Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/331CD74CBC4811EF906A654EC4F9AE02.roa
File: 331CD74CBC4811EF906A654EC4F9AE02.roa (raw, json)
Hash identifier: G6b3WKiwaqp+ophizzPrIQKyaugfZj6bjkG+fYvI0lc=
Subject key identifier: A3:62:10:2F:7C:57:B0:C0:73:6D:A9:FB:FF:43:C1:96:46:28:C3:EE
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0BA7
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/331CD74CBC4811EF906A654EC4F9AE02.roa
Signing time: Tue 17 Dec 2024 07:26:15 +0000
ROA not before: Tue 17 Dec 2024 07:26:15 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 208485
IP address blocks: 14.192.136.0/24 maxlen: 24
14.192.138.0/24 maxlen: 24
14.192.139.0/24 maxlen: 24
14.192.143.0/24 maxlen: 24
14.192.145.0/24 maxlen: 24
14.192.146.0/24 maxlen: 24
14.192.158.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Dec 2024 11:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2983 (0xba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Dec 17 07:26:15 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67612797-406e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:7e:4e:05:7f:e1:d9:11:ab:e3:b1:93:b4:
44:c6:7c:96:c0:98:37:44:65:b6:62:3f:f6:42:ed:
ca:59:33:e3:13:fb:e2:ae:5c:ab:5d:02:5a:36:57:
0c:fb:c1:64:e5:8c:1e:09:e3:4a:98:2e:7c:59:ee:
21:d3:43:3d:cc:a3:27:13:7f:f9:f2:89:ae:d6:ba:
0c:38:dd:6f:67:c9:2e:7b:c5:1c:12:99:42:f0:b6:
75:7a:cc:9b:30:f1:19:36:9c:0e:77:f7:bb:9b:34:
f5:29:85:29:0d:4f:92:b2:0b:eb:32:17:44:eb:cd:
9b:e1:69:9c:ab:ee:2e:a9:13:39:62:a4:7e:4b:be:
f3:bb:d1:90:7f:1e:48:36:e8:d6:3c:c4:91:8a:77:
2e:e6:99:a7:51:a8:37:62:e8:f8:07:b8:9c:f5:75:
c8:4b:9b:37:0b:75:a2:4f:c3:a3:81:fe:e4:8f:06:
1f:90:81:02:89:a1:d9:04:dc:86:e6:da:6d:72:3a:
04:a1:ed:78:f9:cf:70:43:0f:de:c8:14:b7:0c:34:
09:81:4a:58:e3:78:bc:ad:1f:5f:63:40:c9:80:2a:
f0:87:16:94:4d:3a:59:c9:53:c7:40:ed:cf:7c:fe:
fe:00:89:95:41:c3:41:76:57:30:87:cc:bb:4a:d7:
23:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:62:10:2F:7C:57:B0:C0:73:6D:A9:FB:FF:43:C1:96:46:28:C3:EE
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/331CD74CBC4811EF906A654EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.136.0/24
14.192.138.0/23
14.192.143.0/24
14.192.145.0-14.192.146.255
14.192.158.0/23
43.247.120.0/24
43.247.123.0/24
103.20.133.0/24
Signature Algorithm: sha256WithRSAEncryption
83:82:84:cd:65:12:29:47:33:dd:e5:39:16:3d:e3:f3:d0:82:
bb:67:fc:5f:89:d6:a7:75:03:be:42:f4:f2:71:fa:c1:05:a0:
f4:10:0d:56:f8:f1:c2:88:6c:4e:bf:9f:ae:59:98:a1:1d:17:
ef:5e:8a:f2:d1:9b:fe:6f:0c:a9:e6:33:bc:17:ec:f7:4e:63:
78:22:6d:a2:64:d1:eb:02:12:ad:8a:76:76:19:2d:ef:df:02:
5f:1d:02:31:cf:28:22:58:41:7e:f4:64:f1:ca:e4:56:11:59:
2b:b5:c4:94:f6:ff:8a:7a:32:72:18:72:13:89:5d:71:f7:cf:
2c:51:8d:06:4f:df:51:c8:0c:58:50:c8:48:ec:6b:f8:c9:e7:
b3:76:e9:15:c3:78:d2:49:1a:c9:53:4c:86:a5:bc:8e:31:8f:
40:c6:7f:e3:59:6c:44:22:c1:99:d3:ae:6e:f8:9c:64:26:ee:
04:d4:db:cb:53:d2:1a:75:4d:3b:f1:61:4f:bf:30:29:30:c4:
6d:a7:67:bd:68:0d:c4:c9:20:76:ef:47:36:90:06:68:56:90:
76:da:d4:16:86:ad:94:0f:e8:7d:99:21:4c:0e:c1:36:7e:43:
49:cf:a4:e6:4f:7d:99:f9:ff:a2:24:01:98:c7:04:1c:93:a3:
cc:4d:61:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:28 2025 by rpki-client