Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/E17464EAE60511EFA84D8E82C4F9AE02.roa
File: E17464EAE60511EFA84D8E82C4F9AE02.roa (raw, json)
Hash identifier: eIgq6xKUC3WSNZ6sWHlE4Jfm6XnCdk12tmoHe6Xx8uw=
Subject key identifier: 89:EB:EA:FA:FF:89:F4:81:63:C3:8E:BF:DC:32:CB:5A:76:D8:99:AB
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0E3F
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/E17464EAE60511EFA84D8E82C4F9AE02.roa
Signing time: Mon 10 Feb 2025 12:13:51 +0000
ROA not before: Mon 10 Feb 2025 12:13:51 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 139.190.8.0/24 maxlen: 24
139.190.13.0/24 maxlen: 24
139.190.15.0/24 maxlen: 24
139.190.17.0/24 maxlen: 24
139.190.20.0/24 maxlen: 24
139.190.24.0/24 maxlen: 24
139.190.30.0/24 maxlen: 24
139.190.31.0/24 maxlen: 24
139.190.32.0/22 maxlen: 24
139.190.36.0/22 maxlen: 24
139.190.48.0/22 maxlen: 24
139.190.52.0/22 maxlen: 24
139.190.68.0/22 maxlen: 24
139.190.88.0/21 maxlen: 24
139.190.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 05:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3647 (0xe3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Feb 10 12:13:51 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67a9ed7f-a5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b0:27:0d:cb:86:6e:64:ee:22:bd:5d:de:ba:
82:9a:6d:7c:34:18:d4:c3:3a:0f:78:37:f7:d4:0a:
61:66:00:3e:7a:4f:b1:2e:ff:1c:23:f4:b8:ab:6e:
4f:27:c4:1f:c6:5a:e2:90:fe:a7:98:5d:26:0f:98:
c0:64:79:cf:31:6f:2b:13:2f:6d:c8:98:0a:dd:48:
e2:69:08:40:2e:fa:fe:0a:4a:90:be:1c:4c:9e:41:
d8:a7:64:70:04:96:7a:93:32:90:5d:63:76:ae:54:
91:ed:6a:71:c3:3c:5d:a7:80:c0:57:64:32:67:93:
1b:d8:14:c9:05:52:2a:96:37:6d:b7:dc:76:ed:3d:
35:32:3a:0f:ec:af:cc:05:7d:d7:dd:00:11:f3:18:
51:3f:4d:3a:04:6c:7f:f7:67:6f:b9:f6:ee:e7:40:
73:d9:73:ad:27:52:49:7d:ae:4d:45:b8:d5:70:3f:
7f:a6:69:e6:38:41:3c:14:aa:6b:90:47:fa:31:df:
eb:86:17:04:71:8f:5f:cc:ff:07:b5:6c:7d:0e:c1:
55:ae:10:d7:59:92:31:44:a8:79:73:82:7f:96:ec:
2f:f1:68:62:31:1f:25:be:ce:a7:55:15:93:b3:e5:
ac:60:6f:5f:33:cc:6d:b3:7b:e7:67:59:c3:5d:65:
89:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EB:EA:FA:FF:89:F4:81:63:C3:8E:BF:DC:32:CB:5A:76:D8:99:AB
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/E17464EAE60511EFA84D8E82C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.8.0/24
139.190.13.0/24
139.190.15.0/24
139.190.17.0/24
139.190.20.0/24
139.190.24.0/24
139.190.30.0-139.190.39.255
139.190.48.0/21
139.190.68.0/22
139.190.88.0/21
139.190.124.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:b4:2f:1f:c4:11:1c:78:ad:45:5c:60:b3:ef:b3:23:74:7a:
99:3b:88:c0:8e:ef:58:79:9a:47:63:5b:67:44:05:03:71:29:
2d:16:a5:f1:8a:1c:2f:8f:10:3b:5f:ea:05:4c:4d:e0:83:6b:
20:cd:c1:5b:12:ec:ee:fa:e1:33:64:80:ff:d2:3f:bd:73:72:
b8:04:4e:15:93:0e:e4:c9:12:90:9f:2d:b5:ee:13:61:88:b1:
2a:d4:9e:16:53:b0:27:43:97:be:34:16:4e:9b:b3:92:7f:10:
21:e7:ae:27:ce:5c:3e:4a:3e:58:a2:10:22:a9:e7:32:4d:f6:
04:69:b3:fa:95:2a:62:49:1f:7d:aa:27:a5:4f:5b:eb:ac:77:
f8:1a:11:40:7f:a4:ad:29:f3:32:bc:70:ee:2c:52:06:80:b8:
6e:57:fd:d9:f9:75:1f:39:8d:7f:af:f9:4a:dc:57:e5:36:c8:
c7:0d:25:e6:d7:21:04:93:f0:b4:bd:20:b8:1f:0b:9c:eb:95:
0a:b6:b2:56:01:15:ed:ed:b0:f6:24:7b:f5:64:94:61:23:21:
16:1a:a2:10:73:22:6a:44:1b:2f:d6:e3:b2:9f:f8:48:2f:1e:
4e:e6:f4:4c:6d:8d:b5:ef:26:0f:ae:cd:89:1f:36:d0:41:f7:
b1:61:34:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:06:36 2025 by rpki-client