Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/3EE8FF286B4F11EFACB0EA65C4F9AE02.roa
File: 3EE8FF286B4F11EFACB0EA65C4F9AE02.roa (raw, json)
Hash identifier: iqEccli34RWMRhK9wbBJ6ciTTIRt7oVgIRs4AgpuLFE=
Subject key identifier: F8:B4:6F:C5:30:73:3A:AC:56:6A:25:B5:2E:39:46:04:19:E2:F1:BC
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0B1C
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/3EE8FF286B4F11EFACB0EA65C4F9AE02.roa
Signing time: Thu 05 Sep 2024 06:22:37 +0000
ROA not before: Thu 05 Sep 2024 06:22:37 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 6079
IP address blocks: 139.190.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 13:23:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2844 (0xb1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Sep 5 06:22:37 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66d94e2d-409c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:2c:2a:0a:10:9e:fa:b4:56:a1:9b:8f:5a:
22:41:ff:2a:38:f5:4f:25:a3:b4:b9:bc:6c:4b:27:
17:33:32:cf:3f:06:25:65:82:3a:3c:a5:ef:d6:6d:
25:14:f6:da:2c:67:28:1f:9b:ec:2b:6c:6f:43:a8:
83:d2:c4:8a:77:8e:0a:63:ad:b8:46:c9:7a:f1:50:
7f:f6:3f:aa:24:f7:50:81:2f:d1:55:a7:d8:1f:7a:
0b:29:7a:26:1c:af:3d:f6:53:70:0b:e5:e5:22:40:
38:19:1c:28:2a:f9:28:14:60:3a:20:27:14:7e:e9:
6b:6a:e5:5d:9f:9c:37:a4:1a:6e:c5:e7:f7:c2:cf:
b9:04:ef:92:01:ab:38:f4:0b:fb:fe:3c:73:25:df:
c1:a9:b8:2b:ed:6e:a2:d0:79:95:ec:19:d7:70:16:
39:72:5d:57:fe:5a:fa:19:4c:91:ea:76:54:b7:e5:
b7:57:c5:16:d4:fd:22:85:ac:20:96:22:2a:ce:69:
29:73:6b:07:be:04:86:98:af:b3:68:57:2b:d2:c2:
24:22:7d:fa:9f:3e:c8:a6:f4:21:3c:26:31:50:b8:
9c:d5:55:a9:d4:76:51:6e:c6:28:13:56:4d:21:24:
b7:22:6e:af:1d:fa:f3:77:23:d5:2a:45:d3:ee:f3:
1f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B4:6F:C5:30:73:3A:AC:56:6A:25:B5:2E:39:46:04:19:E2:F1:BC
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/3EE8FF286B4F11EFACB0EA65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.32.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:9b:9a:46:76:8e:d8:8f:e4:14:c5:06:33:bb:ff:06:f5:83:
8d:29:3d:67:ff:0d:2f:34:07:82:b0:22:6c:24:05:68:a2:35:
e7:65:b8:a7:f7:70:f8:af:d4:9f:38:e0:27:80:8e:ea:d6:40:
95:90:28:f9:52:89:be:f4:5f:fa:83:f3:6f:2e:a1:81:07:8e:
0d:fd:ed:e6:ed:f3:cc:bb:b2:78:51:d9:4c:62:9c:c8:5c:ba:
c3:0f:4c:71:f5:d2:30:d5:cf:c5:ad:f4:7d:bc:fd:d1:ed:6e:
48:44:07:c6:c4:3b:c9:04:1d:b4:de:b8:4a:6b:6e:d7:20:29:
49:1b:42:3f:e7:f2:91:fa:21:0d:fd:df:48:fd:0b:a2:d3:fb:
75:cc:32:a8:8c:4b:ba:56:58:11:33:c3:e7:3b:6c:cd:8a:cc:
d7:15:58:b4:9f:e8:9b:8c:41:7a:52:f6:68:01:51:2a:b2:98:
a3:d9:e4:eb:ae:8a:84:5b:3c:55:76:73:8d:77:35:cd:45:e5:
db:3a:d2:4b:d0:e4:3f:cc:9e:65:67:d1:a4:67:0e:42:5f:90:
4e:e9:b7:6a:ec:a4:24:ee:35:3d:bb:a1:85:94:86:fa:9c:12:
28:f4:1b:ac:24:84:f7:f6:79:64:be:78:51:ff:f1:33:45:76:
cb:a4:89:c9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1
Rjg4Mjc2RDMwHhcNMjQwOTA1MDYyMjM3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5NGUyZC00MDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyJwsKgoQnvq0VqGbj1oiQf8qOPVPJaO0ubxsSycXMzLPPwYlZYI6PKXv1m0l
FPbaLGcoH5vsK2xvQ6iD0sSKd44KY624Rsl68VB/9j+qJPdQgS/RVafYH3oLKXom
HK899lNwC+XlIkA4GRwoKvkoFGA6ICcUfulrauVdn5w3pBpuxef3ws+5BO+SAas4
9Av7/jxzJd/Bqbgr7W6i0HmV7BnXcBY5cl1X/lr6GUyR6nZUt+W3V8UW1P0ihawg
liIqzmkpc2sHvgSGmK+zaFcr0sIkIn36nz7IpvQhPCYxULic1VWp1HZRbsYoE1ZN
ISS3Im6vHfrzdyPVKkXT7vMfUQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPi0b8Uw
czqsVmoltS45RgQZ4vG8MB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvM0VFOEZGMjg2
QjRGMTFFRkFDQjBFQTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKLviAwDQYJKoZIhvcNAQELBQADggEBAGubmkZ2jtiP5BTF
BjO7/wb1g40pPWf/DS80B4KwImwkBWiiNedluKf3cPiv1J844CeAjurWQJWQKPlS
ib70X/qD828uoYEHjg397ebt88y7snhR2UxinMhcusMPTHH10jDVz8Wt9H28/dHt
bkhEB8bEO8kEHbTeuEprbtcgKUkbQj/n8pH6IQ3930j9C6LT+3XMMqiMS7pWWBEz
w+c7bM2KzNcVWLSf6JuMQXpS9mgBUSqymKPZ5OuuioRbPFV2c413Nc1F5ds60kvQ
5D/MnmVn0aRnDkJfkE7pt2rspCTuNT27oYWUhvqcEij0G6wkhPf2eWS+eFH/8TNF
dsukick=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:48 2025 by rpki-client