Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/C64915425B9C11EFB8B48C45C4F9AE02.roa
File: C64915425B9C11EFB8B48C45C4F9AE02.roa (raw, json)
Hash identifier: 3jJ6CxJpV3awShJsd3KT4jIkxbX2V2UsFo63fHP86TM=
Subject key identifier: 65:0B:C0:57:58:EF:2F:E8:67:F0:3C:C5:90:8A:60:52:90:5E:42:35
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0A7F
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/C64915425B9C11EFB8B48C45C4F9AE02.roa
Signing time: Fri 16 Aug 2024 06:57:17 +0000
ROA not before: Fri 16 Aug 2024 06:57:17 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 133933
IP address blocks: 14.192.129.0/24 maxlen: 24
14.192.145.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.133.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 14:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2687 (0xa7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Aug 16 06:57:17 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66bef84d-584c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:78:1b:90:92:a3:77:85:66:40:bb:56:14:9f:
6a:0a:b9:69:c7:22:5a:3b:b3:6c:d8:40:06:6b:6c:
1c:91:f1:05:3b:41:d0:a0:24:86:49:75:cd:47:36:
43:e7:0a:c2:14:e7:98:c6:40:0f:52:41:17:70:f5:
17:d5:f5:8a:8b:29:8a:ab:d5:6f:51:dc:2f:c9:1a:
02:7c:c2:c2:1d:a7:53:6c:eb:1b:4d:19:a0:52:ce:
48:fd:9d:1d:15:52:02:b9:9a:bd:d6:e1:8e:95:a1:
07:06:9b:c0:8e:e5:82:02:fa:23:07:19:57:17:4a:
74:ae:cd:5b:69:0f:c6:67:ea:b0:df:a3:07:1e:bf:
f0:2f:3a:0c:45:a1:28:40:fa:19:ed:a1:d2:3b:6b:
cd:5e:3b:41:f2:f7:64:ef:15:56:d0:26:d7:f8:34:
92:b4:26:20:e3:64:0a:96:9f:fe:3c:62:b2:6b:aa:
8b:d8:3c:55:bf:32:bb:a7:ce:37:5f:a4:a6:8b:35:
9c:7b:33:c0:80:2c:f5:46:41:3c:50:b0:0e:79:2c:
7f:db:a1:a6:0a:d5:ec:7f:be:f8:cd:8f:48:ae:9b:
73:19:b9:d6:1d:26:54:90:bf:3d:50:0f:5c:90:72:
41:29:c4:d6:3a:d6:55:53:f1:ce:9d:8c:e4:d8:23:
c8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0B:C0:57:58:EF:2F:E8:67:F0:3C:C5:90:8A:60:52:90:5E:42:35
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/C64915425B9C11EFB8B48C45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.129.0/24
14.192.145.0/24
43.247.120.0/22
103.20.133.0-103.20.135.255
Signature Algorithm: sha256WithRSAEncryption
29:11:1b:7f:eb:fe:3e:51:6e:67:09:3e:b4:5b:ea:80:3d:ae:
1e:90:22:3f:c8:fe:a2:5a:4f:65:1b:9f:96:f1:62:7d:4e:17:
ad:43:62:d5:a6:b8:59:47:54:bb:e1:bd:47:e6:a9:de:db:97:
5f:b2:0c:12:31:72:a5:31:01:17:32:00:e2:1d:b0:e4:aa:11:
b5:50:4f:37:fc:39:a4:e0:37:0c:7d:53:22:84:1e:03:e1:53:
b1:63:b4:ec:79:09:7e:ab:89:93:e1:c7:74:29:78:59:78:c2:
84:5e:98:3d:f2:1d:5d:8e:da:d9:aa:6c:97:6c:c0:8f:22:98:
4f:8a:dd:a1:d1:9a:40:f7:77:50:14:88:15:6d:57:cf:b6:2f:
8b:5c:de:a7:9f:6e:65:8c:80:1d:a6:3a:73:ff:66:55:65:d2:
57:f0:87:eb:45:8b:52:ef:cd:64:45:ed:30:bb:ab:e5:74:a2:
46:4f:0f:3a:e2:5d:29:71:52:b9:ac:9b:32:3e:21:22:41:75:
d4:ec:27:76:37:c1:0e:9f:13:1b:16:b0:6e:52:04:a5:d6:13:
de:4b:5a:75:d4:89:43:c6:03:ae:69:0c:5c:ae:fc:46:15:ad:
5c:e9:ad:c6:e8:40:05:95:b8:51:1c:af:8e:d3:d1:5b:87:dc:
26:cd:2c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:13 2025 by rpki-client