Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/523B4D7CB0A711EFB4A7E162C4F9AE02.roa
File: 523B4D7CB0A711EFB4A7E162C4F9AE02.roa (raw, json)
Hash identifier: jEiYCqmYDLcruQSaAE2NfhIKZ+Y2XVxE0LPeOsO8DUU=
Subject key identifier: A0:EE:39:5C:D8:51:B0:00:B1:9A:1C:89:C4:5C:47:B5:01:F7:40:F1
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0C53
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/523B4D7CB0A711EFB4A7E162C4F9AE02.roa
Signing time: Mon 02 Dec 2024 12:21:07 +0000
ROA not before: Mon 02 Dec 2024 12:21:07 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 329007
IP address blocks: 139.190.68.0/22 maxlen: 22
139.190.80.0/21 maxlen: 21
139.190.88.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 06 Dec 2024 06:14:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3155 (0xc53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Dec 2 12:21:07 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=674da633-bb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1e:96:f2:a6:b6:25:40:d1:d8:5d:07:33:c4:
7b:f5:84:50:7c:21:55:fb:79:59:0d:c2:e7:32:d7:
cd:a7:ee:f0:d9:e4:66:c6:fa:6f:31:ca:16:f0:1c:
2b:2d:4c:ae:d2:03:c2:0b:e2:f2:16:42:52:c4:c3:
53:10:a2:91:e8:79:25:70:b6:9f:93:0a:22:4f:a3:
2a:d0:ff:50:b6:3d:2a:b3:5b:43:7c:b6:4f:0b:4c:
d4:7b:ef:94:8b:b4:3f:ce:00:e3:83:05:84:cd:67:
c6:88:a7:df:c6:59:01:23:c2:56:9e:95:ea:11:fb:
e7:ec:6f:8d:4b:67:1b:ef:ed:d7:68:9a:04:90:bc:
b3:4c:03:eb:54:3c:59:c2:fd:81:d3:2e:49:33:68:
65:24:3d:39:ad:44:6d:f3:da:33:eb:14:94:4a:ed:
ce:9e:50:e7:e9:07:8c:47:1b:c0:d6:58:65:d4:42:
6f:55:75:ea:a8:ed:27:3a:62:82:71:f4:7b:9d:66:
a4:9c:30:cd:17:a7:18:d5:e8:bc:c8:31:09:92:20:
95:d3:fe:ce:e9:61:ee:20:fa:ea:21:8a:f4:33:8f:
97:94:80:e1:ef:f3:7c:f6:ea:aa:3e:47:5b:b1:1d:
0f:32:0c:be:dd:ea:ad:78:84:e5:4c:b7:2b:db:4a:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EE:39:5C:D8:51:B0:00:B1:9A:1C:89:C4:5C:47:B5:01:F7:40:F1
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/523B4D7CB0A711EFB4A7E162C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.68.0/22
139.190.80.0/20
Signature Algorithm: sha256WithRSAEncryption
58:75:68:bf:d2:a4:b6:9f:da:20:db:25:6e:00:2b:8b:be:4f:
fa:83:00:43:76:56:5f:97:34:16:ac:f9:0e:73:0c:45:42:4d:
e1:d7:3e:ed:fc:8d:51:35:d2:cf:6f:26:cf:f3:83:a1:1b:d4:
62:8e:f4:3c:6f:8b:de:05:c7:89:12:93:1e:a5:c1:12:7b:3f:
4b:c6:c8:e2:50:67:ae:e0:22:ff:a4:c5:74:48:93:a8:fd:f3:
df:7a:87:f9:4e:74:32:7f:5e:37:21:7c:ad:e2:15:bb:bd:e6:
ca:20:7f:5a:5c:88:7a:17:83:66:53:b1:62:b1:eb:b1:03:77:
40:b2:00:ac:93:e2:c3:b6:6c:3b:84:c2:31:cb:93:9c:0b:3e:
18:fa:72:d8:b4:3a:8d:7c:7b:72:a9:63:1b:b3:39:21:64:5c:
88:8c:96:c2:79:68:8a:65:34:1f:ae:e4:c3:4d:b4:84:4e:24:
36:a9:c5:9e:18:7d:91:c0:7d:7d:0f:19:d3:dc:2f:51:5e:87:
b0:f7:90:35:14:7f:22:76:25:bc:f9:30:5d:fb:f7:17:bc:16:
25:4c:5f:a3:ef:ea:72:b0:f6:08:10:2a:f2:23:f4:06:45:a9:
d0:f6:27:c5:0e:e4:81:07:02:2e:61:34:f8:8a:da:29:e5:29:
e2:f7:35:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:47 2025 by rpki-client