Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/33CC2BDA852411EF9BD89243C4F9AE02.roa
File: 33CC2BDA852411EF9BD89243C4F9AE02.roa (raw, json)
Hash identifier: ctWCHqYheUWHdHEmIoq/8xDiV0i3veeQq8eD0+6/LHc=
Subject key identifier: 4F:10:97:E9:AF:C5:A5:B4:65:AE:42:77:96:63:15:CD:FD:D4:51:31
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0B0C
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/33CC2BDA852411EF9BD89243C4F9AE02.roa
Signing time: Tue 08 Oct 2024 03:20:01 +0000
ROA not before: Tue 08 Oct 2024 03:20:01 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 205220
IP address blocks: 14.192.140.0/24 maxlen: 24
14.192.141.0/24 maxlen: 24
14.192.154.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2828 (0xb0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Oct 8 03:20:01 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6704a4e0-02dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:8f:1e:a0:75:15:ab:81:36:1b:c7:b2:05:
32:88:ad:6b:64:4d:91:36:59:90:c5:aa:34:5f:0c:
ed:5a:93:70:d3:56:5b:1f:83:20:92:ba:13:4a:a2:
02:e7:be:62:32:73:39:a3:bc:b3:c3:c6:84:09:eb:
21:3f:c9:f1:ee:be:36:d7:69:1e:ba:b9:81:ae:db:
3a:7f:ce:ba:40:7d:a5:bd:09:ed:e4:b1:76:4b:04:
ba:f3:06:ee:6e:48:cf:c2:af:84:2f:6d:f9:a2:b2:
02:b4:a1:b7:f5:e1:a5:f1:8d:53:0a:62:b8:ff:64:
ee:90:3c:60:17:bc:38:63:86:06:a9:26:a0:7e:e1:
4b:30:08:58:b3:66:c2:f3:12:c3:81:0b:ff:d3:c3:
4f:c3:19:08:61:29:40:2d:c1:ea:ad:12:ac:88:92:
d8:8a:75:78:01:00:20:63:f9:d8:60:cd:3b:04:0f:
f5:3f:6a:31:ac:f0:0c:0a:8d:ef:15:8f:e8:4e:fc:
5f:fe:bf:f0:70:16:66:39:98:b2:e4:3b:f6:ca:2e:
2d:0f:1d:34:2a:cd:93:b4:d2:fb:c0:42:24:7f:d4:
b0:34:20:9b:e3:f6:d7:1b:5c:01:dd:07:ca:ac:53:
94:92:1b:dc:78:2b:bb:b4:9f:5c:cf:d9:b1:69:4b:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:10:97:E9:AF:C5:A5:B4:65:AE:42:77:96:63:15:CD:FD:D4:51:31
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/33CC2BDA852411EF9BD89243C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.140.0/23
14.192.154.0/23
103.20.134.0/24
Signature Algorithm: sha256WithRSAEncryption
36:9e:42:77:8e:3c:e1:67:5d:a0:7b:67:85:31:f0:d2:5c:97:
57:f9:29:03:4c:79:d3:f7:ae:05:e9:d3:98:cb:bb:19:73:34:
bf:16:10:82:52:b0:06:7e:20:9e:5b:ae:2b:7a:80:a5:f2:61:
40:eb:3a:98:b9:3e:15:26:a3:d2:a3:84:7e:26:49:5c:49:e4:
4a:60:b3:38:ef:cc:06:27:74:c3:ed:d3:3a:9c:a5:da:fa:1c:
fd:c8:77:64:42:47:5c:a5:ea:90:74:93:db:8d:e0:00:c2:71:
71:83:95:a5:ad:67:9f:12:19:c0:83:11:4a:4f:a0:d8:2f:79:
63:71:e2:6a:5c:d5:79:24:0c:62:b9:12:65:a7:4a:24:db:98:
9a:7a:5e:93:c9:79:ff:49:fb:f0:55:8b:b0:6e:99:a4:a3:6c:
ac:f1:2b:ea:ab:f9:08:26:02:79:bf:98:da:27:e1:68:8a:f5:
b4:f3:1e:71:05:5c:02:88:91:ca:fc:f1:f0:fb:54:d5:10:c0:
15:9b:f1:56:cd:c9:a9:d5:fb:46:1a:64:3b:7c:12:45:a1:9a:
88:fd:b1:a4:85:d5:86:51:3c:48:26:7c:56:0a:2b:82:74:fa:
15:d2:2b:7c:86:4b:fa:63:8a:9b:1c:15:60:43:79:15:d4:23:
79:04:62:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:23 2025 by rpki-client