Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/72318294180011EF96EFB068C4F9AE02.roa
File: 72318294180011EF96EFB068C4F9AE02.roa (raw, json)
Hash identifier: r8SdkNWgkdHNdbFnt/KWYnRrA9vNShrfG4gw6NBhlmQ=
Subject key identifier: B3:B9:75:DC:DE:76:06:07:6F:2F:55:92:37:5D:A9:B1:40:01:D8:E1
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0AAB
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/72318294180011EF96EFB068C4F9AE02.roa
Signing time: Fri 24 May 2024 22:32:13 +0000
ROA not before: Fri 24 May 2024 22:32:13 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 139.190.52.0/22 maxlen: 22
139.190.56.0/22 maxlen: 22
139.190.100.0/22 maxlen: 22
139.190.112.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 04 Sep 2024 05:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2731 (0xaab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: May 24 22:32:13 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6651156d-6052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:00:f2:13:b0:d4:41:51:bf:d1:5c:5c:d0:40:
b6:e3:bc:93:7b:ad:c8:fd:ed:58:85:19:ed:b6:37:
35:3f:ce:56:84:21:9c:d9:f3:0f:df:0d:73:4a:30:
35:b5:9c:19:d1:32:f0:26:b7:b6:a4:3e:03:a1:94:
d7:47:8b:29:0e:3f:62:90:4c:31:3b:0b:93:9f:89:
e9:99:ed:51:c6:53:d2:9e:74:f7:6e:d3:a0:31:ca:
04:97:3b:b9:fa:72:74:89:ef:a7:b9:1c:91:b7:47:
dd:4d:de:44:80:dc:10:5e:cc:40:58:a0:a4:21:bd:
e7:cf:63:6a:d9:af:6e:08:d9:01:7e:d4:7f:aa:92:
97:69:77:30:21:11:ac:2f:85:65:d5:17:72:8d:1b:
da:b5:65:5f:a5:13:44:10:43:6e:d5:34:db:a4:48:
15:68:aa:e0:dc:6a:e3:0b:22:75:8e:b6:fb:81:7f:
5a:62:0f:fd:84:99:91:96:6f:4d:c1:c7:68:97:06:
f6:ef:fc:f0:9a:28:a7:c9:80:ca:bf:f2:fd:d2:52:
e9:7c:03:e4:ec:73:16:20:8b:86:70:42:3a:ed:52:
cd:23:95:f0:e9:cf:92:eb:29:9d:73:58:28:fb:b9:
2f:b9:40:bf:3c:9e:1c:6e:b4:30:86:bb:3d:c5:ca:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B9:75:DC:DE:76:06:07:6F:2F:55:92:37:5D:A9:B1:40:01:D8:E1
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/72318294180011EF96EFB068C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.52.0-139.190.59.255
139.190.100.0/22
139.190.112.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:11:bc:c2:80:e7:a3:1a:35:06:a8:db:21:a3:71:39:4d:1d:
b4:55:51:00:a9:55:e1:f1:cc:88:11:2f:39:c8:4e:f8:bd:fc:
39:ba:ab:38:94:8a:7b:39:8a:b7:2f:4d:9c:d5:16:4e:3d:11:
17:97:70:15:29:84:d6:e8:a7:f5:5e:3d:28:98:e5:4d:3e:16:
8b:be:c2:96:6f:da:ad:69:9b:04:d7:be:53:f1:98:38:8e:94:
dc:a4:33:ab:30:77:68:3c:e7:21:ba:25:84:5a:eb:63:8c:c5:
48:a6:e2:84:cc:56:c8:d8:9c:41:1e:b5:c6:ac:32:74:f3:ec:
40:76:42:58:fb:a5:af:5a:0f:54:37:90:a2:29:96:75:49:af:
aa:7c:92:ce:04:76:cb:dc:f4:2b:89:7b:22:fb:e8:e4:51:b3:
67:15:c1:b4:d2:39:a2:e3:d5:0e:e4:ad:65:85:23:85:a8:f4:
b8:6a:1d:1a:c3:62:29:8e:40:9b:b3:30:c0:71:a8:d0:46:e3:
46:b4:7e:e0:3d:a2:1a:16:70:81:60:be:e8:17:c0:69:78:97:
f6:1c:14:04:3e:dc:15:e3:0c:2f:13:1c:c3:64:92:da:bc:25:
20:93:86:b1:65:05:43:f2:10:93:24:20:b5:0d:46:54:26:16:
1f:e9:07:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:16:21 2025 by rpki-client