Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/FF6782863EAB11EF84F74A14C4F9AE02.roa
File: FF6782863EAB11EF84F74A14C4F9AE02.roa (raw, json)
Hash identifier: 7EwaBp53KBNcIvHw6SQz1TTqO4ejOqU5K4UKG23eLqI=
Subject key identifier: DC:93:12:F4:52:37:C3:1F:9B:8E:46:B3:30:E5:F2:E8:93:D2:85:C4
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0A0E
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/FF6782863EAB11EF84F74A14C4F9AE02.roa
Signing time: Wed 10 Jul 2024 11:03:12 +0000
ROA not before: Wed 10 Jul 2024 11:03:12 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 55154
IP address blocks: 14.192.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 14:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2574 (0xa0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Jul 10 11:03:12 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=668e6a6f-d5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:e6:72:42:c0:26:05:ba:65:d1:71:eb:cb:
1a:40:af:25:7d:f2:1b:ac:a5:3c:da:09:6c:1b:3e:
d3:87:23:2d:e2:ef:02:9c:fd:2e:e6:00:87:56:48:
e0:51:b2:36:91:40:67:81:3b:aa:da:7e:bc:f2:96:
1f:4d:82:77:9b:a0:f2:10:de:aa:94:3e:0e:10:ce:
55:40:1e:75:c3:8e:40:fe:9d:94:c8:e1:bc:67:1a:
0d:6d:be:70:e5:fc:fb:fc:ff:90:4b:0a:88:5c:f0:
2f:cc:e0:b0:9d:80:2d:30:b9:51:f2:71:86:e0:44:
18:59:d8:9c:b6:5a:3e:7e:da:0e:47:77:42:78:2a:
1e:a7:90:87:75:fe:7f:d3:38:ce:64:9f:f7:31:c7:
d8:7a:32:db:05:09:9d:88:fd:f3:c0:f9:b9:18:17:
b1:4e:7f:d2:9f:01:4e:d8:56:3c:b6:2d:e0:6f:cf:
b3:ac:79:da:ff:cc:7f:71:f5:80:c2:57:61:7d:d2:
3c:ef:00:ae:8f:cd:07:ed:3e:fb:17:3e:07:35:8c:
5a:1a:d9:24:ca:a8:4a:d8:84:54:11:21:ec:1e:a3:
e2:45:cf:cb:0e:b2:cd:99:49:35:97:01:1b:6a:96:
6d:f5:55:87:4d:19:4b:80:04:aa:de:4b:5d:44:35:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:93:12:F4:52:37:C3:1F:9B:8E:46:B3:30:E5:F2:E8:93:D2:85:C4
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/FF6782863EAB11EF84F74A14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.134.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:9d:ae:5c:0d:ac:ae:a3:d8:70:a6:d4:8b:50:2f:7a:ee:65:
b8:ec:4a:2c:a4:0e:66:e1:e2:b6:d5:e5:d6:84:c2:58:1f:64:
f3:cd:de:3c:09:90:56:86:b4:79:b3:c2:45:44:d2:42:b5:cf:
c4:09:43:df:64:f5:32:46:ed:e9:c8:e6:b9:e5:ba:2a:53:f2:
a4:e9:4c:0b:cf:70:8d:46:48:8c:a0:fc:bb:a5:35:b3:8d:fd:
52:c3:6c:bc:cd:52:b0:a1:06:3f:41:1d:39:4a:92:0d:f0:4d:
ad:77:18:75:1d:2c:6c:df:ec:63:ea:87:3a:1e:b6:fa:58:12:
ca:02:b4:50:64:f5:84:64:df:a2:c7:6e:10:38:a3:29:c2:f1:
c4:7c:0d:b9:47:f5:fa:9c:24:bd:b1:c1:45:f1:ad:e0:24:ff:
76:89:f1:bc:fa:31:83:8a:2c:bb:46:12:c2:7f:e8:e4:e5:2e:
fe:84:af:0d:82:c5:58:f0:ed:33:3a:68:f7:25:65:b0:67:9f:
60:fe:ea:9a:be:19:36:16:63:bf:e5:fb:8d:c1:d4:04:9e:0a:
67:02:09:d4:68:67:90:9e:2e:d5:f4:a8:88:d6:91:28:a2:13:
08:93:21:5b:25:a0:f9:70:ac:2e:ac:0f:7e:cc:f7:1a:07:12:
2d:a0:56:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:04 2025 by rpki-client