Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/8DC7B5B26B4F11EFB4830869C4F9AE02.roa
File: 8DC7B5B26B4F11EFB4830869C4F9AE02.roa (raw, json)
Hash identifier: condye4ytwa+qB+ItUY/DUsq9fzQpfa4v2W1P2ey7go=
Subject key identifier: 8A:E3:6E:D9:40:78:BA:80:AD:32:5D:AC:2B:B3:73:9C:B2:80:0F:C8
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0B1E
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/8DC7B5B26B4F11EFB4830869C4F9AE02.roa
Signing time: Thu 05 Sep 2024 06:24:50 +0000
ROA not before: Thu 05 Sep 2024 06:24:50 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 35554
IP address blocks: 139.190.64.0/19 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 10:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2846 (0xb1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Sep 5 06:24:50 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66d94eb1-f23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:b4:6b:6a:f5:65:70:82:6d:6f:9b:75:dc:
e8:ec:52:b4:71:f5:19:cc:d8:fc:27:56:dd:7e:cf:
87:65:6d:2b:4d:b8:c9:a3:fb:78:0e:63:4a:75:59:
4f:f7:97:86:e1:d4:9d:73:2f:aa:58:cf:e7:3f:c2:
16:a4:72:e0:66:fc:5a:06:34:dc:5d:d7:93:15:b9:
75:4c:dd:2c:06:19:9e:37:d5:ff:12:aa:0f:05:8a:
fb:83:29:b8:11:53:49:1e:2e:1f:ab:d3:26:cb:a8:
63:9e:42:1b:e4:e1:c5:34:17:32:53:87:75:ac:42:
45:03:aa:23:4d:e2:ec:d5:d1:f8:a8:ac:a2:81:1e:
a5:38:9a:08:52:08:4c:5f:e7:91:d4:6f:c9:3d:61:
74:64:56:05:36:8f:7d:d5:37:a7:2a:76:13:b6:17:
d5:72:ae:1c:6f:d4:f6:a7:39:35:65:a9:6a:05:71:
32:7a:21:75:25:85:3b:26:a5:52:24:4e:91:f8:d6:
32:61:18:27:63:44:30:a0:af:07:c5:46:ab:f3:70:
bb:46:d3:24:c0:d1:2d:be:13:35:f5:dd:3e:ae:34:
11:4e:c7:98:0f:36:f8:77:7f:f9:4e:d3:70:dc:4d:
89:ea:17:2d:9a:b7:ec:2b:d1:b9:3a:8f:e4:39:7b:
f8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E3:6E:D9:40:78:BA:80:AD:32:5D:AC:2B:B3:73:9C:B2:80:0F:C8
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/8DC7B5B26B4F11EFB4830869C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.64.0/19
Signature Algorithm: sha256WithRSAEncryption
80:f3:01:7c:44:4d:25:84:29:0e:af:b9:48:7e:a8:c5:72:9b:
8e:d9:29:48:0f:ad:e3:11:a3:7a:9b:54:18:79:bf:5b:8a:43:
26:44:47:a2:0f:94:34:60:35:28:c3:86:37:4a:9d:ef:64:4c:
5a:99:ea:b4:8d:b1:84:21:24:d3:11:ec:d7:09:44:cf:c4:19:
91:50:3f:d1:dd:6a:83:5d:c1:6e:c6:56:b3:06:64:0e:cb:5b:
8e:a0:d2:7b:f8:12:97:22:d7:f8:c2:85:44:3c:54:e5:0d:a4:
33:02:8d:22:f0:c1:fc:6f:1c:97:3b:5c:b2:b5:bd:b9:4e:71:
1d:8a:1f:f8:f4:26:5e:06:25:a6:93:ea:23:e3:27:cb:fa:f3:
03:92:45:fc:94:8c:f6:d7:fc:37:6e:c2:1b:30:d9:0b:9c:42:
2a:ca:50:67:0e:d0:65:1c:55:89:25:06:0d:df:03:03:93:33:
0c:b6:51:91:c8:ad:47:34:cf:d0:3f:09:1d:27:97:51:7b:32:
56:7e:47:c6:29:5b:f3:99:dd:cf:cf:54:fa:d9:b6:a1:10:bf:
69:67:98:fa:80:0d:a8:70:54:11:13:13:62:2e:44:0f:0e:54:
19:7a:4d:e9:17:2e:54:33:81:72:3e:fb:66:15:14:a2:33:a9:
3f:a3:91:6d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1
Rjg4Mjc2RDMwHhcNMjQwOTA1MDYyNDUwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5NGViMS1mMjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzM20a2r1ZXCCbW+bddzo7FK0cfUZzNj8J1bdfs+HZW0rTbjJo/t4DmNKdVlP
95eG4dSdcy+qWM/nP8IWpHLgZvxaBjTcXdeTFbl1TN0sBhmeN9X/EqoPBYr7gym4
EVNJHi4fq9Mmy6hjnkIb5OHFNBcyU4d1rEJFA6ojTeLs1dH4qKyigR6lOJoIUghM
X+eR1G/JPWF0ZFYFNo991TenKnYTthfVcq4cb9T2pzk1ZalqBXEyeiF1JYU7JqVS
JE6R+NYyYRgnY0QwoK8HxUar83C7RtMkwNEtvhM19d0+rjQRTseYDzb4d3/5TtNw
3E2J6hctmrfsK9G5Oo/kOXv41wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIrjbtlA
eLqArTJdrCuzc5yygA/IMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvOERDN0I1QjI2
QjRGMTFFRkI0ODMwODY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAWLvkAwDQYJKoZIhvcNAQELBQADggEBAIDzAXxETSWEKQ6v
uUh+qMVym47ZKUgPreMRo3qbVBh5v1uKQyZER6IPlDRgNSjDhjdKne9kTFqZ6rSN
sYQhJNMR7NcJRM/EGZFQP9HdaoNdwW7GVrMGZA7LW46g0nv4Epci1/jChUQ8VOUN
pDMCjSLwwfxvHJc7XLK1vblOcR2KH/j0Jl4GJaaT6iPjJ8v68wOSRfyUjPbX/Ddu
whsw2QucQirKUGcO0GUcVYklBg3fAwOTMwy2UZHIrUc0z9A/CR0nl1F7MlZ+R8Yp
W/OZ3c/PVPrZtqEQv2lnmPqADahwVBETE2IuRA8OVBl6TekXLlQzgXI++2YVFKIz
qT+jkW0=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:38:18 2025 by rpki-client