Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/7B8F5836043111EEA1E46862C4F9AE02.roa
File: 7B8F5836043111EEA1E46862C4F9AE02.roa (raw, json)
Hash identifier: Xsvfig4RLvjRqP1Wf8CT9dJ5T97X4Pac/WtyJ2RQDP8=
Subject key identifier: 6A:43:4F:78:69:29:F1:80:10:49:EB:E6:62:1D:57:74:4E:EF:03:80
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 089A
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/7B8F5836043111EEA1E46862C4F9AE02.roa
Signing time: Tue 06 Jun 2023 06:15:07 +0000
ROA not before: Tue 06 Jun 2023 06:15:07 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 38547
IP address blocks: 139.190.235.131/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 09 May 2024 07:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2202 (0x89a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Jun 6 06:15:07 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=647eceeb-fecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:9b:f7:87:c3:a1:18:51:5a:c9:e1:e7:06:
18:a9:c3:d5:04:94:cc:9d:c0:00:9c:88:65:18:e1:
bf:c8:bc:3c:c4:f7:02:d5:9c:60:9d:62:e2:68:35:
02:b8:aa:d1:b1:70:da:79:d8:0f:35:8a:30:f5:40:
7d:14:2c:66:65:8a:47:c0:27:b9:ce:bf:be:86:24:
58:83:ee:67:85:71:e6:c5:3b:d8:0a:ce:be:85:2b:
f1:aa:aa:79:91:7f:c4:7b:65:0c:7d:72:ab:bd:ff:
77:b5:54:ed:53:ee:f1:8c:36:23:3b:4d:8f:4d:da:
9b:30:77:1b:30:59:0c:89:1e:32:1a:c2:69:61:6f:
40:03:5b:7c:44:5d:da:91:83:f1:5f:fb:54:95:5c:
0d:97:5b:22:e5:c1:83:d1:c0:cb:14:21:3a:19:44:
ac:4d:85:cc:f5:ba:e9:b3:7c:aa:39:e3:8c:0c:08:
08:c6:4d:b4:9e:63:93:9a:d8:c1:0b:77:f2:ca:c5:
13:7b:0a:81:89:27:f5:19:68:f7:79:92:c2:c3:56:
58:c0:a2:d1:96:4e:f0:04:94:ad:bc:e4:61:ad:43:
26:dc:3b:b3:2d:52:06:9b:fc:6d:7c:4d:ce:d8:81:
c6:f6:f1:ee:26:fc:f9:56:fc:a7:b7:ee:21:64:e1:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:43:4F:78:69:29:F1:80:10:49:EB:E6:62:1D:57:74:4E:EF:03:80
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/7B8F5836043111EEA1E46862C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.235.131/32
Signature Algorithm: sha256WithRSAEncryption
64:51:05:41:09:8a:85:1e:af:ca:6d:92:57:1b:33:e1:73:ce:
19:1f:54:ba:93:90:8d:09:d1:9d:61:01:0a:4a:7d:24:a1:88:
29:10:99:57:31:69:36:3d:07:68:4c:6a:2d:93:75:c8:ea:d7:
a6:7a:aa:87:bf:a5:22:e3:ea:86:39:66:1c:ad:66:67:38:fe:
76:f7:e5:1a:83:c1:e4:60:5e:e2:46:48:ac:0a:d8:9d:81:c5:
83:35:07:4a:59:1a:ff:ec:90:01:4c:13:9b:65:17:b5:71:93:
6f:f5:a4:e5:99:3d:76:e7:85:aa:2b:43:fb:50:86:c1:f9:c4:
de:6a:69:f7:28:b8:a7:33:56:4a:15:ef:f4:bd:ec:3d:53:c8:
e4:e0:91:a9:56:2b:48:ae:b2:c4:60:ac:c6:2b:f9:fe:bc:e3:
48:12:87:59:89:cf:e0:05:28:93:8b:ca:67:10:ac:fb:5a:49:
59:2e:2a:95:1b:b2:96:38:05:4c:06:9a:80:8f:ea:dc:60:fb:
45:f6:fe:6f:c4:a9:8e:a9:20:19:0b:bf:80:40:aa:03:e3:65:
01:0e:39:41:5d:da:f6:b4:fd:a5:8c:29:c4:1b:9e:e3:4b:fc:
04:dc:45:92:88:9f:ac:67:b8:3a:06:ad:e4:c7:01:34:57:03:
c3:0e:ef:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 09:43:33 2024 by rpki-client on console-fra.rpki-client.org