Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/8569797EA1AE11EFB1411F56C4F9AE02.roa
File: 8569797EA1AE11EFB1411F56C4F9AE02.roa (raw, json)
Hash identifier: ONrfykJDJzmYUz3lsmoR8V2PYaZ9ntUWTrTCSkQNZag=
Subject key identifier: 94:34:26:C4:EA:0C:50:CB:1A:7A:0E:8C:A8:66:6F:E0:CF:D9:42:AF
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0BD5
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/8569797EA1AE11EFB1411F56C4F9AE02.roa
Signing time: Tue 19 Nov 2024 09:56:37 +0000
ROA not before: Tue 19 Nov 2024 09:56:37 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.0.0/19 maxlen: 24
139.190.32.0/20 maxlen: 20
139.190.48.0/20 maxlen: 20
139.190.56.0/22 maxlen: 22
139.190.64.0/19 maxlen: 19
139.190.96.0/19 maxlen: 24
139.190.235.0/24 maxlen: 24
139.190.238.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 14:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3029 (0xbd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Nov 19 09:56:37 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=673c60d5-9448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:85:26:e5:91:6a:50:5e:3c:99:61:a7:94:
b8:46:64:d4:93:bc:ad:16:9c:a1:9d:d5:1f:49:a5:
9e:99:eb:34:91:e8:80:d7:bc:0d:b0:f9:c9:d6:f3:
de:4d:63:cb:aa:6e:3e:15:20:51:5e:36:19:12:6d:
80:44:06:19:b6:60:e9:62:2e:4b:c9:a7:0d:33:4b:
73:30:b2:71:84:cf:08:ef:e8:94:11:a7:4c:5c:63:
7b:48:ce:67:09:6b:d7:92:d8:74:7c:75:e5:df:15:
27:f6:22:19:a7:c9:07:37:19:a1:d8:02:6e:80:2a:
82:5c:9a:a2:a8:d2:36:c5:8a:9b:50:20:15:00:df:
fc:97:8d:76:34:94:23:5d:6a:be:e6:8c:98:76:f7:
f7:68:58:9e:49:07:d9:08:9f:2d:ef:da:64:9a:02:
60:af:a3:a2:47:10:54:b9:c6:5a:bc:5a:18:80:fe:
18:36:15:11:c3:f9:be:88:bb:6d:49:60:76:f8:8f:
6a:a2:26:80:63:8a:b4:28:f1:07:b7:24:57:60:de:
44:3b:f8:0e:cd:14:8c:ec:d3:90:43:e7:22:5e:1a:
0f:ca:33:c6:e9:02:7d:f5:aa:32:cf:16:49:03:cd:
7d:34:c6:e9:06:69:17:22:39:cb:2b:5e:a1:41:f6:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:34:26:C4:EA:0C:50:CB:1A:7A:0E:8C:A8:66:6F:E0:CF:D9:42:AF
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/8569797EA1AE11EFB1411F56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/17
139.190.235.0/24
139.190.238.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:15:8c:87:02:89:07:c3:42:80:2b:1d:49:48:34:cb:41:67:
aa:1b:9c:b5:a7:e4:0b:31:59:e7:8f:bd:ec:86:e0:cd:45:4c:
3b:37:96:d3:79:cb:42:4a:52:0b:35:a5:82:42:ee:7e:73:4e:
2c:ec:4a:dd:f9:e6:e2:4e:d9:36:36:ef:f2:61:ac:60:82:31:
f7:5d:60:c8:6d:c9:0a:86:0f:29:b5:53:e6:7b:64:11:ee:b8:
e0:54:1d:cf:2f:1f:01:13:28:25:99:1b:de:f6:7f:d1:8f:3d:
8d:3f:52:35:8f:16:46:e1:2d:1d:4a:a6:00:90:5a:58:de:c2:
9a:4a:6f:3e:92:72:cd:db:f3:7f:9d:91:a8:0c:a3:96:49:c0:
5e:4e:f2:5a:e9:7e:ea:8e:0c:a3:f2:89:98:e7:33:b1:09:42:
ed:6e:39:e1:fc:f7:9a:e7:69:25:77:14:19:d4:ab:bf:b3:34:
c5:7d:ca:54:7c:a9:63:2d:ff:e6:17:49:98:05:30:46:72:c9:
23:ef:ab:41:7f:90:61:e6:c6:f1:ef:fc:10:ff:45:80:da:7e:
44:e6:bb:b7:27:2a:d4:b8:43:aa:1b:26:72:f0:3a:8b:65:b7:
00:3a:ce:62:e5:ae:22:67:19:fd:b8:b9:8d:65:ae:cf:e7:e9:
64:80:23:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:38:53 2025 by rpki-client