Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/1BBC45CAA68511EFA4576C81C4F9AE02.roa
File: 1BBC45CAA68511EFA4576C81C4F9AE02.roa (raw, json)
Hash identifier: RB1NHQtw4jeaTLkPrByXYQ7EKQM4wGuWOEviuwDrM48=
Subject key identifier: 78:46:A1:70:25:55:5F:52:C6:99:AA:94:0C:F5:15:DF:EC:D1:58:07
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0C15
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/1BBC45CAA68511EFA4576C81C4F9AE02.roa
Signing time: Tue 19 Nov 2024 15:12:27 +0000
ROA not before: Tue 19 Nov 2024 15:12:27 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.0.0/19 maxlen: 24
139.190.32.0/20 maxlen: 20
139.190.48.0/20 maxlen: 20
139.190.56.0/22 maxlen: 22
139.190.68.0/24 maxlen: 24
139.190.69.0/24 maxlen: 24
139.190.70.0/24 maxlen: 24
139.190.71.0/24 maxlen: 24
139.190.80.0/24 maxlen: 24
139.190.81.0/24 maxlen: 24
139.190.82.0/24 maxlen: 24
139.190.83.0/24 maxlen: 24
139.190.84.0/24 maxlen: 24
139.190.85.0/24 maxlen: 24
139.190.86.0/24 maxlen: 24
139.190.87.0/24 maxlen: 24
139.190.88.0/24 maxlen: 24
139.190.89.0/24 maxlen: 24
139.190.90.0/24 maxlen: 24
139.190.91.0/24 maxlen: 24
139.190.92.0/24 maxlen: 24
139.190.93.0/24 maxlen: 24
139.190.94.0/24 maxlen: 24
139.190.95.0/24 maxlen: 24
139.190.124.0/24 maxlen: 24
139.190.125.0/24 maxlen: 24
139.190.126.0/24 maxlen: 24
139.190.127.0/24 maxlen: 24
139.190.235.0/24 maxlen: 24
139.190.238.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 07:58:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3093 (0xc15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Nov 19 15:12:27 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=673caadb-5cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:86:51:c8:4d:43:3a:b0:e2:5b:8f:fe:e8:
97:bd:e5:49:85:a0:c3:65:97:f1:28:b6:cb:50:4b:
26:bf:9c:bd:52:ee:42:e3:9d:a7:ff:6a:2f:68:db:
77:50:d5:f4:3c:fb:11:1a:0a:14:cb:e4:dc:a1:04:
b5:4f:27:ef:5f:fe:d5:76:a7:2a:7c:99:44:3a:69:
16:71:8e:62:1b:33:3b:91:f5:9d:06:77:bf:b2:e6:
ae:30:ec:60:28:9e:f1:de:8b:ab:83:74:7b:63:04:
79:ca:b3:8c:38:44:17:4c:44:3e:ce:34:f0:6d:f0:
16:22:6c:e6:15:2b:ff:55:0c:96:9b:37:74:70:ff:
8e:c5:c1:4e:81:24:2e:f3:b7:54:ac:5a:a3:11:38:
7c:58:32:ce:d6:4f:29:7d:f9:66:67:7c:9f:03:05:
22:04:54:f7:77:66:fe:43:ca:18:2b:0d:8f:65:88:
de:ab:e4:9b:7a:05:71:0b:c9:fa:bc:af:ed:d8:6e:
df:a0:d4:ba:fd:8d:84:8c:3b:1f:c5:69:e7:47:19:
72:20:bb:04:b7:b4:74:bd:04:0d:81:b9:cf:ff:5a:
f0:83:6d:f2:40:d3:53:82:59:2e:3f:f8:71:a6:e3:
c4:90:7f:7f:e0:fb:fc:5e:eb:02:b9:fe:59:67:e1:
53:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:46:A1:70:25:55:5F:52:C6:99:AA:94:0C:F5:15:DF:EC:D1:58:07
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/1BBC45CAA68511EFA4576C81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/18
139.190.68.0/22
139.190.80.0/20
139.190.124.0/22
139.190.235.0/24
139.190.238.0/23
Signature Algorithm: sha256WithRSAEncryption
30:9a:3e:ba:89:28:7a:95:d4:0f:db:1b:06:27:09:ab:68:67:
94:9f:d5:97:00:47:86:88:16:06:27:a9:cd:15:76:e0:58:8f:
02:29:b5:97:a5:28:b4:95:1e:48:cf:43:b3:24:07:9a:b7:6d:
af:21:8a:49:2f:58:6e:5c:bd:ca:1e:8e:86:84:fb:78:db:e1:
2c:c7:2b:64:8f:76:ef:9d:28:22:c0:9d:03:ab:7e:0e:11:95:
bf:df:a3:06:b9:a5:59:9b:c3:26:50:8f:1f:f2:59:b4:ff:c6:
61:d2:38:c5:b2:72:2e:ee:c3:fc:6f:13:98:bb:ca:22:1e:ee:
4f:93:09:dd:a5:25:ef:9f:d1:8c:b0:e0:50:58:64:28:32:20:
50:71:c6:8b:9a:19:1d:e7:b3:78:b6:d0:04:15:74:60:bf:76:
5e:6a:a0:b2:90:88:18:df:f6:bc:9e:41:49:41:6c:78:64:df:
ab:8c:01:43:00:90:2f:fb:03:00:0e:ea:b3:bb:ec:39:38:e1:
e2:b0:46:1c:77:88:22:5e:f0:bd:d2:50:01:b5:7f:a3:6a:3a:
5b:34:c5:b5:e1:6d:e2:ec:57:4d:4e:42:db:77:a9:fe:15:bf:
1d:a8:4b:24:54:fa:d6:64:4c:a0:e4:f1:f1:72:cd:f1:0c:96:
59:90:b4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:38 2025 by rpki-client