Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/4B09DC6EC91E11EF88D1F834C4F9AE02.roa
File: 4B09DC6EC91E11EF88D1F834C4F9AE02.roa (raw, json)
Hash identifier: vA3q72Iy2Rmx0fsh5gu37td8wlcyG5IU6vTKgdxwvlQ=
Subject key identifier: A4:7C:F0:6B:38:88:05:57:C1:95:6E:94:2E:CE:D3:55:A9:AD:70:20
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0BD1
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/4B09DC6EC91E11EF88D1F834C4F9AE02.roa
Signing time: Thu 02 Jan 2025 15:29:50 +0000
ROA not before: Thu 02 Jan 2025 15:29:50 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 213990
IP address blocks: 14.192.130.0/24 maxlen: 24
14.192.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 11:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3025 (0xbd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Jan 2 15:29:50 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6776b0ee-fcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:84:ec:93:79:f9:9c:3e:37:01:6a:00:63:
4d:aa:40:14:5c:3e:9f:ae:a9:9c:e6:71:37:a3:02:
41:10:a8:61:6a:25:15:61:c0:91:e9:a1:0b:82:43:
85:05:52:4c:71:a5:4c:f4:de:f3:38:05:6f:17:f2:
0f:25:95:a6:e2:c3:a5:09:31:ae:f5:d2:f2:a9:86:
72:69:67:46:d2:c1:f8:73:82:f5:ee:30:db:42:7c:
b7:55:96:e5:32:84:72:09:e3:99:ff:67:e6:42:05:
7e:3d:16:61:27:a8:7e:c0:2a:eb:fe:ec:41:d3:40:
b3:cd:b8:cd:7a:fa:92:ed:57:91:66:37:c9:2f:dd:
8e:c0:44:99:bb:67:78:68:d2:9b:62:87:20:2d:a9:
81:35:86:6f:60:b7:8e:d3:c7:8d:a6:d9:8f:07:c0:
6b:93:d2:53:50:63:d7:e3:d2:82:e9:15:b1:63:99:
6f:77:b2:60:0b:43:bf:42:b0:d6:6f:22:2b:8b:54:
1d:9b:68:6a:d0:cf:1f:05:1f:76:21:07:0d:5d:57:
14:fe:41:0c:4e:73:1d:0d:55:2b:9c:b2:eb:d0:03:
83:0a:66:1a:ac:b6:9e:f7:1a:99:39:c7:71:23:ca:
1f:71:95:f4:2a:c3:ce:85:e3:bc:41:f3:00:5f:c1:
09:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7C:F0:6B:38:88:05:57:C1:95:6E:94:2E:CE:D3:55:A9:AD:70:20
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/4B09DC6EC91E11EF88D1F834C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.130.0/24
14.192.144.0/24
Signature Algorithm: sha256WithRSAEncryption
81:cc:6e:14:d8:7a:d6:2d:78:0e:b1:81:f8:c4:81:40:c9:92:
10:e5:75:b9:b9:db:f8:ee:a5:0d:9e:90:18:75:87:a8:52:26:
2f:c7:81:2d:7a:4b:68:5f:ff:d6:81:9e:d7:b3:79:86:d7:a1:
e6:ff:2b:b4:f4:7c:f8:47:72:7d:ea:9e:0d:9e:3b:0c:5f:5f:
e0:8c:d1:2d:1e:82:aa:87:c5:29:dd:ee:f6:a6:7a:2e:e2:94:
c7:7e:7f:12:e9:1e:f7:de:4b:58:48:b6:12:6b:b9:0e:2c:42:
94:83:a3:f7:23:1d:02:76:24:ab:ef:11:2d:8f:2e:83:9c:1d:
fa:2a:55:80:ce:e1:23:7e:cf:e9:58:e4:b4:53:b1:c0:71:d1:
d4:3d:ce:59:ff:35:b7:5f:94:08:12:c0:ef:fa:ce:29:8a:43:
01:5e:f1:9b:94:eb:77:1a:1e:4b:45:f9:a4:f4:99:e6:fe:00:
8f:79:7d:77:85:5d:c5:3e:87:ca:6a:65:d4:39:7d:7f:d9:bc:
3d:dd:2d:0a:95:a5:16:61:41:00:dd:2e:a9:16:ea:aa:a1:9e:
42:a7:6a:0c:f9:be:71:db:2b:39:24:f8:3c:30:d5:41:2d:6f:
73:fd:04:1b:99:16:da:a2:ed:c3:4d:1f:c3:7b:76:65:3e:0e:
a0:77:3b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:02 2025 by rpki-client