Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/99A8DF54620911EFB419D83BC4F9AE02.roa
File: 99A8DF54620911EFB419D83BC4F9AE02.roa (raw, json)
Hash identifier: 4Z/Pm6SjWH/tsnOdZmWMiGC77KoFoBc8EUH1dFCN6xU=
Subject key identifier: 77:83:58:C2:07:F5:98:76:8C:BC:44:E7:EB:EB:24:E7:1C:99:DE:57
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0A8B
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/99A8DF54620911EFB419D83BC4F9AE02.roa
Signing time: Sat 24 Aug 2024 11:11:24 +0000
ROA not before: Sat 24 Aug 2024 11:11:24 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 205220
IP address blocks: 14.192.140.0/22 maxlen: 22
14.192.154.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 27 Aug 2024 11:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2699 (0xa8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Aug 24 11:11:24 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66c9bfdc-07be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:c0:e7:22:42:78:cc:d0:ee:49:c1:6b:71:
15:49:43:7b:c3:8a:8d:38:7f:79:58:ad:5f:e0:6c:
e2:b3:a0:c5:8d:d4:cd:a7:ae:66:b1:1b:b1:12:2a:
bc:82:eb:5a:b3:9d:ad:24:ef:cb:74:44:39:74:74:
24:a7:80:19:64:5b:8c:d1:1e:57:e6:a5:8e:8c:92:
d6:07:fa:b2:25:e4:29:bd:4c:c4:f5:e2:6d:18:29:
f3:cf:b7:fc:63:a2:3a:6e:09:b3:c7:f7:86:f1:5c:
bc:44:60:08:df:92:52:85:21:21:ee:d2:b1:40:45:
60:5a:58:30:98:22:65:1d:f8:7e:d3:fa:1d:64:c1:
12:ff:e6:e0:64:c6:34:06:9b:17:27:14:8f:87:7b:
d7:78:87:24:4d:30:d5:02:04:16:fd:28:28:95:d2:
1c:d7:09:3d:46:47:45:25:61:fb:4f:75:b4:03:5d:
a2:0e:ba:48:90:db:c7:4e:bf:cc:b6:f6:1b:55:4b:
9b:aa:db:17:ce:f5:a1:f7:49:b5:e6:2a:6b:b1:ba:
28:6e:c1:d9:2a:73:be:ba:c9:b3:cb:44:14:a8:e1:
4d:3b:04:59:8d:61:98:7d:a5:db:30:3b:98:ac:bb:
bb:b8:8e:11:e8:92:ad:dd:d6:c2:24:75:54:be:38:
37:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:83:58:C2:07:F5:98:76:8C:BC:44:E7:EB:EB:24:E7:1C:99:DE:57
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/99A8DF54620911EFB419D83BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.140.0/22
14.192.154.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:b9:df:22:40:4e:f8:e5:03:51:12:8b:f6:6c:7c:c3:f9:67:
9d:ae:b3:bf:54:20:5e:77:9e:43:4e:05:6e:13:0d:a7:f0:4f:
4b:ec:7b:32:9d:60:ab:37:a4:d5:41:a4:e4:0d:fb:85:83:00:
67:1d:24:3f:ac:d6:b0:83:e8:a9:d5:54:7c:52:ec:94:29:f1:
b8:c0:cb:aa:3b:90:a4:9e:16:31:7d:6e:00:58:20:e8:5b:bc:
ec:3f:39:95:7d:1c:2d:b5:65:ae:06:71:d7:b6:cb:cd:a5:10:
a8:8e:0e:64:87:03:fc:b2:ec:01:dd:28:0c:5a:cb:38:0a:05:
bf:cb:4e:c0:05:24:60:8b:ef:28:bc:d8:55:c7:d9:3f:d7:9a:
bd:63:f8:f6:64:a2:36:ac:5e:c9:f1:bb:73:b5:f3:4d:c1:b7:
b1:51:99:1e:ed:ad:60:9e:21:8c:04:b6:b9:e5:2d:64:c4:90:
e0:20:ec:6a:1a:92:ef:3d:ef:92:eb:03:63:ce:0d:c7:0b:d8:
74:88:14:e4:d9:e7:e3:96:ad:15:1b:34:c7:e6:8d:f5:f3:5e:
f6:e4:5c:b8:5b:4a:ba:72:33:6c:54:90:a2:4d:e8:ee:1c:9c:
c0:f8:7d:98:4a:29:e4:ed:20:8e:53:94:5c:3e:1e:a1:48:c8:
2e:f3:97:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:57 2025 by rpki-client