Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/210803A4CDAC11EFAFC36C0EC4F9AE02.roa
File: 210803A4CDAC11EFAFC36C0EC4F9AE02.roa (raw, json)
Hash identifier: HjRM0Zdkg4i37vL5AJNcUqXzEDaU6/6ClQ+uyOQqIyA=
Subject key identifier: FF:2F:B4:E7:13:58:AB:38:95:1A:76:61:8F:F5:26:5A:38:83:B5:4D
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0BDE
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/210803A4CDAC11EFAFC36C0EC4F9AE02.roa
Signing time: Wed 08 Jan 2025 10:34:24 +0000
ROA not before: Wed 08 Jan 2025 10:34:24 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 9387
IP address blocks: 14.192.134.0/24 maxlen: 24
14.192.144.0/24 maxlen: 24
14.192.151.0/24 maxlen: 24
14.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 18:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3038 (0xbde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Jan 8 10:34:24 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=677e54b0-d06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:e8:5e:f7:af:ee:d0:65:79:47:df:97:ba:
e7:e5:a8:83:51:51:30:fc:90:9f:46:d8:5d:59:7a:
5d:3f:ee:70:c8:e9:40:d7:46:78:8a:49:6b:aa:5b:
c0:3a:1e:f1:cc:eb:53:51:55:10:0c:9d:37:7e:94:
87:f3:d5:2d:ca:be:35:0a:c0:d3:2a:52:e0:6a:6c:
5d:97:13:53:cb:43:82:b0:4f:be:8a:5e:e4:0b:2b:
3f:43:93:5a:ac:64:ac:2b:f8:0f:f2:b1:3c:b4:12:
ec:26:fd:4d:15:27:dd:af:37:ed:0a:7b:4d:57:2f:
a5:a4:03:58:2d:55:e1:17:54:fc:b5:9b:9d:a9:99:
9d:4b:9a:85:5c:be:22:2b:27:db:96:7c:87:aa:ab:
b6:57:24:82:b6:54:44:e1:89:0c:c3:a0:13:05:8d:
fa:eb:3d:60:a1:85:33:fe:72:2c:1f:5c:32:bf:98:
1d:30:59:8e:e1:0d:a8:a3:25:ce:a7:78:50:f4:ec:
b8:12:0c:65:67:36:61:11:48:1a:1d:e7:34:ef:64:
8f:2d:5a:cd:39:22:e5:2a:05:ea:96:a3:8d:6e:9b:
6e:fe:e9:05:01:28:e6:95:51:ab:86:e1:03:1f:24:
df:3d:75:cd:e6:b4:f0:1e:8c:4d:92:00:65:d3:8e:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2F:B4:E7:13:58:AB:38:95:1A:76:61:8F:F5:26:5A:38:83:B5:4D
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/210803A4CDAC11EFAFC36C0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.134.0/24
14.192.144.0/24
14.192.151.0-14.192.152.255
Signature Algorithm: sha256WithRSAEncryption
04:fb:e9:96:16:5a:34:ea:c2:fd:0d:a9:93:cf:07:22:3b:2b:
8e:1a:01:4d:8e:89:03:25:05:91:73:f9:23:b4:3d:bd:40:1d:
96:75:86:4e:68:0c:5e:85:52:d8:e0:64:b0:c3:40:a7:b4:1b:
13:ac:9e:6d:c1:d6:6a:e1:4b:88:99:f8:24:ed:44:b6:00:9f:
db:9c:05:0f:37:02:f6:b4:7d:19:1f:96:10:11:1b:dc:ce:36:
a2:6a:98:d2:b3:5a:52:db:b5:38:5b:18:08:36:7a:12:22:e7:
07:e4:01:41:c6:38:46:e9:6f:ba:b1:c6:95:47:0d:f7:d5:9a:
32:98:62:f4:1a:e5:b2:83:87:a7:32:5b:63:45:c8:70:44:6e:
87:1b:7a:03:99:84:67:cc:84:94:3a:14:1c:72:72:a0:cb:5f:
06:16:96:15:a7:66:7c:18:e8:c6:bc:38:94:84:6e:37:c2:84:
d2:2d:a0:fa:cb:54:26:35:fe:2d:51:ac:83:3b:b1:23:58:f5:
dc:fe:9c:dd:84:b5:e3:4a:8e:13:0f:ab:5c:91:98:3e:64:5b:
79:82:ba:80:52:ee:08:e9:09:f7:24:73:91:4c:4d:41:48:9f:
a5:55:93:fd:f0:ae:38:a0:35:e8:6e:07:7e:e7:a9:8a:3a:05:
b9:b1:48:f3
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICC94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjUwMTA4MTAzNDI0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzdlNTRiMC1kMDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsbvoXvev7tBleUffl7rn5aiDUVEw/JCfRthdWXpdP+5wyOlA10Z4iklrqlvA
Oh7xzOtTUVUQDJ03fpSH89Utyr41CsDTKlLgamxdlxNTy0OCsE++il7kCys/Q5Na
rGSsK/gP8rE8tBLsJv1NFSfdrzftCntNVy+lpANYLVXhF1T8tZudqZmdS5qFXL4i
KyfblnyHqqu2VySCtlRE4YkMw6ATBY366z1goYUz/nIsH1wyv5gdMFmO4Q2ooyXO
p3hQ9Oy4EgxlZzZhEUgaHec072SPLVrNOSLlKgXqlqONbptu/ukFASjmlVGrhuED
HyTfPXXN5rTwHoxNkgBl04647wIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFP8vtOcT
WKs4lRp2YY/1Jlo4g7VNMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvMjEwODAzQTRD
REFDMTFFRkFGQzM2QzBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E
JDAiMCAEAgABMBoDBAAOwIYDBAAOwJAwDAMEAA7AlwMEAA7AmDANBgkqhkiG9w0B
AQsFAAOCAQEABPvplhZaNOrC/Q2pk88HIjsrjhoBTY6JAyUFkXP5I7Q9vUAdlnWG
TmgMXoVS2OBksMNAp7QbE6yebcHWauFLiJn4JO1EtgCf25wFDzcC9rR9GR+WEBEb
3M42omqY0rNaUtu1OFsYCDZ6EiLnB+QBQcY4RulvurHGlUcN99WaMphi9BrlsoOH
pzJbY0XIcERuhxt6A5mEZ8yElDoUHHJyoMtfBhaWFadmfBjoxrw4lIRuN8KE0i2g
+stUJjX+LVGsgzuxI1j13P6c3YS140qOEw+rXJGYPmRbeYK6gFLuCOkJ9yRzkUxN
QUifpVWT/fCuOKA16G4HfuepijoFubFI8w==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:08 2025 by rpki-client