Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B5A5866EB3D311EF91157414C4F9AE02.roa
File: B5A5866EB3D311EF91157414C4F9AE02.roa (raw, json)
Hash identifier: arQWrbkz/0RY4ea0hZGDYcrPMzacaYYVRrqmPRN3pLQ=
Subject key identifier: 69:0A:57:43:1A:49:70:33:D0:60:66:A1:9D:FC:E9:E5:99:66:EA:17
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0B9E
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B5A5866EB3D311EF91157414C4F9AE02.roa
Signing time: Fri 06 Dec 2024 13:12:14 +0000
ROA not before: Fri 06 Dec 2024 13:12:14 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 38713
IP address blocks: 14.192.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 20:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2974 (0xb9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Dec 6 13:12:14 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6752f82e-c157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:90:26:56:aa:85:a5:f1:01:2b:91:6a:ee:
19:31:67:3b:87:d9:f2:3a:0c:ba:26:58:a6:c5:ca:
ea:5d:52:3b:c5:f6:c3:07:77:32:75:37:6d:3e:eb:
6d:0e:21:7a:52:37:62:f1:25:66:df:17:9a:7e:8e:
99:1d:91:5d:c2:cf:11:7e:aa:60:03:69:55:19:bc:
64:03:27:29:75:e0:23:c2:9e:9c:fa:8f:54:b5:06:
dc:71:20:0f:88:6d:8a:16:b8:3e:82:52:9b:ff:8e:
31:58:d1:b4:14:93:78:cb:13:28:b4:40:5c:e2:c7:
e0:ed:69:6a:03:c6:df:ec:5a:b8:76:74:32:83:5c:
d2:af:11:1f:b7:ec:8b:60:b1:5f:82:ae:7f:f0:48:
8b:e2:2e:e3:cf:ea:3a:12:c9:ff:93:33:0f:4d:af:
47:d5:af:76:63:33:4e:a9:41:0a:53:2b:52:13:71:
41:5d:bf:e8:89:0f:0b:04:b9:66:5b:93:56:e7:6f:
07:5a:fe:3b:82:f0:50:13:2c:e6:6d:70:0a:2f:6f:
3f:2f:8e:27:c9:06:98:a4:ac:f0:40:7b:37:4a:34:
99:bb:2a:93:d2:c6:69:d1:70:a3:95:e0:d8:53:81:
14:f0:b0:7e:a2:bb:e2:a1:bb:27:c0:cd:1b:f5:3f:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0A:57:43:1A:49:70:33:D0:60:66:A1:9D:FC:E9:E5:99:66:EA:17
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B5A5866EB3D311EF91157414C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.131.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d0:d8:d9:67:c5:e7:eb:b5:31:6c:c8:a4:09:f3:da:6f:22:
25:74:96:3d:51:f9:d5:cb:70:b9:f2:32:f6:d9:ff:22:c3:61:
cb:01:68:f1:99:32:da:77:25:cc:91:45:25:74:f0:a0:4a:1b:
35:c0:5d:8e:03:a4:a1:06:84:e4:4c:01:04:1f:2b:83:a6:5f:
21:b1:b5:9d:90:31:ae:a4:0f:22:9b:ec:7c:20:38:4a:53:1a:
72:66:50:f6:c4:2c:91:3d:4d:f1:65:f8:e9:b0:df:47:33:02:
79:30:65:69:24:8b:8d:24:eb:b8:20:9e:bd:b5:93:a4:8e:de:
34:da:c6:a3:03:eb:ca:46:b9:f5:22:8f:70:06:9d:da:b7:b1:
74:ad:f4:5a:e5:b9:24:fa:5c:1e:13:cd:72:2e:3d:19:e4:4c:
8d:39:1b:02:b6:ad:d0:7f:94:51:58:a4:27:92:8c:1c:6c:f7:
a4:8c:51:8b:93:ad:86:c8:ab:f8:a0:33:4d:25:d8:6d:f4:c8:
0d:79:2d:69:c5:5f:13:79:83:a8:7b:29:14:b4:da:20:ba:f5:
24:e6:c2:77:ab:9a:79:30:6a:46:ac:c9:99:77:5e:d1:3b:76:
0a:65:cc:4a:f4:23:cc:ba:c9:73:00:8f:01:ba:0a:eb:cc:3f:
61:71:0f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:09 2025 by rpki-client