Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/0767932A96B511EF8D6E3B7BC4F9AE02.roa
File: 0767932A96B511EF8D6E3B7BC4F9AE02.roa (raw, json)
Hash identifier: gGjmA7FNCuFv6kG5/pC+JWEtWrLjwdGvAm43dJFGke0=
Subject key identifier: 54:CF:BF:A4:CD:8C:4F:D4:F6:A5:92:0C:6B:FF:6D:F3:E2:04:5A:E1
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0B7B
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/0767932A96B511EF8D6E3B7BC4F9AE02.roa
Signing time: Wed 30 Oct 2024 11:51:39 +0000
ROA not before: Wed 30 Oct 2024 11:51:39 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 139.190.0.0/19 maxlen: 24
139.190.96.0/19 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 11:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2939 (0xb7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Oct 30 11:51:39 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67221dcb-8ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:90:e0:47:17:86:b4:38:6e:63:9e:8d:11:8b:
5b:a2:24:d9:fe:45:02:7d:0f:32:17:84:bc:28:41:
7c:0a:df:ee:43:f9:83:83:c6:cd:14:18:ce:eb:af:
6c:80:ed:ce:93:5c:07:27:a6:fc:49:90:42:15:f3:
d0:3f:ec:d0:a6:d0:93:ec:1f:85:6a:48:98:f0:83:
d0:09:1e:aa:47:ef:4e:f4:7e:38:93:17:38:d9:95:
76:91:3f:82:69:75:44:68:e5:d8:16:7f:09:72:6e:
35:8e:cf:ae:3d:ed:f1:c8:29:8e:30:bc:01:77:09:
9a:a8:72:7c:8c:bd:6f:19:00:eb:b3:00:14:ed:7e:
e4:9e:0b:ea:aa:b2:e3:ce:af:b3:38:51:95:c8:f4:
da:1d:b9:c3:77:dd:e0:bc:82:4b:53:9d:ba:15:e6:
13:fd:b0:18:29:18:2c:89:98:6d:6a:91:0c:76:1d:
dc:c4:ff:30:ae:37:2c:5c:0f:1e:02:00:79:64:37:
86:2a:aa:8e:90:8b:db:30:77:e3:d6:b0:69:bd:b3:
64:b9:ff:5e:03:e5:50:7b:ae:f2:2d:89:99:d8:e9:
87:82:29:8b:a6:ee:5f:e5:69:fa:4c:5f:47:ca:cf:
85:28:65:ca:68:1b:03:42:36:24:2b:48:88:ca:a3:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CF:BF:A4:CD:8C:4F:D4:F6:A5:92:0C:6B:FF:6D:F3:E2:04:5A:E1
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/0767932A96B511EF8D6E3B7BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/19
139.190.96.0/19
Signature Algorithm: sha256WithRSAEncryption
04:4b:e0:b5:f0:8a:ee:9b:bf:28:d5:53:f0:13:61:46:09:27:
65:7f:cd:4b:dc:5a:b7:f2:12:30:c3:ae:83:7b:1e:57:a9:27:
35:87:37:1e:44:85:c9:ba:88:bc:57:2d:84:53:0b:c4:b1:1f:
36:9c:dc:62:df:43:6d:be:3f:ce:34:fb:72:2f:35:73:4d:7f:
bf:ca:5c:e0:1a:31:28:96:58:24:05:bf:95:84:ec:81:48:34:
91:f3:71:79:84:9f:48:55:9a:31:18:ac:b4:e6:78:e2:4d:f3:
db:1b:a9:de:fc:5d:ed:ce:6f:9c:4a:14:da:0f:40:ce:70:a3:
92:e2:d9:58:ef:ac:22:f2:2c:13:f7:db:31:da:8d:30:fe:75:
d4:8c:f7:cb:3c:41:eb:aa:eb:da:ea:f5:47:3b:c5:0c:be:f9:
0a:fb:51:70:b5:75:a0:9f:7c:1b:a0:ed:e8:b5:12:92:3e:65:
c1:d3:9a:b2:31:33:3b:35:5e:dd:74:37:ea:4c:e1:62:3a:8e:
02:a6:1a:97:b5:5f:d9:60:be:f7:04:85:45:e1:2b:a9:c2:6e:
56:19:d3:43:d9:ee:a0:cf:d0:1f:a3:fb:66:7b:fe:20:72:c1:
a1:32:0d:a4:91:9f:b4:84:a1:09:07:cc:6a:e9:b1:15:cf:f4:
b7:dd:3a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:54 2025 by rpki-client