Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/67E5E4CC3E0E11EF9DD3BF0BC4F9AE02.roa
File: 67E5E4CC3E0E11EF9DD3BF0BC4F9AE02.roa (raw, json)
Hash identifier: 1YN662NOKChqXAmBb1DorIO4UhZ8Dnx1lIrbli6w8XY=
Subject key identifier: AF:73:51:39:2C:D5:71:97:D1:5D:2C:AB:94:46:6F:8E:38:45:D9:D6
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0A24
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/67E5E4CC3E0E11EF9DD3BF0BC4F9AE02.roa
Signing time: Fri 12 Jul 2024 21:25:01 +0000
ROA not before: Fri 12 Jul 2024 21:25:01 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 138985
IP address blocks: 14.192.139.0/24 maxlen: 24
14.192.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 10:34:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2596 (0xa24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Jul 12 21:25:01 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66919f2d-845b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:47:9a:6b:18:d6:77:78:8a:5d:32:c0:18:
25:6b:eb:1c:c4:bc:54:0d:7b:9c:40:c8:9f:78:25:
b7:5e:ef:73:d9:cb:3d:c7:0d:3b:48:e0:9d:ff:ae:
d3:d2:d8:aa:ee:19:33:66:21:33:43:39:90:62:eb:
ff:76:e7:1e:96:3e:10:05:9b:57:38:5f:a3:6b:22:
4d:e7:dd:1b:56:9a:a5:6e:8a:af:e4:bd:c4:5c:84:
4f:e0:7e:15:f4:2c:99:48:1a:4b:de:9c:a2:c7:d9:
0b:df:85:11:a4:e3:9f:a1:0c:03:f6:5d:a9:ce:4f:
c7:a7:73:81:03:b3:b2:a2:e2:14:f0:a9:22:e0:f0:
16:75:a9:e7:3c:3e:a0:d3:e5:e0:13:0e:48:54:13:
fe:a4:c0:a0:4e:45:f8:d5:96:02:30:d3:fa:ba:bd:
70:e4:15:78:62:ec:90:97:e7:4d:ed:c9:b2:fc:fe:
48:22:db:84:d9:d6:0c:ba:39:a2:5f:75:90:23:f3:
9a:15:bc:84:f6:25:19:dd:ee:f5:16:d4:7a:3a:64:
02:e7:d0:a3:9b:91:e1:2a:12:5e:65:42:ee:ea:ee:
a9:18:b4:16:de:de:2e:99:b8:be:11:7e:f8:d0:c9:
aa:ba:1a:56:98:f2:46:2b:10:11:07:f1:95:b2:34:
1b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:73:51:39:2C:D5:71:97:D1:5D:2C:AB:94:46:6F:8E:38:45:D9:D6
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/67E5E4CC3E0E11EF9DD3BF0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.139.0/24
14.192.148.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:c1:eb:99:98:8f:9f:09:c1:66:3e:49:79:f1:4d:f1:83:7f:
85:c6:1b:ad:c7:0b:ce:d0:b6:94:9f:a2:f8:23:b4:22:90:06:
68:da:92:5d:6b:da:25:92:cd:f0:a6:86:94:ee:08:34:a4:bf:
f0:d6:c6:2f:55:07:39:e2:c5:15:14:6c:24:e6:50:f8:c5:8b:
38:d2:45:70:dc:64:23:b1:a6:50:5d:1a:32:18:2b:92:42:d7:
cd:c1:dc:cc:b9:29:30:1a:35:bc:91:3e:0e:af:d1:15:51:31:
6e:91:4e:c5:21:d9:c4:5a:73:eb:fe:3d:f3:ae:8d:85:e5:1e:
3e:1a:b5:e2:92:bf:d0:f3:4f:4f:8b:52:93:f5:fd:95:10:f2:
20:c1:89:40:3c:0c:96:89:a0:38:b8:80:21:3a:9f:d3:ed:e2:
80:f8:cc:e6:b1:fc:52:74:0b:34:02:1e:04:b0:66:8f:be:54:
64:2b:8f:ab:1e:38:76:3a:1b:e4:27:c0:a6:46:93:aa:24:0f:
5b:3f:d8:45:87:34:42:5c:5e:66:8b:1d:51:20:fd:3b:5e:b8:
0f:70:cf:23:f4:81:16:44:b4:7d:ec:62:bb:fa:a4:94:24:9e:
a3:c7:20:39:fa:69:83:33:07:2c:6f:ee:75:85:22:0e:26:9b:
a6:d7:99:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:16 2025 by rpki-client