Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9EE33C8806A911EEB58E6A6FC4F9AE02.roa
File: 9EE33C8806A911EEB58E6A6FC4F9AE02.roa (raw, json)
Hash identifier: 3Ynum3ENTfkl169YNcytuyV9UzJm8O8ovTGf+TAdjQk=
Subject key identifier: F7:45:4C:4F:A8:82:9E:AB:71:AB:7A:90:4B:4B:43:D1:6D:E5:62:3A
Certificate issuer: /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial: 05
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9EE33C8806A911EEB58E6A6FC4F9AE02.roa
Signing time: Fri 09 Jun 2023 10:20:08 +0000
ROA not before: Fri 09 Jun 2023 10:20:08 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 132388
IP address blocks: 139.180.9.0/24 maxlen: 24
139.180.10.0/24 maxlen: 24
139.180.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Validity
Not Before: Jun 9 10:20:08 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6482fcd7-427c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:09:11:10:4e:07:e0:90:b5:b0:bf:ef:7d:b2:
fe:17:55:fe:04:0c:21:de:1d:31:ca:e6:ab:dc:98:
d1:c3:c7:d3:3e:d7:70:0b:8b:c6:1b:0c:06:6a:6e:
67:b2:a9:a6:0a:86:0f:d2:63:aa:08:82:f4:a9:69:
9d:29:cc:44:cf:28:29:b4:4a:d7:84:ee:9e:bc:46:
76:f6:4b:67:5b:d5:ed:89:10:0a:bb:9a:38:3f:0e:
3a:b5:ce:61:70:44:2a:58:71:2e:4a:c1:9e:79:5b:
2f:38:cb:d8:d6:5b:c7:80:eb:91:64:7e:56:b8:2f:
dd:63:32:f1:2c:0d:49:8d:03:3d:b3:d5:2a:de:a0:
5d:ea:7c:05:d6:a3:30:d9:05:5d:83:4f:7b:29:97:
57:95:61:44:97:96:60:f4:9e:fd:3d:42:f7:92:b3:
aa:e2:60:4b:d1:92:c4:0e:f6:2f:9a:97:86:ff:85:
c8:ae:0d:57:1a:a3:a5:04:68:53:8c:48:50:e2:d1:
27:2b:8d:f4:46:e3:61:49:70:29:22:20:bd:e7:e8:
7c:0d:cb:ad:bd:86:ef:dd:6b:c3:7e:83:29:4c:ea:
d8:df:ff:5a:b2:9b:3f:79:4b:18:ba:07:42:ca:aa:
09:00:ed:7f:33:e8:ec:d3:82:41:51:21:72:b2:52:
81:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:45:4C:4F:A8:82:9E:AB:71:AB:7A:90:4B:4B:43:D1:6D:E5:62:3A
X509v3 Authority Key Identifier:
keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9EE33C8806A911EEB58E6A6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.180.9.0-139.180.10.255
139.180.12.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e6:9f:d6:34:c4:ea:55:7d:f5:2f:9f:67:f5:81:ed:e8:96:
3c:c1:99:33:64:0b:23:48:40:1b:26:09:7e:15:f1:92:df:77:
4a:46:d9:2d:1b:90:18:2f:c1:65:05:cf:7a:72:f1:71:f7:07:
7c:aa:db:7e:f3:cd:1e:0a:d2:62:57:5c:d0:ba:dc:d9:c0:c2:
79:82:b6:b8:82:a3:6b:cf:e6:33:12:ca:c4:42:f3:85:f0:66:
ef:32:39:7d:48:53:16:ad:90:0b:3d:6e:ee:bf:02:68:35:a1:
0a:2f:c0:cc:4b:e4:47:2a:ff:c9:04:a8:0d:3a:cd:c7:40:38:
c4:59:b4:e2:21:f3:c0:4c:9c:e3:ab:10:f5:2b:79:36:01:72:
ee:7d:02:f3:2b:f1:f8:13:89:5d:c3:f6:8c:0e:34:7c:f3:dc:
b4:03:5e:f6:75:a4:59:f9:10:6d:94:50:c5:cd:79:b3:a6:a9:
ad:ef:00:2b:a0:f3:df:f7:96:b0:d9:b8:38:2c:90:9b:75:b8:
f2:57:6d:54:93:d2:7a:f5:c2:cc:ad:67:f7:f7:5a:74:4c:d9:
19:28:f1:9e:50:d8:0c:87:5d:ef:a4:8e:93:07:4c:bd:f3:db:
8a:20:a2:51:e8:c6:d2:1b:7b:94:28:3c:5a:75:dc:84:fa:1d:
86:38:c5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-fra.rpki-client.org