Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/7F64A96AC1E111EF82B2A039C4F9AE02.roa
File: 7F64A96AC1E111EF82B2A039C4F9AE02.roa (raw, json)
Hash identifier: UXZKW31AtyRHdKL9foKamUghWRZg5ILqGm0PV8xtPds=
Subject key identifier: ED:4E:5B:AB:98:7E:AD:AD:4D:2E:E9:FF:BD:77:AE:A4:CC:3E:D5:A6
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0CA3
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/7F64A96AC1E111EF82B2A039C4F9AE02.roa
Signing time: Tue 24 Dec 2024 10:26:12 +0000
ROA not before: Tue 24 Dec 2024 10:26:12 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.32.0/21 maxlen: 24
139.190.40.0/24 maxlen: 24
139.190.41.0/24 maxlen: 24
139.190.42.0/24 maxlen: 24
139.190.43.0/24 maxlen: 24
139.190.44.0/24 maxlen: 24
139.190.45.0/24 maxlen: 24
139.190.46.0/24 maxlen: 24
139.190.47.0/24 maxlen: 24
139.190.56.0/24 maxlen: 24
139.190.57.0/24 maxlen: 24
139.190.58.0/24 maxlen: 24
139.190.59.0/24 maxlen: 24
139.190.60.0/24 maxlen: 24
139.190.61.0/24 maxlen: 24
139.190.62.0/24 maxlen: 24
139.190.63.0/24 maxlen: 24
139.190.68.0/22 maxlen: 24
139.190.80.0/21 maxlen: 24
139.190.88.0/21 maxlen: 21
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Dec 2024 06:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3235 (0xca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Dec 24 10:26:12 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=676a8c44-7a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:ef:ab:38:de:df:c5:3d:70:51:2a:fb:0f:
d6:a4:c7:bf:27:cc:93:80:34:97:37:0b:3f:cc:f9:
1c:34:43:bf:b3:0e:40:e4:9a:cf:4a:bb:24:4a:2e:
99:69:85:24:cc:67:96:57:59:b7:b0:4d:04:7e:15:
bb:c9:0b:aa:67:11:48:45:1a:c5:a7:59:c1:84:63:
de:c5:3d:00:02:9d:ec:7f:b4:9b:13:46:fa:6d:5e:
ff:06:2e:9c:4b:9c:6c:fb:9d:3c:9e:66:b2:56:9f:
c4:3f:8e:e1:74:49:78:83:85:f2:5e:78:1e:1e:05:
6b:9d:f5:df:e2:15:1b:d5:9b:bf:90:0a:09:e1:5a:
f2:fc:6e:59:64:1a:0e:5a:13:3e:0d:86:f6:e8:cc:
0d:ca:8a:ed:82:ad:29:23:f7:61:5f:d8:82:18:1a:
4a:03:dd:f5:5d:7a:12:6e:53:ea:0f:51:ff:52:12:
ed:8e:34:75:b0:41:7a:57:4e:bf:25:63:fc:69:28:
da:13:21:5c:6c:75:ef:ed:87:e3:03:91:6a:1e:38:
06:87:7e:b7:0b:cf:21:93:16:3e:d2:49:e4:ec:80:
c4:15:c6:a7:52:be:66:f1:b7:dd:0c:a9:d6:4b:f7:
fe:f7:aa:2b:11:16:b1:4e:2c:48:08:11:16:f0:c0:
fd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4E:5B:AB:98:7E:AD:AD:4D:2E:E9:FF:BD:77:AE:A4:CC:3E:D5:A6
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/7F64A96AC1E111EF82B2A039C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.32.0/20
139.190.56.0/21
139.190.68.0/22
139.190.80.0/20
139.190.239.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f5:09:d9:15:d2:92:c3:7f:78:0a:32:e2:97:dd:5a:44:87:
23:10:19:ef:10:ba:af:57:04:63:f6:02:47:9f:5d:4c:b9:b8:
55:ea:e6:23:14:7d:60:68:cb:5b:3b:4a:a0:d1:a3:07:4a:a8:
9b:0a:81:21:a9:7e:c2:df:0a:7c:25:79:ae:93:ac:51:34:59:
a6:5e:da:32:f0:8d:aa:4c:45:57:ad:a7:51:11:ab:ed:a1:70:
85:26:bc:37:68:74:d0:14:69:60:1f:64:7f:de:f3:e3:ed:ac:
a8:c9:f9:3e:76:2d:65:a9:4a:ea:0c:49:7f:fc:9e:48:04:6b:
ad:98:b7:9e:06:4a:98:21:8e:a0:28:e0:f2:04:48:7f:39:56:
fb:36:a3:54:fc:61:23:ca:76:3b:85:d3:0b:8a:87:89:6c:2d:
da:90:b9:54:fe:26:b4:32:ff:56:2c:8b:c1:4c:56:f5:24:ff:
a6:e3:22:18:56:bc:e3:96:3d:15:9d:47:de:84:ac:99:c4:60:
19:5a:55:f2:9b:5d:a9:de:db:2a:2c:9f:03:46:8c:b9:a4:4c:
94:d0:d6:3e:29:bc:26:2e:ad:85:7f:94:25:b7:9a:07:f4:7f:
26:88:4e:af:4c:e8:99:15:e9:7c:f2:b6:66:e7:73:4d:87:64:
90:fb:c4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:15 2025 by rpki-client