Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/59459FEEAB4011EF9188F915C4F9AE02.roa
File: 59459FEEAB4011EF9188F915C4F9AE02.roa (raw, json)
Hash identifier: eWn5wQ9JRAYqqYgf4F60AdbyPawX09b6FkmtYadOm5k=
Subject key identifier: 76:EC:E3:8C:08:7D:89:31:89:E8:ED:9B:2F:18:35:D9:1A:84:1C:28
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0B92
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/59459FEEAB4011EF9188F915C4F9AE02.roa
Signing time: Mon 25 Nov 2024 15:17:13 +0000
ROA not before: Mon 25 Nov 2024 15:17:13 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 43260
IP address blocks: 14.192.130.0/24 maxlen: 24
14.192.151.0/24 maxlen: 24
14.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Dec 2024 17:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2962 (0xb92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Nov 25 15:17:13 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=674494f9-50ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0d:1b:91:f5:5b:0f:4e:8c:3f:08:e1:94:3a:
8d:fa:aa:60:31:05:ad:df:76:7d:23:89:df:ae:67:
03:cf:42:c5:a4:9f:d6:f6:44:ea:70:9d:db:aa:9b:
cd:de:69:af:1d:28:c0:46:20:ce:44:29:09:00:3a:
6e:0e:d4:2f:58:9e:e2:20:31:22:fd:03:cd:d2:0a:
d0:aa:4b:4f:4f:f5:e2:8e:b3:86:f6:3f:7b:05:db:
99:d4:db:0e:80:59:ca:fc:a9:e6:40:18:61:d1:c6:
7e:52:c0:29:36:49:35:52:cd:90:24:fc:24:91:0f:
bf:ba:18:f0:4d:67:59:73:55:8b:2b:a7:33:48:a9:
5b:4b:2d:1c:77:97:ff:20:e0:2a:52:d6:a7:8e:f3:
3e:3b:de:b4:2a:7a:f0:a0:f0:24:12:81:6c:7b:98:
d4:57:c1:03:60:65:71:9f:a2:a6:86:50:0a:d7:d8:
ea:d9:41:7b:c6:0e:a7:58:17:4f:bd:38:1e:18:82:
e6:f4:ba:c4:e0:c6:62:f4:fc:b1:eb:a3:2b:a7:3b:
b0:a0:4c:db:6b:ef:80:a3:5b:29:06:f9:d7:fe:14:
1b:34:78:f0:35:21:06:db:f4:50:7d:ae:a4:b2:40:
b5:3d:ba:a5:0f:1a:fd:4f:34:69:61:e0:f7:90:7e:
de:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EC:E3:8C:08:7D:89:31:89:E8:ED:9B:2F:18:35:D9:1A:84:1C:28
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/59459FEEAB4011EF9188F915C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.130.0/24
14.192.151.0-14.192.152.255
Signature Algorithm: sha256WithRSAEncryption
8f:a0:48:12:8b:12:0f:4f:ec:eb:02:55:66:54:74:5e:b3:1c:
08:fb:d1:7c:7c:50:b9:1a:e1:65:05:a4:d7:13:fc:7e:da:a2:
80:fb:d7:60:c7:36:f4:52:70:06:d8:35:4f:ec:5b:f9:9c:5a:
3a:66:d3:3a:cb:0c:45:12:47:3f:30:8f:c7:22:0a:1c:60:21:
2b:ce:4a:2b:ab:27:3e:29:43:81:bd:4f:4d:60:eb:6e:96:1c:
06:8d:68:ed:09:9c:91:7d:5f:f5:10:f2:fb:de:5d:bd:30:bc:
80:37:4e:d2:00:27:f1:68:6a:2d:b9:f2:eb:98:43:d1:00:56:
d4:dd:ef:8a:5e:9c:57:4f:c4:5c:2f:cd:84:46:e2:2a:e2:7d:
f2:78:23:82:1d:fb:5f:b4:fc:a4:d8:a9:53:d3:75:fc:27:1a:
c3:46:b9:fc:0b:d9:fe:1e:6a:e6:00:69:1d:ca:01:af:68:74:
5c:77:c9:06:d1:fe:1f:48:45:0c:42:62:80:4f:92:e4:bc:ad:
95:de:fb:5c:31:15:8d:7a:64:6d:1f:73:bb:19:c6:4b:c2:46:
78:7f:23:09:f3:aa:e6:06:30:98:b3:5c:2c:b2:97:5a:cc:60:
85:e8:d4:0c:78:35:a5:78:a4:31:19:ae:73:98:54:05:70:eb:
23:a3:62:9c
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICC5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjQxMTI1MTUxNzEzWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzQ0OTRmOS01MGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Q0bkfVbD06MPwjhlDqN+qpgMQWt33Z9I4nfrmcDz0LFpJ/W9kTqcJ3bqpvN
3mmvHSjARiDORCkJADpuDtQvWJ7iIDEi/QPN0grQqktPT/XijrOG9j97BduZ1NsO
gFnK/KnmQBhh0cZ+UsApNkk1Us2QJPwkkQ+/uhjwTWdZc1WLK6czSKlbSy0cd5f/
IOAqUtanjvM+O960KnrwoPAkEoFse5jUV8EDYGVxn6KmhlAK19jq2UF7xg6nWBdP
vTgeGILm9LrE4MZi9Pyx66MrpzuwoEzba++Ao1spBvnX/hQbNHjwNSEG2/RQfa6k
skC1PbqlDxr9TzRpYeD3kH7e8QIDAQABo4ICozCCAp8wHQYDVR0OBBYEFHbs44wI
fYkxiejtmy8YNdkahBwoMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvNTk0NTlGRUVB
QjQwMTFFRjkxODhGOTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E
HjAcMBoEAgABMBQDBAAOwIIwDAMEAA7AlwMEAA7AmDANBgkqhkiG9w0BAQsFAAOC
AQEAj6BIEosSD0/s6wJVZlR0XrMcCPvRfHxQuRrhZQWk1xP8ftqigPvXYMc29FJw
Btg1T+xb+ZxaOmbTOssMRRJHPzCPxyIKHGAhK85KK6snPilDgb1PTWDrbpYcBo1o
7QmckX1f9RDy+95dvTC8gDdO0gAn8WhqLbny65hD0QBW1N3vil6cV0/EXC/NhEbi
KuJ98ngjgh37X7T8pNipU9N1/Ccaw0a5/AvZ/h5q5gBpHcoBr2h0XHfJBtH+H0hF
DEJigE+S5Lytld77XDEVjXpkbR9zuxnGS8JGeH8jCfOq5gYwmLNcLLKXWsxghejU
DHg1pXikMRmuc5hUBXDrI6NinA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:11:38 2025 by rpki-client