Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/242CD1DC95EB11EC9715DA5BC4F9AE02.roa
File: 242CD1DC95EB11EC9715DA5BC4F9AE02.roa (raw, json)
Hash identifier: wxE8HCwuPK/vahY98ugrnqFPIFNDSQY464HLmptOz4w=
Subject key identifier: C9:44:FC:FE:05:6F:D0:BA:0C:22:28:0F:A3:31:0D:FA:CE:CF:40:A4
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0AA4
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/242CD1DC95EB11EC9715DA5BC4F9AE02.roa
Signing time: Fri 24 May 2024 22:32:07 +0000
ROA not before: Fri 24 May 2024 22:32:07 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 211936
IP address blocks: 139.190.224.0/21 maxlen: 24
139.190.232.0/24 maxlen: 24
139.190.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 May 2024 06:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2724 (0xaa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: May 24 22:32:07 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66511566-5de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:60:d4:a7:06:88:de:67:f6:97:bc:46:a1:42:
be:36:6a:bf:9c:b3:f9:75:e8:b2:2d:32:a9:2f:e3:
73:4a:0f:8b:1a:06:f5:dd:8c:6c:a3:bc:51:af:34:
a2:cd:23:cf:68:3a:e3:e1:3d:d9:95:04:f3:f7:f2:
90:1a:31:af:bc:ac:18:55:70:f7:67:18:4e:4e:02:
2d:c7:5c:b2:fc:76:b4:fb:60:83:f6:15:a3:56:04:
76:a8:4c:ed:42:ba:90:9a:2d:5e:10:1a:ed:39:7c:
1e:f1:80:b2:6f:51:44:97:6a:5d:9c:5b:28:7e:c6:
a9:bf:b4:9e:38:b8:9e:5d:bf:18:9a:02:ab:42:3f:
f8:b3:b7:ce:8c:fd:04:19:d1:df:bc:a9:a7:6b:eb:
eb:da:b3:5c:88:a6:99:5c:6c:21:de:2f:5e:54:2d:
47:2d:2f:e7:b2:e3:b1:39:97:52:b3:54:2c:26:51:
c1:9b:48:90:60:93:b2:63:87:3c:6e:1e:23:37:0c:
4b:bc:a8:81:25:63:74:ea:74:c1:ac:ad:2e:4b:03:
c7:2f:82:39:0b:ec:43:d3:db:fb:50:2a:2e:e0:b4:
31:c5:99:fc:4a:fb:91:59:ec:bb:4c:b3:76:81:80:
c7:85:b4:37:ab:68:be:df:f6:dc:53:64:94:b8:f7:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:44:FC:FE:05:6F:D0:BA:0C:22:28:0F:A3:31:0D:FA:CE:CF:40:A4
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/242CD1DC95EB11EC9715DA5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.224.0-139.190.233.255
Signature Algorithm: sha256WithRSAEncryption
00:b4:76:86:97:9a:08:7e:08:96:27:8d:70:29:6d:13:ff:c7:
17:9c:93:e4:4d:cc:23:cf:42:c1:7a:04:8f:48:37:fa:ea:71:
7c:fb:e7:38:cd:fb:b6:5a:a4:a3:82:b3:69:22:fe:a4:db:e7:
6c:08:f2:27:8c:5a:3b:72:69:35:71:ce:d5:94:b8:e2:6d:3e:
b2:4f:8d:24:d6:0c:e5:11:f4:73:f3:4d:71:ba:10:02:0e:7b:
dd:07:d4:39:3e:3a:16:d8:92:9f:6a:eb:f4:e1:19:bf:63:99:
a1:16:94:7c:7a:60:60:e1:24:2c:a1:e7:79:62:50:20:d5:fd:
6c:32:6a:de:12:1b:7d:b0:7f:3e:b5:f5:4d:cd:92:53:46:2f:
f0:12:ce:4a:4d:1b:d0:d2:ed:09:eb:12:43:f3:9b:59:40:d3:
db:c8:99:86:68:55:9a:0c:ad:9f:e6:fa:95:21:07:3f:a8:bf:
48:d7:e9:86:95:81:13:0f:d1:23:91:e7:45:30:ad:f7:21:78:
44:19:d9:d5:8f:2c:da:97:a4:ad:68:6e:83:91:0a:81:4b:6a:
97:8a:e8:b4:37:df:2c:1a:4c:08:e5:06:c0:29:5f:cd:70:8c:
a4:c4:70:5f:4f:ea:4d:a6:8a:9e:eb:25:27:b3:bf:7d:ec:95:
61:ab:1e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:15 2025 by rpki-client