Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/3FB06C820DD211EF9DD9C850C4F9AE02.roa
File: 3FB06C820DD211EF9DD9C850C4F9AE02.roa (raw, json)
Hash identifier: YrH3WJRsHKkCKfZUuvMWwUDehLJSo+aCKrqCvxzjYFo=
Subject key identifier: 28:2B:07:EB:1D:AF:F0:6B:4F:A5:5A:2C:4F:37:D5:38:9C:3D:F9:8B
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0AA3
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/3FB06C820DD211EF9DD9C850C4F9AE02.roa
Signing time: Fri 24 May 2024 22:32:06 +0000
ROA not before: Fri 24 May 2024 22:32:06 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 136030
IP address blocks: 139.190.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 12:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2723 (0xaa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: May 24 22:32:06 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66511566-8323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:77:5f:95:37:f4:98:eb:c0:a5:00:f2:32:
ed:bf:7a:4b:5d:0f:34:d1:e2:83:9f:46:e2:cb:82:
c6:f5:83:56:fa:43:80:38:8b:82:92:6a:7f:85:b6:
44:dc:3b:84:6d:36:ee:cb:2c:78:64:ca:2c:06:63:
06:9c:e7:c3:40:fe:e5:2d:1c:14:60:9a:39:a9:95:
f0:40:91:08:ae:b4:09:65:0c:f2:6f:59:b5:eb:a8:
d3:d9:6a:dd:d0:65:81:16:05:9a:f7:d8:44:a2:4f:
93:25:0c:77:c7:09:4e:d6:9a:e2:b1:4e:57:be:d1:
cb:ab:74:6f:9d:c7:d7:b7:3c:45:b6:32:66:dd:9c:
27:cb:b3:5a:9d:91:b3:15:e6:3d:95:bc:1f:07:8c:
a2:a3:29:45:ca:b0:d6:bf:ba:bd:d4:de:fd:aa:75:
e2:01:66:e7:2c:5e:1b:df:e9:0f:cf:75:54:7e:68:
cf:fb:be:ef:be:bf:64:f6:f4:40:88:c2:7d:6d:48:
13:32:43:01:ef:0c:d1:31:6f:33:79:e3:c2:f1:70:
57:33:55:33:7c:c5:75:e0:05:be:46:60:3e:ad:4e:
7f:91:e5:1b:88:5f:80:82:86:fc:52:58:45:5c:34:
cd:e9:9a:3a:c2:e7:63:2d:ed:1c:ac:f7:26:ff:ec:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2B:07:EB:1D:AF:F0:6B:4F:A5:5A:2C:4F:37:D5:38:9C:3D:F9:8B
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/3FB06C820DD211EF9DD9C850C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.235.0/24
Signature Algorithm: sha256WithRSAEncryption
00:0e:eb:55:5d:4f:37:ff:47:2d:20:ac:c8:dc:20:9e:52:79:
98:fb:b8:e8:1b:fe:7c:34:94:25:10:b9:a5:6c:76:e4:6a:cc:
2a:b4:ff:9d:9c:21:16:df:56:8b:22:62:61:5d:90:98:5a:ea:
c2:61:3f:f9:e4:92:ab:32:f7:d6:e8:e1:77:cd:e5:44:65:81:
25:db:74:47:d2:bc:ac:7b:9d:f8:f3:9f:86:7b:51:a3:7f:36:
74:e0:cb:8a:de:3d:1a:d1:69:2c:e7:6a:4e:2c:2e:27:6c:52:
cf:f5:ba:3c:ed:37:ed:c6:db:94:72:dc:ce:e8:f5:47:81:6a:
5a:3f:34:09:92:31:c0:df:b8:90:62:70:a8:1a:27:c6:e6:7e:
d8:52:4d:93:36:39:28:cb:a7:3e:31:c5:ae:be:34:38:08:4f:
29:47:55:20:42:44:e4:60:28:bc:49:8b:35:d8:be:f6:38:a9:
3e:c5:f2:a3:ce:b2:0a:8e:b6:ef:53:22:42:7f:17:5d:71:29:
64:6d:cc:37:f1:1b:2f:77:ee:3c:6d:52:43:13:e0:aa:b9:ce:
c0:8c:ec:ac:d5:d2:af:82:59:dd:8f:3e:56:c4:8b:58:f1:26:
0d:81:68:8d:85:69:9b:99:5c:ca:f6:7a:0e:06:e7:33:e5:a8:
56:68:f3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:27 2025 by rpki-client