Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/507877B8CE8311EFA717262FC4F9AE02.roa
File: 507877B8CE8311EFA717262FC4F9AE02.roa (raw, json)
Hash identifier: CA6jI6yYHk1DJYOkai+/9u23lRp4n9PNwRedeBMlW/g=
Subject key identifier: 44:27:2F:BD:FB:FA:6A:95:B9:E0:71:EF:3E:3F:82:58:38:E5:1F:26
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0CFC
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/507877B8CE8311EFA717262FC4F9AE02.roa
Signing time: Thu 09 Jan 2025 12:14:46 +0000
ROA not before: Thu 09 Jan 2025 12:14:46 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 398704
IP address blocks: 139.190.80.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 10 Jan 2025 10:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3324 (0xcfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jan 9 12:14:46 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=677fbdb6-31f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:fa:ce:6a:23:c7:44:ae:23:69:3a:50:dd:
9e:86:67:7b:71:02:29:2a:3a:c4:89:b4:99:32:df:
c9:a8:ba:8e:74:1e:36:04:07:d9:0c:33:fc:17:b9:
3f:c6:01:d7:d8:55:fb:7a:55:6d:d2:6e:37:7f:c7:
de:7d:5b:55:14:0c:9b:ef:90:fb:52:c1:82:15:da:
ef:e1:3f:9e:ec:5c:68:37:a7:9b:ea:fc:d6:91:1c:
46:57:7b:6a:d0:73:fe:49:a8:45:a7:96:3e:49:22:
ba:1f:76:39:9c:83:a7:33:9d:35:22:1e:71:11:14:
d0:4e:cb:34:38:1c:f4:d6:cc:23:4f:58:3d:50:8b:
1f:8e:51:f4:06:37:1d:ff:54:ab:cc:2e:df:50:4d:
29:02:36:19:fd:3a:b3:3d:a4:63:f8:ea:a6:b0:b5:
1e:6f:16:17:cd:f2:30:21:db:a1:24:02:c0:bb:87:
c9:b8:ee:f7:55:5a:3b:0a:04:eb:7a:cf:88:75:72:
31:02:6b:75:2e:18:d4:5d:ac:fa:40:1f:ab:72:77:
9e:fe:65:9a:d0:71:57:02:93:41:3e:08:3c:17:c1:
9b:82:f2:be:19:f1:c1:b0:83:80:e8:13:4a:77:85:
38:e1:50:3b:0b:33:4e:c5:a1:98:f0:6d:a6:6b:aa:
37:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:27:2F:BD:FB:FA:6A:95:B9:E0:71:EF:3E:3F:82:58:38:E5:1F:26
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/507877B8CE8311EFA717262FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.80.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:ec:5c:cb:b7:81:e8:a0:81:09:26:95:a9:05:40:5a:91:4a:
11:6f:20:ec:62:eb:af:6d:88:06:5f:e6:d8:c1:cc:ee:17:14:
65:a3:ef:e3:06:59:81:84:12:ef:c8:1a:b8:e4:b8:90:45:83:
03:03:89:d3:aa:e6:3b:cb:f9:79:87:40:c0:52:e3:16:ef:fe:
18:82:ff:33:17:25:ee:c5:63:7b:e3:85:09:24:55:89:d0:67:
f2:f5:72:ae:63:77:ca:3a:ce:88:45:20:ab:fd:7e:92:ee:d0:
87:6e:25:54:86:9d:81:41:ae:e5:d7:dc:df:f2:13:01:01:e7:
f7:01:76:59:2f:12:65:81:fe:9a:d3:ff:1b:78:db:2e:9f:12:
26:94:d4:ae:2b:de:69:cc:98:84:eb:c0:21:32:fb:61:64:81:
d4:3c:54:c1:7c:a8:75:b4:5a:b6:3d:de:a4:8d:29:01:52:c6:
54:1e:59:21:e0:91:e9:36:1b:6f:93:4e:03:80:c0:40:5f:d3:
44:b1:ec:64:68:c7:c7:e0:cc:0a:10:a7:ff:cb:82:64:0a:f7:
21:0e:6d:e2:3c:2b:c1:f0:31:de:a7:34:93:f2:39:d5:1b:20:
62:4e:7e:8c:6e:9c:65:06:3c:00:3b:ef:df:4e:85:ca:5a:75:
fb:ae:a6:35
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1
Rjg4Mjc2RDMwHhcNMjUwMTA5MTIxNDQ2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzdmYmRiNi0zMWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxgT6zmojx0SuI2k6UN2ehmd7cQIpKjrEibSZMt/JqLqOdB42BAfZDDP8F7k/
xgHX2FX7elVt0m43f8fefVtVFAyb75D7UsGCFdrv4T+e7FxoN6eb6vzWkRxGV3tq
0HP+SahFp5Y+SSK6H3Y5nIOnM501Ih5xERTQTss0OBz01swjT1g9UIsfjlH0Bjcd
/1SrzC7fUE0pAjYZ/TqzPaRj+OqmsLUebxYXzfIwIduhJALAu4fJuO73VVo7CgTr
es+IdXIxAmt1LhjUXaz6QB+rcnee/mWa0HFXApNBPgg8F8GbgvK+GfHBsIOA6BNK
d4U44VA7CzNOxaGY8G2ma6o34wIDAQABo4IClTCCApEwHQYDVR0OBBYEFEQnL737
+mqVueBx7z4/glg45R8mMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNTA3ODc3QjhD
RTgzMTFFRkE3MTcyNjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAOLvlAwDQYJKoZIhvcNAQELBQADggEBAI/sXMu3geiggQkm
lakFQFqRShFvIOxi669tiAZf5tjBzO4XFGWj7+MGWYGEEu/IGrjkuJBFgwMDidOq
5jvL+XmHQMBS4xbv/hiC/zMXJe7FY3vjhQkkVYnQZ/L1cq5jd8o6zohFIKv9fpLu
0IduJVSGnYFBruXX3N/yEwEB5/cBdlkvEmWB/prT/xt42y6fEiaU1K4r3mnMmITr
wCEy+2FkgdQ8VMF8qHW0WrY93qSNKQFSxlQeWSHgkek2G2+TTgOAwEBf00Sx7GRo
x8fgzAoQp//LgmQK9yEObeI8K8HwMd6nNJPyOdUbIGJOfoxunGUGPAA7799Ohcpa
dfuupjU=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:26 2025 by rpki-client