Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/2D1B7C266A7D11EF9650A64FC4F9AE02.roa
File: 2D1B7C266A7D11EF9650A64FC4F9AE02.roa (raw, json)
Hash identifier: ypyYi0/8oPc3RHYfx5L9WmWzV0eNPZZuCzh8NabIbyQ=
Subject key identifier: A7:F6:E9:EB:BD:2A:52:F6:EF:1F:89:CE:3D:AB:50:9D:2A:F2:0E:84
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0B0E
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/2D1B7C266A7D11EF9650A64FC4F9AE02.roa
Signing time: Wed 04 Sep 2024 05:18:53 +0000
ROA not before: Wed 04 Sep 2024 05:18:53 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 6079
IP address blocks: 139.190.32.0/22 maxlen: 24
139.190.44.0/22 maxlen: 22
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 05:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2830 (0xb0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Sep 4 05:18:53 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66d7edbd-e4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:35:4e:94:f8:60:d7:81:ea:11:0e:a8:ef:71:
2b:34:db:71:54:da:9f:5b:4e:8b:d9:38:d5:61:e5:
56:d6:f6:4f:d0:5c:6d:9e:a5:8c:7a:3f:0c:07:ff:
f6:fe:9e:84:af:e1:42:04:23:18:c0:64:99:76:65:
ae:58:77:a3:a9:30:aa:d2:66:1a:a6:b7:c9:0f:8a:
eb:8a:a8:5e:bc:00:82:14:2b:a2:60:a9:67:bc:f4:
3d:51:f2:2c:df:ea:03:b3:f2:a0:e9:fa:64:48:a8:
c3:ab:ee:a3:ee:a8:31:ca:6b:04:d1:e3:f5:4e:dd:
45:1b:3c:3d:d7:22:79:a4:cb:b7:43:d0:6d:4d:86:
b3:29:c5:48:50:60:59:f5:ac:9c:d7:b8:f1:83:b8:
7f:4a:c8:6e:b0:f2:7a:0b:a4:b5:68:2b:63:21:48:
74:69:aa:82:05:ec:3e:1a:f4:4b:e5:a9:a9:f6:ab:
eb:84:bd:55:93:94:0c:af:92:af:9f:bb:12:86:b4:
48:a3:96:0b:e8:3c:ec:d9:e2:dc:8e:f0:ba:6f:af:
fd:2d:4c:5c:e9:a9:ec:b6:83:c8:3b:c4:82:5b:d1:
e7:b1:74:63:64:e4:35:89:10:9c:ec:e8:95:a3:0f:
57:df:0d:6b:96:82:f0:26:34:5a:57:5b:1f:71:67:
7d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F6:E9:EB:BD:2A:52:F6:EF:1F:89:CE:3D:AB:50:9D:2A:F2:0E:84
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/2D1B7C266A7D11EF9650A64FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.32.0/22
139.190.44.0/22
139.190.239.0/24
Signature Algorithm: sha256WithRSAEncryption
24:74:cb:e1:f4:be:86:4e:4d:28:ea:ab:c4:d2:d0:22:fb:22:
e0:fb:b8:e2:93:48:04:c8:62:62:b1:57:20:ec:e4:9a:8b:9d:
ea:6d:04:6e:27:43:f6:1c:4c:17:bd:4e:8f:4f:09:61:63:d9:
ac:5a:78:28:7a:00:8e:bf:0a:e7:c7:ff:23:f5:96:8c:b6:6b:
be:50:bb:98:e8:40:e0:95:b3:6e:71:4b:b6:c5:f6:ab:e9:25:
f5:cb:ef:99:b3:82:0b:57:74:00:db:f4:3a:ee:7e:25:3e:74:
49:3f:49:7d:0f:6e:0f:e7:ae:1c:6b:6c:55:45:57:9a:68:32:
4f:7d:5d:b3:25:96:2a:46:69:cf:6f:ed:ce:aa:a8:c6:d8:c5:
62:70:83:ee:20:e7:29:9a:92:61:f6:27:ef:b3:d6:c1:21:51:
e3:b5:2d:2b:6d:2d:12:6a:2b:43:0d:19:50:1f:ab:01:e4:58:
d5:85:7a:68:86:6b:a4:f2:cf:ae:a7:1f:f7:f3:6c:9e:a5:1b:
bd:ca:e2:05:08:c5:14:b0:22:71:b1:5e:03:9d:6f:6f:0f:f5:
ce:a6:b3:a6:7d:52:fa:9e:06:9f:f9:37:87:a1:e5:c9:a9:8c:
ce:3f:d1:ae:fe:a5:2e:e1:50:bd:09:e4:1f:ad:0b:37:5b:65:
2b:78:a2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:16:19 2025 by rpki-client