Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/70EB57466A7D11EF9AC43B50C4F9AE02.roa
File: 70EB57466A7D11EF9AC43B50C4F9AE02.roa (raw, json)
Hash identifier: Nc/jr0xvJnDdqv9HhHv8ELzBzVJ9sbrBZH+9QBiaAnU=
Subject key identifier: 0F:7F:E0:D0:35:D5:02:4E:F8:AC:69:02:A6:B1:68:7C:2B:7F:2D:02
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0B12
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/70EB57466A7D11EF9AC43B50C4F9AE02.roa
Signing time: Wed 04 Sep 2024 05:20:47 +0000
ROA not before: Wed 04 Sep 2024 05:20:47 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 139.190.52.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 04 Sep 2024 05:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2834 (0xb12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Sep 4 05:20:47 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66d7ee2f-0353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bd:46:f2:b8:4e:ab:c0:aa:cb:5e:28:15:7c:
9e:3f:a0:ee:07:8b:6f:50:cd:f4:8f:6f:3a:9b:98:
1d:e4:e1:74:a2:e3:dd:a2:42:81:62:96:da:98:d6:
19:27:fd:58:4c:2f:03:18:e0:fd:e4:30:b6:5b:06:
03:30:69:03:38:71:bb:cf:0f:17:9b:98:6a:86:29:
fc:4c:21:80:66:62:0f:e6:8c:f9:7a:19:e9:ea:11:
44:ae:35:ac:d5:c2:5a:74:2c:3b:1a:5d:09:5d:97:
76:60:45:5c:89:67:8c:2b:91:f9:72:62:6f:39:5f:
39:46:62:32:5f:7d:9a:55:53:64:5a:b4:23:f6:d2:
ca:8e:bf:89:2d:8a:19:78:19:ce:a4:62:85:22:50:
10:26:21:2f:1f:26:30:b9:34:8a:c4:c3:70:6c:26:
fb:c2:6e:2b:7f:5f:eb:87:a3:d6:46:33:92:2e:3f:
31:00:be:6c:b7:97:12:17:dc:9c:82:24:92:a8:34:
f2:32:4b:fc:ab:20:fc:4c:d2:be:e6:da:6d:19:85:
16:d3:c9:61:90:f9:fe:4f:42:3a:39:99:29:ac:74:
70:85:0f:2c:76:b1:d6:bb:49:9f:c8:95:bc:bc:eb:
b0:28:97:aa:08:cc:85:e1:0d:13:35:c0:71:56:38:
bf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7F:E0:D0:35:D5:02:4E:F8:AC:69:02:A6:B1:68:7C:2B:7F:2D:02
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/70EB57466A7D11EF9AC43B50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.52.0/22
Signature Algorithm: sha256WithRSAEncryption
62:b0:95:0d:32:d4:22:17:b8:d5:ce:a0:bc:6f:e5:21:22:87:
88:87:e3:a7:c3:21:8d:5b:01:17:9a:83:e9:39:1e:ba:28:0c:
64:b0:33:59:3f:5b:96:02:3b:ab:b3:2b:79:22:ca:cb:19:4c:
dc:b4:d1:4e:29:03:45:32:34:98:69:c6:f9:17:f8:45:47:22:
80:37:69:e3:e7:80:2f:f1:c7:3f:35:62:ee:47:7c:b3:94:33:
9c:69:47:84:f3:51:b8:8f:a1:29:ee:ad:2b:38:fd:a4:ab:5b:
98:02:6e:43:14:dd:8a:35:34:27:d1:d0:07:ba:ea:f9:60:35:
b1:3e:80:04:46:c3:00:f4:9e:13:32:65:c6:31:e3:93:bb:b3:
e1:47:39:7c:4b:3c:ff:13:3b:70:66:54:8e:db:1b:2c:06:5b:
ff:19:30:f9:3b:a0:dc:7e:5c:e6:93:da:7a:3a:3f:eb:c4:af:
c8:b3:20:5e:a0:d8:94:da:80:1d:6f:d5:97:ff:1e:e1:c2:f3:
0b:47:4b:e3:9d:61:07:05:a9:e4:c9:07:1c:74:d8:dc:19:7f:
1e:45:6c:ff:ff:e3:f7:f6:00:75:35:53:30:c0:12:c2:97:5a:
70:c8:6d:a8:07:6b:4f:21:ee:dc:b3:84:68:e1:5f:77:fc:bf:
dc:21:db:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:04:36 2025 by rpki-client