Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/4013FBE8D6F511EF865ABE37C4F9AE02.roa
File: 4013FBE8D6F511EF865ABE37C4F9AE02.roa (raw, json)
Hash identifier: swnaVxcubO3tKKRZic1mfeTdEYkusCo3ESPeETcz4DQ=
Subject key identifier: 7B:80:47:95:07:9B:34:6E:33:2F:A8:DA:D2:19:03:A4:FF:A1:10:68
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0D91
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/4013FBE8D6F511EF865ABE37C4F9AE02.roa
Signing time: Mon 20 Jan 2025 06:10:30 +0000
ROA not before: Mon 20 Jan 2025 06:10:30 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.30.0/24 maxlen: 24
139.190.36.0/22 maxlen: 24
139.190.48.0/22 maxlen: 24
139.190.68.0/22 maxlen: 24
139.190.88.0/21 maxlen: 21
139.190.124.0/22 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 11:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3473 (0xd91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jan 20 06:10:30 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=678de8d6-e938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:74:85:a8:5d:b2:9a:f6:62:6c:e9:06:f3:85:
27:8d:59:ac:1e:d8:9e:77:03:6c:58:6a:c5:1a:66:
63:77:2d:86:5a:b4:20:d6:5a:a5:0a:09:bd:1b:9f:
0e:07:d6:84:ed:7f:0e:ac:40:75:d6:dc:2b:30:de:
70:67:a4:89:50:fc:75:02:57:3a:55:ac:07:d7:32:
f0:27:3e:03:06:64:39:03:28:b4:2d:26:b5:38:7e:
1c:79:50:54:17:f8:84:d9:3e:5a:d1:d5:d8:de:e3:
d3:f2:1c:b8:15:d2:d2:90:c9:91:30:24:05:a3:1b:
cf:62:47:ac:6e:c2:bb:d4:1f:62:05:69:e8:9e:f9:
19:8b:06:bd:1b:3d:b5:54:fd:97:ea:15:22:88:4a:
80:85:2b:99:00:24:15:b6:c5:5a:0a:24:53:72:80:
78:b0:f0:b6:96:4a:1b:f4:31:66:3b:dc:8c:50:40:
d1:48:da:bf:25:45:43:d9:c1:5f:ea:68:0e:4c:7d:
7e:d7:83:ad:a5:51:17:20:be:86:11:5a:07:bb:57:
2c:55:78:05:83:59:aa:ff:8d:15:86:9f:4c:e3:2a:
63:94:6e:f5:37:19:5c:45:a5:ed:07:ec:4a:df:26:
9b:59:ca:a6:b0:a5:32:84:43:86:ca:51:dd:39:03:
18:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:80:47:95:07:9B:34:6E:33:2F:A8:DA:D2:19:03:A4:FF:A1:10:68
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/4013FBE8D6F511EF865ABE37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.30.0/24
139.190.36.0/22
139.190.48.0/22
139.190.68.0/22
139.190.88.0/21
139.190.124.0/22
139.190.239.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:37:45:a0:ec:67:ba:48:01:a4:e0:e1:09:5f:6a:05:8a:60:
06:4f:ca:04:54:e3:f5:dd:7b:95:94:79:73:44:22:06:14:fd:
99:a0:0f:00:b5:98:f7:b1:a4:2e:fe:33:9d:68:8d:7e:91:f2:
88:c2:ad:b1:67:24:10:5a:43:39:03:4b:0a:96:c1:a1:8e:cc:
8e:51:47:49:13:a5:f1:85:55:90:cb:05:b9:58:65:3f:2f:f7:
22:50:ea:60:6a:ec:ec:e5:ed:2c:c6:18:8f:e4:fd:d8:24:a1:
3c:a5:4b:b1:ab:c2:97:2d:5e:c7:8b:b2:e6:c4:63:a1:7f:c0:
95:78:76:e3:c9:ab:a6:73:b7:26:9b:cc:12:6a:8e:77:49:ed:
24:f8:82:78:81:15:c8:cc:30:14:05:2a:cd:72:e9:35:bd:4d:
79:69:64:8b:a3:cd:a6:09:56:7e:07:77:ae:63:a9:cb:0a:e7:
61:47:e0:57:0a:15:be:27:c3:1d:31:ec:68:4d:d7:67:f3:0a:
0e:96:55:7a:79:0e:34:eb:6b:74:5e:bb:c9:e2:a7:df:cb:9e:
5a:8d:d7:8e:ed:51:fd:45:b9:b7:8b:e5:95:8e:7a:1d:d3:d7:
f0:75:78:2a:8a:96:7c:ff:28:60:43:9b:99:7d:0a:1a:d7:b1:
c1:19:94:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:49 2025 by rpki-client