-client