Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/3189EEEAA65111EFAB025B19C4F9AE02.roa
File: 3189EEEAA65111EFAB025B19C4F9AE02.roa (raw, json)
Hash identifier: NE2alRL4N4K03wLSkrca8SXPvrzM8v6kcMIjVUf6in4=
Subject key identifier: 7E:FD:DA:F0:3C:4D:83:7D:84:17:8D:08:73:81:D3:08:E6:91:ED:F8
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0BCF
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/3189EEEAA65111EFAB025B19C4F9AE02.roa
Signing time: Tue 19 Nov 2024 08:35:12 +0000
ROA not before: Tue 19 Nov 2024 08:35:12 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 139.190.96.0/19 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 08:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3023 (0xbcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Nov 19 08:35:12 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=673c4dc0-5607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e1:ef:f7:06:d5:f4:82:35:47:67:91:6d:29:
88:14:22:1c:f2:b3:3c:b7:14:36:2e:c0:bb:10:f9:
8c:a1:7d:9e:42:bb:b1:5f:6a:1c:25:c7:43:e4:83:
de:3c:09:06:e7:86:30:a8:26:10:6d:7b:14:fc:d5:
31:9d:8e:23:b8:59:32:d9:b1:2c:0b:98:0f:46:1b:
df:80:2a:d3:81:44:c9:5c:fa:62:13:f4:5c:41:7b:
47:69:ba:da:2e:c3:25:28:34:39:34:f6:76:08:3a:
1b:49:ac:96:a2:69:91:9e:bd:0e:8b:bb:54:06:6d:
82:07:74:6f:f5:34:64:88:7a:12:6c:3d:91:53:fd:
e7:f2:2e:b6:31:fa:45:f4:8c:29:5a:6d:df:34:22:
df:65:b6:ed:2e:d5:84:d7:29:eb:e2:51:d8:2c:ff:
f6:3d:36:ac:d6:b7:9f:f6:2d:71:a2:6a:c1:87:e4:
f0:59:38:45:54:3b:f4:be:15:90:94:81:5e:53:be:
1e:2e:67:aa:d0:e3:55:5d:4c:ef:7e:44:cf:2d:b1:
35:a3:ad:98:cc:83:6f:17:46:70:d2:33:95:c1:cb:
19:0e:87:22:d3:d8:e8:e4:91:53:bf:b3:5d:90:55:
d0:e9:6e:96:bf:a6:46:78:05:eb:fa:6f:fc:69:38:
b4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FD:DA:F0:3C:4D:83:7D:84:17:8D:08:73:81:D3:08:E6:91:ED:F8
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/3189EEEAA65111EFAB025B19C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.96.0/19
Signature Algorithm: sha256WithRSAEncryption
ac:0b:70:f3:5e:fd:1e:e3:67:9b:e7:70:f6:00:b9:99:a6:d0:
34:09:32:2e:e6:78:81:4b:fe:4f:36:59:bb:d3:7a:7a:fe:fd:
ee:4f:7b:20:4d:9b:c6:e4:19:00:c7:ba:4a:47:2e:60:e3:45:
f6:64:5c:22:14:0f:b3:22:37:7f:45:d0:cd:24:e8:b2:a5:f4:
03:5e:1b:00:1c:63:61:9c:17:e3:1f:54:38:5b:8e:df:4e:91:
04:3d:67:2a:60:e2:b2:c0:cf:15:19:36:f0:ab:7d:ec:5b:90:
61:4a:da:65:c1:dc:bc:1e:41:2f:dd:84:d8:1f:fd:61:98:0a:
36:15:94:52:66:fe:53:67:2f:e6:e6:e7:7b:db:6e:11:27:7a:
cb:3a:56:ec:93:3e:0b:68:75:2f:ca:12:73:b3:3d:2a:08:d9:
89:e3:05:c4:0e:e0:ae:62:eb:d6:af:e3:d4:af:df:10:1c:2b:
21:b9:e7:a5:01:38:97:77:71:45:fd:c3:1a:d0:96:77:02:cc:
d4:14:76:c8:f0:b3:a7:85:e6:63:24:a3:a9:fa:fe:e6:37:23:
7a:35:94:da:dd:02:61:e4:71:fa:0c:bd:11:2a:71:43:84:fd:
43:f9:30:c7:22:9f:94:56:e0:25:64:2a:ba:cc:61:56:9d:f1:
b4:41:41:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:02 2025 by rpki-client