Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/62319226D16E11EFA643F548C4F9AE02.roa
File: 62319226D16E11EFA643F548C4F9AE02.roa (raw, json)
Hash identifier: 2KlisxfanXIGOVag/krg8YXU+btBOYyX1UhmpUmiIGs=
Subject key identifier: EB:A0:7B:71:4A:3B:91:46:E0:31:D1:74:60:79:D5:B0:6F:74:F4:D9
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0D39
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/62319226D16E11EFA643F548C4F9AE02.roa
Signing time: Mon 13 Jan 2025 05:23:22 +0000
ROA not before: Mon 13 Jan 2025 05:23:22 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 398704
IP address blocks: 139.190.0.0/21 maxlen: 24
139.190.80.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 09:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3385 (0xd39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jan 13 05:23:22 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6784a34a-c9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f3:bf:12:8f:73:7f:f8:b5:72:61:e6:22:d2:
e9:9c:62:b4:49:9b:82:18:40:1b:64:77:49:4b:7e:
b0:2c:f3:4a:22:c7:0c:05:4b:e5:10:b2:b5:6f:1e:
0c:53:96:48:56:9a:6a:c7:0c:db:e6:49:70:43:70:
87:48:ce:47:88:2e:15:67:71:0f:d9:38:05:c1:bd:
af:12:43:07:f0:b1:87:c5:82:e6:b2:2e:45:a9:c7:
a5:f3:b0:6a:95:0a:b4:90:5c:54:d1:e2:4e:87:9b:
b4:67:b3:a1:ee:b9:b8:86:04:3d:d8:ec:cd:89:dc:
72:67:db:dc:82:22:95:04:cc:65:15:89:5f:78:b7:
db:62:03:66:50:22:7b:d1:b3:5e:83:11:d7:2b:97:
6c:f6:91:8b:40:69:ee:a9:f9:5c:f1:c3:b4:e2:5a:
73:49:1f:3a:e0:0d:38:69:7d:69:ab:e7:d8:ec:5c:
6a:ae:ee:5f:1a:c1:cd:19:e3:f8:f2:2b:cc:47:8a:
9f:b1:82:93:ef:48:73:0a:e0:59:c3:bd:cc:d3:0a:
3c:b9:70:b8:ce:28:06:eb:ea:4f:e1:16:6b:7d:e6:
bb:9e:10:a2:ff:ef:b0:4a:85:59:9d:de:2f:55:b3:
6d:bb:b2:3d:04:da:09:16:ae:df:6c:fe:5f:3b:02:
09:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A0:7B:71:4A:3B:91:46:E0:31:D1:74:60:79:D5:B0:6F:74:F4:D9
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/62319226D16E11EFA643F548C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/21
139.190.80.0/21
Signature Algorithm: sha256WithRSAEncryption
82:8c:a9:c3:c3:d7:e6:be:53:2c:86:14:6f:13:83:ae:45:69:
ab:4d:76:eb:3e:ed:4a:96:fc:ac:5a:f2:61:d6:d4:aa:23:f1:
ea:17:8a:fb:9f:51:68:40:bf:00:29:b9:28:89:fb:e9:92:8e:
48:aa:cc:69:5d:f0:96:fd:c6:4e:80:c7:98:cf:b0:9f:eb:8f:
85:5e:54:3d:7f:ab:45:50:f9:9b:5c:0f:5e:57:e2:f2:12:1b:
9f:ca:95:2a:ac:7c:c8:03:00:3e:95:71:3b:58:88:72:ab:20:
9b:b8:ef:bc:d7:ad:26:d4:cd:8b:e4:e6:11:d3:9a:cc:81:e9:
4f:05:04:5d:77:e3:a5:f9:7d:0c:c7:ed:1e:1c:12:3f:4d:05:
26:21:63:3e:86:2f:2d:6a:92:42:6d:07:ce:4e:3c:b1:3d:37:
8d:e1:1b:00:e1:9e:04:67:a7:9e:8f:1f:60:5e:ef:29:2e:06:
fc:4c:29:31:a9:e2:28:65:fc:99:e1:45:65:11:b7:69:a7:59:
1a:64:d6:d6:e0:ab:b8:3b:cb:48:e4:58:77:29:06:d5:a9:30:
45:b5:c6:66:4c:79:48:2b:9a:a6:30:f9:64:ea:c1:8b:08:67:
b3:ea:5a:df:5a:05:23:8e:e3:37:69:41:9c:56:0a:92:54:2e:
78:f5:77:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:05 2025 by rpki-client