Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/78DB74B4906F11EF86F9D017C4F9AE02.roa
File: 78DB74B4906F11EF86F9D017C4F9AE02.roa (raw, json)
Hash identifier: Zwjg3NqSzMzOBm6Hk5aSW1QLLbMG9KCW5yaVcmE9vmc=
Subject key identifier: 1F:03:8C:D7:8C:FB:9D:5F:A1:C5:28:71:EB:72:D9:9D:7C:81:42:55
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0B57
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/78DB74B4906F11EF86F9D017C4F9AE02.roa
Signing time: Wed 23 Oct 2024 11:48:43 +0000
ROA not before: Wed 23 Oct 2024 11:48:43 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.4.0/24 maxlen: 24
139.190.5.0/24 maxlen: 24
139.190.6.0/24 maxlen: 24
139.190.7.0/24 maxlen: 24
139.190.28.0/22 maxlen: 22
139.190.36.0/22 maxlen: 24
139.190.40.0/22 maxlen: 24
139.190.48.0/22 maxlen: 24
139.190.60.0/22 maxlen: 24
139.190.96.0/22 maxlen: 22
139.190.104.0/22 maxlen: 24
139.190.108.0/22 maxlen: 24
139.190.120.0/22 maxlen: 24
139.190.124.0/22 maxlen: 24
139.190.192.0/19 maxlen: 19
139.190.235.0/24 maxlen: 24
139.190.238.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 11:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2903 (0xb57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Oct 23 11:48:43 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6718e29b-66c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:36:31:38:4f:f4:80:35:e0:c0:7b:de:04:
e3:de:2b:55:09:70:c9:ce:64:9f:6c:6a:4e:cb:2b:
d6:ab:e6:5e:7f:c2:00:cd:11:c0:91:2d:e9:15:13:
60:95:4c:9c:80:fb:21:20:66:10:50:a7:de:17:b6:
3c:ee:b1:53:17:a9:95:56:21:0c:73:a6:d3:be:84:
89:b7:a2:fd:28:d5:b9:33:40:ca:10:a8:f0:43:7f:
6b:40:cd:6b:02:64:80:cf:b0:3d:9e:6a:2e:38:ba:
0b:46:09:4d:5c:3b:28:4d:5f:17:30:63:f8:9f:13:
90:da:af:95:62:ba:54:db:de:aa:9b:12:69:4d:3b:
81:2e:c0:a1:b8:11:4a:3b:de:4f:90:32:58:e5:4d:
d1:c5:bc:4c:0e:ac:eb:12:c8:8e:ad:3c:3b:5c:de:
f0:c3:8d:c7:6d:3a:e5:6e:d7:7d:c0:ff:a2:b6:04:
66:ee:82:fc:3b:a5:94:6d:5c:55:30:4b:a6:b5:6c:
ea:b6:55:c5:60:48:30:30:2f:cd:41:f6:ac:14:70:
4c:d9:b2:89:3c:3f:cc:98:e7:dd:af:29:3f:75:2a:
90:25:46:be:e6:40:24:35:44:dc:7c:41:7b:be:9f:
08:33:c8:20:38:f2:1e:ce:15:84:2a:b2:f5:95:41:
b7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:03:8C:D7:8C:FB:9D:5F:A1:C5:28:71:EB:72:D9:9D:7C:81:42:55
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/78DB74B4906F11EF86F9D017C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.4.0/22
139.190.28.0/22
139.190.36.0-139.190.43.255
139.190.48.0/22
139.190.60.0/22
139.190.96.0/22
139.190.104.0/21
139.190.120.0/21
139.190.192.0/19
139.190.235.0/24
139.190.238.0/23
Signature Algorithm: sha256WithRSAEncryption
88:14:0c:d6:16:40:93:71:ec:5b:01:46:eb:66:85:22:35:3a:
9e:b4:d5:44:34:70:1d:14:8f:a0:ed:b5:05:6a:b1:eb:1d:04:
bb:11:11:0c:b4:11:27:c8:19:68:90:ca:02:f8:7e:6b:c4:7e:
ef:5a:12:63:f1:28:0c:3f:8a:c2:03:b2:7b:fe:90:88:d9:a5:
1b:3f:2b:b4:ec:b4:62:04:f3:aa:65:05:d7:15:5d:3c:23:88:
8e:8a:fc:3b:bf:e7:17:f8:d9:a2:79:af:b6:69:bb:ba:57:45:
f9:39:02:50:e2:f0:bf:f8:57:37:29:24:e2:38:d5:5f:b7:9d:
b2:64:21:74:18:56:ac:7d:27:2c:16:0c:3c:95:e1:b7:83:aa:
76:7b:4b:23:be:34:2a:79:74:de:d3:51:6e:b5:75:d2:7f:0e:
de:55:6d:7b:3f:94:da:b5:eb:25:ac:74:86:c3:d3:27:41:d6:
c5:c3:ad:f6:d5:ca:92:74:af:00:14:dd:c1:3e:85:92:01:6a:
0d:97:cd:5c:ca:b4:6e:fe:de:e1:d6:8f:55:a7:38:3a:93:ca:
3f:11:f5:5d:3a:0f:32:6a:a3:7a:ac:77:64:6d:5e:9f:6d:b1:
09:b8:81:59:fc:23:b7:0a:20:4f:9d:f4:a9:40:b0:4e:a2:0e:
dd:41:73:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:59 2025 by rpki-client