Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/5295CC2E91F911EF97B45227C4F9AE02.roa
File: 5295CC2E91F911EF97B45227C4F9AE02.roa (raw, json)
Hash identifier: bvs5UTQxbpjg8uG3L2nRv1x2NMEFl0Xb2ENo7UcSHqE=
Subject key identifier: 67:02:DC:BF:0B:0B:5C:02:C8:B6:CD:3C:AC:87:71:9C:9E:BF:43:C0
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0B72
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/5295CC2E91F911EF97B45227C4F9AE02.roa
Signing time: Wed 30 Oct 2024 06:43:08 +0000
ROA not before: Wed 30 Oct 2024 06:43:08 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.0.0/22 maxlen: 24
139.190.4.0/24 maxlen: 24
139.190.5.0/24 maxlen: 24
139.190.6.0/24 maxlen: 24
139.190.7.0/24 maxlen: 24
139.190.8.0/22 maxlen: 24
139.190.12.0/22 maxlen: 24
139.190.16.0/22 maxlen: 24
139.190.20.0/22 maxlen: 24
139.190.24.0/22 maxlen: 24
139.190.28.0/22 maxlen: 22
139.190.36.0/22 maxlen: 24
139.190.40.0/22 maxlen: 24
139.190.48.0/22 maxlen: 24
139.190.60.0/22 maxlen: 24
139.190.96.0/22 maxlen: 22
139.190.100.0/22 maxlen: 24
139.190.104.0/22 maxlen: 24
139.190.108.0/22 maxlen: 24
139.190.112.0/22 maxlen: 24
139.190.116.0/22 maxlen: 24
139.190.120.0/22 maxlen: 24
139.190.124.0/22 maxlen: 24
139.190.235.0/24 maxlen: 24
139.190.238.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 11:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2930 (0xb72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Oct 30 06:43:08 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6721d57c-454a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c2:9a:7f:13:e5:51:fa:5b:45:67:cb:0a:5b:
5a:67:ba:65:af:53:21:e9:de:89:9a:0c:91:73:bb:
d7:02:30:31:52:1b:3d:fb:58:c0:c3:c0:70:2b:36:
7a:8a:b8:f1:b7:94:07:df:d4:05:e6:9a:84:84:6b:
98:ee:e5:60:b9:d6:02:6f:ef:96:2a:69:71:30:11:
50:f5:2a:50:37:4b:39:6a:c7:60:a3:ff:dc:fc:e0:
c2:00:1f:24:57:09:69:43:18:ee:2e:8d:ff:fc:b7:
96:59:00:4f:11:f4:2b:9a:b8:bc:33:dc:d9:ef:94:
35:55:b6:1d:5d:b5:17:90:55:f8:7c:54:40:60:fc:
f2:e7:8b:2e:f9:32:a7:2d:fa:47:81:f4:20:b5:31:
d9:b9:7c:0e:ef:ad:53:39:3b:c6:8c:c2:8f:31:35:
7c:19:d4:7e:12:98:b4:35:78:4f:62:0a:f9:a1:1b:
03:0d:bb:da:9f:ac:2d:ae:14:43:aa:17:0e:cd:bf:
70:b5:fc:54:6a:06:e5:1b:4b:08:a1:23:e0:c3:6d:
bf:17:50:d3:df:ad:a0:79:d0:d9:46:ff:f0:5a:be:
0e:12:0d:ef:cc:65:ac:62:5f:fa:71:20:9f:00:02:
dc:48:e6:2a:4b:99:dc:bc:4e:ce:b7:10:4c:3f:17:
4f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:02:DC:BF:0B:0B:5C:02:C8:B6:CD:3C:AC:87:71:9C:9E:BF:43:C0
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/5295CC2E91F911EF97B45227C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/19
139.190.36.0-139.190.43.255
139.190.48.0/22
139.190.60.0/22
139.190.96.0/19
139.190.235.0/24
139.190.238.0/23
Signature Algorithm: sha256WithRSAEncryption
29:e9:5a:59:26:14:2b:fa:7a:fa:d1:60:ee:4d:aa:40:1b:99:
99:90:93:02:7c:56:e4:64:19:a4:08:26:79:be:f1:b5:32:62:
c2:17:8d:54:f7:42:cb:2d:d5:7e:56:33:4f:7e:da:02:b8:96:
96:23:6a:d6:54:2f:c7:3c:4d:11:4b:13:ba:1e:85:76:54:e5:
23:9b:72:d9:af:60:18:d2:bd:a9:a1:72:d2:71:73:cc:1f:9d:
f7:72:ca:51:8e:46:6d:8d:7e:5e:d0:28:08:2b:a5:41:43:7f:
0c:ef:6b:07:a6:61:0d:84:b0:52:1a:c5:79:34:20:6a:98:f4:
5f:d8:27:76:87:04:ef:13:4d:1b:ec:96:d8:bf:98:ce:88:43:
61:74:52:34:69:b6:0d:56:7a:21:d1:56:50:7c:4e:b1:85:5a:
f7:63:28:66:7e:23:c3:c8:04:cd:22:ec:49:72:c4:b0:b5:54:
5b:24:f2:fa:0f:bc:5a:07:bb:fe:f8:e1:df:b4:50:18:5c:bc:
a2:ae:78:f6:77:25:92:00:54:3c:f9:30:50:90:88:a5:88:ec:
53:42:dc:a0:e6:33:18:c9:1c:7d:9a:9e:03:44:52:1a:1c:d3:
a6:a2:6b:a5:7e:72:9a:77:91:0c:02:ea:ed:56:69:fe:08:7a:
01:45:ba:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:40 2025 by rpki-client