Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/4C1A8E1ACE8111EFAE8BE21DC4F9AE02.roa
File: 4C1A8E1ACE8111EFAE8BE21DC4F9AE02.roa (raw, json)
Hash identifier: 9c1LjxiZhJDEpkCSGdPsrOsPSCKOBpTjTGiTVSllo4o=
Subject key identifier: 24:81:0E:1A:04:5A:BA:67:AC:E6:FE:0A:C7:AE:F7:DD:DB:3E:15:25
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0CF9
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/4C1A8E1ACE8111EFAE8BE21DC4F9AE02.roa
Signing time: Thu 09 Jan 2025 12:07:58 +0000
ROA not before: Thu 09 Jan 2025 12:07:58 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 329007
IP address blocks: 139.190.8.0/24 maxlen: 24
139.190.11.0/24 maxlen: 24
139.190.13.0/24 maxlen: 24
139.190.15.0/24 maxlen: 24
139.190.17.0/24 maxlen: 24
139.190.20.0/24 maxlen: 24
139.190.30.0/24 maxlen: 24
139.190.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 05:52:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3321 (0xcf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jan 9 12:07:58 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=677fbc1e-69f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:09:9f:7e:86:ca:90:f1:48:51:8c:43:7a:
a9:c6:1f:9c:71:90:ff:9e:32:a8:f3:08:86:63:f7:
af:06:df:b8:2c:a9:1d:37:5d:ab:c2:5c:2c:68:94:
af:e6:5f:05:4c:da:0b:93:0d:e6:c6:f9:70:8e:09:
71:d7:f0:4f:2d:e6:11:cc:20:c8:94:71:50:77:db:
c8:40:10:ed:90:74:d2:92:b1:6c:69:b0:b3:e8:9d:
06:4e:5c:e1:1c:1d:cb:b9:3c:d2:91:fe:3d:8e:c5:
22:2e:b9:6b:31:ac:32:aa:dd:9a:07:ed:94:22:dd:
e4:14:69:aa:bd:92:1e:38:38:7e:a9:f7:c5:e2:98:
d5:c8:31:a3:49:41:73:40:9d:d2:d2:5a:f9:7e:f0:
39:7a:25:8c:2d:62:92:2e:e4:c1:1b:3f:b2:4e:99:
19:49:c6:ef:53:db:49:0e:b9:d2:d8:32:15:a6:18:
e7:99:49:ec:bc:22:e9:a0:f8:6e:3a:5f:19:3f:a7:
fd:fd:74:09:77:02:92:6a:22:6f:4f:5c:72:33:16:
94:ca:a2:dc:72:57:48:34:28:a1:0d:ac:e0:a2:23:
f1:cc:72:f4:e1:1e:b6:b1:aa:4d:3b:8b:0b:e6:45:
4c:7e:8e:61:27:38:ed:00:50:90:d1:41:17:1a:23:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:81:0E:1A:04:5A:BA:67:AC:E6:FE:0A:C7:AE:F7:DD:DB:3E:15:25
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/4C1A8E1ACE8111EFAE8BE21DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.8.0/24
139.190.11.0/24
139.190.13.0/24
139.190.15.0/24
139.190.17.0/24
139.190.20.0/24
139.190.30.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:6a:b8:4e:54:21:a9:6b:42:b8:7a:f6:02:0f:27:8f:35:2b:
f8:d5:e5:ac:1d:3e:84:10:6d:fe:3c:7f:13:dc:63:7f:0b:72:
40:9a:16:bb:10:13:b4:45:af:04:8e:8f:1d:3d:57:f3:91:dc:
5a:fd:cc:c5:86:ba:e2:aa:f6:92:c4:85:b8:5f:bc:24:e8:0a:
6d:64:81:c1:67:0d:66:37:1b:df:16:8c:0d:df:8c:d9:82:5f:
b9:9b:11:2a:69:ee:41:7f:58:31:fb:da:57:f2:53:02:32:72:
88:be:6d:5a:64:ba:28:55:bc:ba:d9:71:19:f7:d7:1d:5c:eb:
02:01:78:39:2e:e7:dd:0a:3b:f4:60:24:12:88:c1:62:85:39:
c1:11:cd:35:f9:63:8b:63:f0:62:59:68:e4:b0:9f:25:6f:07:
dc:74:8e:5c:7c:70:e2:29:c2:25:2d:0a:33:1e:26:ed:4b:9e:
79:27:10:c1:26:65:59:7b:74:61:f9:78:f2:ed:9b:ce:6c:dd:
b8:6d:e9:02:a6:88:91:1c:cd:a7:82:2a:60:1f:7c:05:4f:11:
a0:61:6d:d0:1c:09:b9:fe:c7:07:b0:e9:e4:ac:3d:7e:ad:d9:
28:b7:d9:8e:fe:33:82:53:66:79:8f:cb:e4:07:21:5e:f0:e3:
6b:3d:2e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:39 2025 by rpki-client