Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1D979E7A48DF11EFBFB3E726C4F9AE02.roa
File: 1D979E7A48DF11EFBFB3E726C4F9AE02.roa (raw, json)
Hash identifier: IlfeMhi6O0wjo68nvLMoA6j+nsNbjCviNp2NrfcL4nQ=
Subject key identifier: C9:5B:54:9A:08:FF:06:09:D7:7C:AD:4A:D4:87:5D:D8:CE:7A:E2:66
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0A34
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1D979E7A48DF11EFBFB3E726C4F9AE02.roa
Signing time: Tue 23 Jul 2024 10:34:18 +0000
ROA not before: Tue 23 Jul 2024 10:34:18 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 138985
IP address blocks: 14.192.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 10:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2612 (0xa34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Jul 23 10:34:18 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=669f872a-2c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3c:8a:44:73:33:24:5d:43:94:f7:71:ed:95:
76:69:3c:ed:53:5c:66:2f:38:76:72:19:c9:0d:03:
7e:d8:54:9c:0d:da:31:60:f6:97:75:90:b0:ae:c4:
a4:d3:84:bc:45:83:f4:d8:bd:b1:31:5f:17:65:c7:
06:7c:d0:0a:95:81:f5:7e:49:d5:8e:ce:85:7b:38:
09:07:b9:3e:c7:9f:b6:af:da:e8:34:74:76:e5:28:
34:68:fe:65:68:c9:79:14:98:10:91:fa:19:fc:b9:
61:3e:a1:63:c4:1a:ae:94:6d:a3:47:3d:c8:29:c2:
41:57:8e:ba:19:e0:7e:8b:bd:62:17:fe:cd:3d:dc:
d8:f7:8a:34:d2:69:22:ae:62:ee:9e:c1:a3:20:78:
01:29:49:44:a6:3c:b2:3e:e9:5c:09:41:8c:6b:53:
d9:9d:21:71:18:86:59:46:e7:16:e0:0a:89:fe:4e:
68:4b:7c:3b:51:66:0e:d4:de:c2:5b:d0:ca:ff:db:
d4:34:f1:b7:5e:b4:61:7c:65:92:7e:e5:3b:02:92:
56:a4:d9:f3:e6:09:f3:31:37:50:a5:2b:4a:6f:de:
b1:55:f7:ef:2e:ed:8e:b6:fd:87:3f:20:e4:68:3f:
c4:9f:50:2a:25:57:21:c0:29:cb:dc:22:d5:4b:1e:
f0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5B:54:9A:08:FF:06:09:D7:7C:AD:4A:D4:87:5D:D8:CE:7A:E2:66
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1D979E7A48DF11EFBFB3E726C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.139.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b7:25:46:5d:6b:b4:b5:77:91:67:c1:72:24:78:a9:8a:61:
7e:98:de:1b:0f:60:93:cd:a5:96:39:6b:f9:dd:a9:84:e7:5e:
8f:dd:bd:da:09:a7:bb:f7:97:9b:97:7d:90:e6:ca:b0:c6:aa:
64:e7:9e:75:60:96:80:f6:eb:26:cb:42:41:1f:09:84:1c:e3:
98:61:e1:94:ef:4b:0a:b0:9a:b4:f2:9e:e3:ae:66:00:31:78:
18:73:8c:b6:c4:41:44:64:43:12:1d:ad:8d:af:3f:e9:f6:42:
35:32:fe:7e:70:e7:07:50:e6:a5:c8:95:f8:74:d9:17:9b:8f:
e0:77:3e:f8:bf:23:f6:aa:e5:65:96:fc:da:51:b9:14:0a:e6:
5a:30:0a:fb:d5:7a:b6:87:3b:e3:9a:aa:55:ae:8d:b2:73:4e:
e6:f4:0c:71:4c:d4:41:e9:52:e6:88:b3:62:0c:04:29:89:11:
2e:e9:b1:57:5c:0b:a5:7e:6e:fe:fd:5d:ba:18:4e:86:ca:29:
f8:73:ab:e0:c7:be:f4:8f:b6:38:e4:86:20:8d:dd:44:b2:93:
4c:15:aa:20:be:98:92:0b:39:26:5e:c7:ed:f0:de:9e:e5:3c:
97:1e:94:c0:39:b9:07:d4:96:9c:4d:92:e1:51:86:22:55:af:
40:57:81:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:44 2025 by rpki-client