Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/557923D4A57111EE8495A92EC4F9AE02.roa
File: 557923D4A57111EE8495A92EC4F9AE02.roa (raw, json)
Hash identifier: HF9cb3JrJn6EmzT4zDUVGE9rBJcZsKteuLyh6Za+RWc=
Subject key identifier: 29:F6:EF:0E:B3:23:2D:01:B2:52:29:45:B4:61:32:21:34:DC:FD:C7
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 096F
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/557923D4A57111EE8495A92EC4F9AE02.roa
Signing time: Thu 28 Dec 2023 11:07:48 +0000
ROA not before: Thu 28 Dec 2023 11:07:48 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 139.190.4.0/22 maxlen: 22
139.190.48.0/22 maxlen: 24
139.190.96.0/22 maxlen: 24
139.190.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jan 2024 15:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2415 (0x96f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Dec 28 11:07:48 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=658d5704-c65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:26:67:48:79:bb:08:2c:05:dc:e5:98:23:bc:
40:e2:d9:30:6a:37:3f:20:53:98:e3:3b:2a:83:de:
75:b7:ae:e0:13:39:96:51:8c:00:ef:bb:e0:b5:44:
f6:f8:df:38:3c:b3:9c:30:65:e6:e0:af:5d:60:ab:
e4:99:cf:9a:d0:8e:ca:6b:0c:17:6c:76:6a:f7:bd:
6f:2e:d5:7a:ed:8d:15:a1:56:88:a5:fb:68:a7:69:
bc:db:0b:bc:39:6c:f7:e6:08:2c:a7:c7:64:75:1b:
dd:d1:7b:33:1a:91:63:c0:e8:66:2f:e8:c1:fd:bd:
6f:0d:76:e8:c8:86:f8:30:f9:0b:3b:7d:6f:08:7b:
38:88:34:aa:25:40:cf:68:8e:94:75:1f:27:d7:5c:
46:42:ae:84:7e:16:f2:81:4c:aa:7d:f7:62:12:18:
48:5a:24:6f:b0:bc:2e:72:c8:49:be:68:65:f3:17:
87:0b:99:39:60:b8:ac:df:b7:50:44:90:49:b2:14:
26:04:f1:c4:45:c2:45:a2:a9:70:0a:0d:c5:7f:fc:
f7:c9:5f:ce:05:99:cc:67:19:72:dc:e9:1e:bd:02:
b3:81:e4:1f:9a:da:4a:98:0d:8e:db:b0:d7:cb:33:
23:22:8c:63:8d:92:06:f6:06:03:1a:56:fd:7b:90:
0b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F6:EF:0E:B3:23:2D:01:B2:52:29:45:B4:61:32:21:34:DC:FD:C7
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/557923D4A57111EE8495A92EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.4.0/22
139.190.48.0/22
139.190.96.0/22
139.190.116.0/22
Signature Algorithm: sha256WithRSAEncryption
15:5b:88:03:07:6b:df:01:af:10:4f:93:9c:f6:ef:a6:07:6a:
bf:48:b3:be:3d:12:7a:c8:2e:ba:8a:0a:7c:96:b4:de:a1:29:
36:ee:34:fe:94:b7:a2:ba:a3:56:24:d2:45:08:3d:4c:df:d5:
4e:92:00:41:3b:cb:6a:2a:92:54:d8:6b:6b:db:eb:a8:ad:c9:
c9:78:99:49:b7:7f:af:dd:df:9b:24:a2:ff:a6:71:76:ce:39:
92:99:59:08:c9:6d:2f:bd:54:e0:e7:90:55:25:bc:ed:bf:c4:
83:f1:3a:c3:77:6f:27:82:30:bf:c2:b6:ec:ec:d8:f0:fa:6f:
a2:90:0e:e2:77:4b:33:2b:22:d1:7e:a8:c6:7c:b2:61:cd:fe:
17:35:ba:de:20:48:81:c2:b8:c3:61:a4:d3:b0:3c:3c:bc:78:
14:66:dd:33:17:63:ad:eb:cf:8a:c6:8f:41:98:dc:8e:30:75:
70:55:ff:d5:28:47:1f:b5:b4:3e:b8:0b:d8:56:6e:82:f3:32:
74:33:2f:01:3a:f5:2d:7b:83:8a:46:3d:5c:98:c5:95:de:38:
e0:b7:4c:0b:32:36:8c:7e:db:e0:d7:78:04:ba:0a:ce:e0:60:
02:8f:03:d0:a9:9b:2c:db:2c:01:55:6f:d6:11:09:16:09:1e:
4d:eb:1f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 7 18:24:06 2024 by rpki-client on console-ams.rpki-client.org