Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/0F8D0B3A3F7411EB86C22F20C4F9AE02.roa
File: 0F8D0B3A3F7411EB86C22F20C4F9AE02.roa (raw, json)
Hash identifier: 5uwBTggBKuxvzF8pYSoUhwPFIADolsg6AcjGwWuTwxQ=
Subject key identifier: E0:07:5F:89:F5:1B:AD:80:48:A8:CF:57:37:21:0D:CE:5C:6D:20:43
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0885
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/0F8D0B3A3F7411EB86C22F20C4F9AE02.roa
Signing time: Wed 24 May 2023 23:24:53 +0000
ROA not before: Wed 24 May 2023 23:24:53 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 136030
IP address blocks: 139.190.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 06:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2181 (0x885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: May 24 23:24:53 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646e9cc5-7363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4b:ec:ae:a9:93:97:22:22:0a:05:68:9a:21:
16:52:cc:6e:5a:38:d2:c8:ec:86:95:a1:d7:5a:93:
90:4a:a0:24:59:4e:4e:99:60:f7:9b:37:3c:90:c9:
be:87:ed:23:34:fa:c4:cf:75:19:45:21:f2:3e:1d:
9c:28:fe:2f:cc:0c:55:8d:a4:cd:1a:c6:33:97:9b:
87:6e:d9:b0:ea:96:57:e6:fe:1b:e3:d1:17:cf:ba:
0a:16:c3:6d:6c:96:97:c1:dd:cd:54:17:92:69:49:
20:d2:fb:56:d6:df:b6:00:b9:85:0f:18:45:e8:54:
b7:31:63:15:62:c2:0e:bd:1a:6d:03:a4:40:e8:b8:
d3:45:b4:7a:37:56:84:45:ee:92:6e:55:7d:91:ce:
c6:76:6a:0a:98:4d:ba:6a:10:ba:39:0c:8c:3e:f4:
14:df:aa:8a:e7:13:56:ad:14:cf:42:fb:75:af:2a:
1e:21:ad:b0:a7:2e:d9:04:e2:1c:c7:dd:be:5c:ea:
09:30:01:c4:97:b9:78:a1:d9:5d:24:5d:72:41:bc:
77:73:07:aa:74:dc:a4:ef:69:98:8a:3e:15:6b:93:
57:8b:ef:6d:89:e6:5a:96:1f:42:2e:3e:c1:f3:6f:
d5:f9:22:19:6b:f0:49:e8:32:e1:a6:a0:ab:b6:d1:
20:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:07:5F:89:F5:1B:AD:80:48:A8:CF:57:37:21:0D:CE:5C:6D:20:43
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/0F8D0B3A3F7411EB86C22F20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.235.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:dd:f7:a8:f1:31:9c:27:19:93:99:a4:37:23:8e:9e:7b:78:
d2:2d:fb:e4:f5:76:65:e4:32:64:03:35:4d:d9:e6:e4:6e:7c:
2e:79:c8:e7:4c:50:ae:33:cb:f2:7d:fd:eb:86:3b:e0:ad:d2:
22:28:4e:80:da:72:e3:ec:22:ec:91:01:0c:a9:9e:c5:ea:04:
4f:88:ac:3e:3f:8c:c2:94:18:fc:5c:20:57:dc:06:5c:dd:e8:
72:64:5c:2a:11:d4:1d:d7:8c:02:c4:79:d5:96:b0:83:ff:f0:
83:54:98:f8:08:54:d2:f7:46:e4:14:4c:b7:83:1f:49:48:12:
d8:1d:84:60:9a:dd:8a:5b:79:9e:d6:db:b8:38:af:84:6d:c4:
a8:26:b3:85:54:77:36:5b:38:2d:ae:03:d6:01:a6:ab:d5:c1:
1d:01:ba:b9:20:2c:06:b1:1f:6a:1d:40:f3:3a:7e:88:9f:05:
ef:3f:8c:eb:54:b6:94:d9:cf:18:49:f4:69:8a:a9:b5:81:45:
e7:77:fa:b5:4e:70:f5:85:07:08:3a:fb:72:f4:32:9b:c5:23:
81:05:64:39:bb:27:3d:5b:d0:1c:bf:47:95:cf:f1:ee:28:32:
ba:63:12:5f:b3:d5:af:38:05:4f:85:1b:2b:5a:f2:fc:dc:d5:
bd:98:2f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 09:10:54 2024 by rpki-client on console-ams.rpki-client.org