Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/0F6B0A4896B511EF83B6457BC4F9AE02.roa
File: 0F6B0A4896B511EF83B6457BC4F9AE02.roa (raw, json)
Hash identifier: p0VmCG/czKvfwFxblaejghmTf11kFy44qvxBkNZQ+SM=
Subject key identifier: D1:C0:63:38:45:F6:5F:2B:69:D4:C3:52:FD:14:91:6F:BE:4D:93:0F
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0B79
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/0F6B0A4896B511EF83B6457BC4F9AE02.roa
Signing time: Wed 30 Oct 2024 11:49:46 +0000
ROA not before: Wed 30 Oct 2024 11:49:46 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.4.0/24 maxlen: 24
139.190.5.0/24 maxlen: 24
139.190.6.0/24 maxlen: 24
139.190.7.0/24 maxlen: 24
139.190.8.0/22 maxlen: 24
139.190.12.0/22 maxlen: 24
139.190.16.0/22 maxlen: 24
139.190.20.0/22 maxlen: 24
139.190.24.0/22 maxlen: 24
139.190.28.0/22 maxlen: 22
139.190.36.0/22 maxlen: 24
139.190.40.0/22 maxlen: 24
139.190.48.0/22 maxlen: 24
139.190.60.0/22 maxlen: 24
139.190.100.0/22 maxlen: 24
139.190.104.0/22 maxlen: 24
139.190.108.0/22 maxlen: 24
139.190.112.0/22 maxlen: 24
139.190.116.0/22 maxlen: 24
139.190.120.0/22 maxlen: 24
139.190.124.0/22 maxlen: 24
139.190.235.0/24 maxlen: 24
139.190.238.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 11:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2937 (0xb79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Oct 30 11:49:46 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67221d5a-f590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:41:ed:55:ad:4e:bb:fd:dd:45:5d:66:4e:
0d:44:7a:84:4c:d4:eb:6d:30:a2:40:29:a7:6b:9d:
cf:d4:91:63:24:50:b2:33:71:a1:99:b7:7b:8c:18:
05:cd:87:0c:55:94:57:fc:f3:66:76:f0:63:e3:92:
a6:c7:b7:11:3e:e6:09:5c:cb:b7:9e:58:5b:5e:d0:
a4:12:2b:15:30:fc:3e:03:e6:80:62:98:47:d6:42:
f5:96:6f:81:d8:a8:81:e0:d6:d6:65:4b:54:8a:5b:
4e:96:73:a1:f7:2c:3c:8d:49:39:3f:c4:ae:09:a0:
75:53:4b:b0:08:b4:8b:11:c1:45:34:9b:f9:d6:8b:
19:23:79:01:1f:f4:e7:c3:e3:90:a3:3b:74:7d:bd:
41:92:66:2e:38:ec:fd:29:1d:b2:76:d7:4b:b6:14:
3e:d3:58:62:c9:95:09:77:26:62:56:12:f9:be:7e:
84:22:b9:86:4c:7b:b3:b0:cf:6b:68:de:c9:b5:cd:
b2:df:8c:38:0b:b2:f8:b8:13:8a:20:ba:4d:59:7c:
bd:92:e9:fb:3b:5f:33:d5:4b:6c:f4:97:29:96:f2:
87:c0:8f:e2:9a:3d:9d:00:0d:1a:1e:0e:b5:df:dc:
18:96:ce:21:0b:60:fb:54:2f:82:5c:f7:5b:be:7e:
b1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C0:63:38:45:F6:5F:2B:69:D4:C3:52:FD:14:91:6F:BE:4D:93:0F
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/0F6B0A4896B511EF83B6457BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.4.0-139.190.31.255
139.190.36.0-139.190.43.255
139.190.48.0/22
139.190.60.0/22
139.190.100.0-139.190.127.255
139.190.235.0/24
139.190.238.0/23
Signature Algorithm: sha256WithRSAEncryption
70:c4:27:75:ed:6e:e3:0b:a2:57:c4:6e:4b:81:fb:a7:9a:a2:
fa:37:e2:6c:09:70:c3:65:07:92:43:bb:56:26:4f:49:f6:f3:
c7:0c:a0:5f:32:3a:71:8e:6c:65:53:16:f8:55:c9:95:61:90:
0d:6c:5c:eb:15:3c:a4:93:47:03:86:c3:04:52:b4:51:27:4a:
cd:4f:38:36:a1:96:e6:de:2a:a0:4f:0b:55:5f:fd:3d:b7:fe:
88:84:96:1d:5f:43:13:6e:5f:88:39:f0:3a:ba:d5:24:d0:2a:
7b:61:90:11:1b:02:e1:0e:4d:7e:db:88:8a:a5:48:35:6e:7e:
3f:65:da:c7:e7:08:ae:bd:71:71:61:6c:ef:82:1e:bc:6c:f7:
8d:af:26:f7:09:e5:d3:45:11:e6:51:c0:2b:73:ed:16:d5:39:
95:86:c5:4b:0f:d5:bb:40:fe:d8:2f:e9:ff:06:87:3c:d6:21:
f1:d7:6c:d5:cf:5f:fe:c7:91:db:f4:1c:2a:b7:49:51:de:07:
f8:fe:45:fd:49:84:26:c9:cf:a5:f1:cc:e2:48:12:6f:3c:bb:
a5:ae:fc:02:6e:8c:f2:b3:12:53:e2:5f:fd:d8:3f:44:19:75:
8f:4c:05:c3:9c:53:79:d0:3f:cd:25:7d:3d:09:8b:ef:c6:a1:
80:11:34:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:26 2025 by rpki-client