Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/A104214A3A3211EFB088706CC4F9AE02.roa
File: A104214A3A3211EFB088706CC4F9AE02.roa (raw, json)
Hash identifier: nqKeMwEI7seHprxm2W0UP8AGclrHKIQIGYng1y57vnM=
Subject key identifier: 10:C7:57:7B:9A:44:BF:08:80:10:26:F2:32:76:49:34:41:A8:E0:4D
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 09F9
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/A104214A3A3211EFB088706CC4F9AE02.roa
Signing time: Fri 05 Jul 2024 11:25:18 +0000
ROA not before: Fri 05 Jul 2024 11:25:18 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 55154
IP address blocks: 14.192.134.0/24 maxlen: 24
14.192.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 11:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2553 (0x9f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Jul 5 11:25:18 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6687d81e-fbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a2:a6:4f:a7:1c:18:0f:c1:35:f8:fd:b2:90:
c4:ae:32:8b:89:8c:7a:f7:37:38:bc:d7:02:1e:7e:
73:81:92:06:2d:24:5e:1f:49:1c:27:ac:64:d3:74:
fa:e3:28:a2:16:30:c0:95:53:62:8e:6b:6e:8f:41:
ce:d7:66:03:15:d0:c5:51:43:72:ea:93:a6:55:ca:
fa:fe:45:64:b7:b6:f4:87:5e:0a:60:0d:fd:8f:1e:
03:2c:a0:82:3d:90:9a:15:e3:58:e4:89:67:93:c3:
90:0a:55:ed:f6:33:48:45:ef:4d:88:c5:8d:42:1b:
cb:65:65:65:90:03:68:11:88:08:22:75:84:fb:57:
d2:ae:cf:c9:0e:c6:29:84:a7:ed:a3:7f:61:26:7a:
8c:49:ca:45:3e:e2:bd:84:56:de:91:84:d3:12:94:
87:87:0b:63:db:18:b7:54:77:6d:06:ac:4e:dc:ca:
93:42:ad:2a:21:30:c2:3a:1a:52:51:cf:66:a4:58:
4a:2f:fa:86:8d:08:2c:db:6a:5f:46:2d:bd:ee:a4:
66:f2:c4:8a:3b:89:2c:c5:bc:79:33:2c:05:83:63:
7d:d9:fc:36:a1:9a:fa:ac:5c:61:f2:14:e1:2b:b1:
91:76:36:b5:22:4d:c3:94:b2:05:ef:3c:e9:d0:3c:
a0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C7:57:7B:9A:44:BF:08:80:10:26:F2:32:76:49:34:41:A8:E0:4D
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/A104214A3A3211EFB088706CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.134.0/24
14.192.139.0/24
Signature Algorithm: sha256WithRSAEncryption
57:26:d3:65:85:a0:cf:7f:54:50:f9:ee:50:bb:7b:88:d5:de:
48:55:7a:1d:9f:ef:4b:aa:7c:b3:eb:ce:21:77:e8:c2:dd:56:
2e:43:ea:1e:07:f4:31:25:c7:ca:07:89:ac:80:90:7d:6a:12:
9a:b4:2b:99:6b:c5:25:22:a4:c6:96:ac:31:55:07:7c:61:83:
71:3b:f1:ec:e8:21:49:02:3d:d0:a1:c3:f4:54:39:8a:4a:fe:
b6:04:0f:21:06:0a:3a:6c:36:50:01:7f:63:cd:5b:32:da:b6:
9e:6d:48:e6:00:78:40:3f:ef:09:56:d7:72:71:ec:2e:1b:5a:
cb:f6:8b:13:98:33:13:ea:56:59:4f:40:40:4f:cf:1b:54:f0:
31:70:ac:84:fd:1b:68:2c:fc:7c:6f:21:4d:96:33:7d:4d:1c:
5d:a7:4c:43:b8:79:89:10:da:e6:b0:13:b9:a8:2c:bf:52:ac:
72:f0:46:6e:45:29:58:8f:8c:22:f8:27:b4:40:f1:e0:01:74:
7f:7f:e0:f9:df:b6:ab:83:2d:46:da:01:df:1c:39:e5:50:cc:
2d:14:11:85:6d:51:d5:c6:13:d9:ab:15:f6:20:41:97:65:d5:
1d:47:db:a6:03:3b:bc:7c:31:1a:54:a3:6c:21:42:4d:fe:73:
23:17:6a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:51 2025 by rpki-client