Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/9601B70A596B11EF905E0177C4F9AE02.roa
File: 9601B70A596B11EF905E0177C4F9AE02.roa (raw, json)
Hash identifier: biCj0iT0873uJurNrO7jkWukBZEaGuBSETSEDc5lLFw=
Subject key identifier: BB:FF:8A:03:16:2E:A5:18:BE:DB:96:27:58:90:DE:EA:03:83:47:35
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0A82
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/9601B70A596B11EF905E0177C4F9AE02.roa
Signing time: Fri 16 Aug 2024 19:09:38 +0000
ROA not before: Fri 16 Aug 2024 19:09:38 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 197450
IP address blocks: 14.192.130.0/24 maxlen: 24
14.192.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 14:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2690 (0xa82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Aug 16 19:09:38 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66bfa3f1-59f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:1a:8e:b8:33:67:ea:9e:40:23:05:0c:31:
c3:b5:1c:dd:42:4b:5b:40:9c:a9:f0:49:35:87:35:
91:55:9b:4d:77:d0:39:8f:7f:76:1c:4e:5d:b1:63:
68:a5:31:5c:b2:58:54:2d:73:b2:b5:dc:39:6f:ec:
47:19:c9:c3:6b:c0:6b:0f:05:b9:5e:82:b6:5d:99:
74:cf:80:68:49:c8:4d:09:86:a6:c3:79:0f:3f:e5:
95:47:2d:30:9f:e2:cb:0d:1e:cb:bf:e3:1d:98:f7:
a8:b1:85:26:a8:ca:11:d3:f0:4e:d6:12:13:e2:61:
1f:2a:3b:e4:f1:ec:de:4e:39:67:4b:f4:e1:ae:c9:
f6:44:0d:d5:a0:6e:8b:f3:4d:1d:c1:4d:de:57:0d:
6a:df:73:55:68:db:94:f7:6a:0d:06:c5:cb:50:52:
a9:fc:bd:a1:dd:38:dc:f8:2e:34:8a:d8:8a:3c:8a:
95:2e:0b:b2:87:a8:3c:56:81:62:d4:e9:d4:4a:83:
66:63:14:e8:9e:3c:dc:e1:73:15:2f:9e:72:d2:dc:
1e:c6:9a:41:1c:10:23:cd:97:5b:13:5a:22:89:ae:
c6:bf:0a:65:d0:f2:bc:78:f5:ff:1f:f3:ca:90:cc:
b2:0d:01:50:e3:75:a4:ba:4a:60:94:47:46:5f:22:
dc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FF:8A:03:16:2E:A5:18:BE:DB:96:27:58:90:DE:EA:03:83:47:35
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/9601B70A596B11EF905E0177C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.130.0/24
14.192.135.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:78:42:fd:cb:04:96:db:3c:37:f5:66:d1:2b:c4:bc:ce:c4:
84:60:9c:a4:a1:5f:8d:b6:ca:2e:81:95:9c:de:ae:91:b6:88:
61:de:30:aa:b1:11:21:7d:4b:cd:3a:6d:3e:6d:f4:95:ff:9e:
be:ee:e1:c3:7d:0e:df:c2:55:7b:32:c2:c6:20:1c:29:49:f5:
0d:d1:f8:76:7b:18:01:f9:24:c8:d4:4a:1f:20:fa:83:ff:41:
0a:5c:11:18:37:6a:fa:3d:dc:d7:37:d8:58:4b:00:24:dd:44:
77:a1:c7:39:2d:c2:9d:d0:11:a3:b2:78:f3:3a:79:f0:75:c7:
67:f9:64:9f:7b:f6:e6:ed:63:14:35:2f:2a:1e:97:62:33:72:
33:a5:ae:3c:66:90:40:75:8f:d5:76:71:77:c3:8c:af:5d:8c:
25:db:5a:b6:11:bb:d0:5a:a4:eb:fc:74:64:01:4b:d4:01:aa:
4f:f8:c3:5d:c3:97:f8:fd:e7:50:9c:01:68:2a:3f:5b:9b:42:
e2:74:d5:88:e7:44:35:82:61:d8:2c:25:87:1b:e1:4b:c8:f6:
1f:1c:52:ba:5d:a8:85:90:7d:ba:7e:e2:c8:d2:ef:a1:87:a0:
93:b6:73:87:9d:87:21:34:69:99:13:43:c5:af:f4:2f:8a:f1:
38:59:59:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:02 2025 by rpki-client