Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/8F081F529C2811EF9FFD7525C4F9AE02.roa
File: 8F081F529C2811EF9FFD7525C4F9AE02.roa (raw, json)
Hash identifier: TOLThr0mpuEzUnWstTP26rOLQs8ztZanxhRjyN3dyvo=
Subject key identifier: 37:5D:0C:EC:D3:0A:48:26:87:B1:6D:32:6B:27:DE:3F:8C:03:C5:1E
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0BBE
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/8F081F529C2811EF9FFD7525C4F9AE02.roa
Signing time: Sun 10 Nov 2024 11:47:27 +0000
ROA not before: Sun 10 Nov 2024 11:47:27 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.0.0/19 maxlen: 19
139.190.32.0/20 maxlen: 20
139.190.48.0/20 maxlen: 20
139.190.56.0/22 maxlen: 22
139.190.235.0/24 maxlen: 24
139.190.238.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3006 (0xbbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Nov 10 11:47:27 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67309d4f-ab4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:a6:3a:80:e2:eb:82:92:43:c4:c4:50:d4:
dd:22:32:9b:d4:f6:b7:f5:49:a1:b2:da:ce:1d:46:
79:b7:df:62:78:e0:1d:a0:00:36:05:db:bb:6d:4e:
ac:39:b8:69:6c:da:e5:54:29:f8:5b:96:3f:b3:6d:
eb:e8:1d:38:dd:c6:a0:d0:30:ec:29:fc:96:83:39:
ab:09:fd:b1:b4:32:00:02:3a:b9:f1:8b:81:10:91:
16:6c:2b:43:6f:16:24:22:5e:d1:1c:69:a8:c0:d6:
c1:2f:e0:af:d1:76:62:dd:1a:cb:49:42:38:56:58:
16:fb:44:2d:80:6e:85:19:ff:c4:4c:77:4c:4f:5c:
db:db:5f:3c:90:7d:e6:98:9a:71:c9:b4:51:c1:8b:
1c:94:de:ba:4a:fd:eb:92:6e:b0:70:76:0e:af:88:
db:52:df:81:77:58:7f:99:dc:83:bb:3b:a4:92:f2:
68:e9:3a:18:0a:46:4f:a2:e0:da:de:10:5c:54:25:
c7:72:80:ab:af:ed:17:64:c8:84:f3:c8:68:5f:39:
01:81:80:cf:28:2d:05:6e:60:f5:fc:b0:b3:10:14:
d9:24:c1:70:6b:66:d7:09:dc:67:04:a8:53:29:e1:
6e:63:6c:29:f5:fe:6f:52:33:f2:13:4e:d8:17:45:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5D:0C:EC:D3:0A:48:26:87:B1:6D:32:6B:27:DE:3F:8C:03:C5:1E
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/8F081F529C2811EF9FFD7525C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/18
139.190.235.0/24
139.190.238.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:9d:b1:91:f6:df:b8:d1:bf:c7:52:26:1e:22:7d:4c:b8:42:
b5:93:a9:f7:9a:d1:05:fc:95:68:60:60:d2:58:dd:7c:00:9d:
72:a0:34:1b:76:ae:6f:66:5e:e4:e2:e0:7a:75:06:77:25:f8:
55:f2:be:9f:ae:10:e3:41:33:20:79:e7:9d:eb:a2:f6:5f:e8:
92:15:ac:10:55:c6:fe:fc:5d:f3:16:14:f3:e8:d0:40:d9:bc:
13:70:39:c0:3d:85:b5:02:02:9c:f5:a2:df:9e:eb:ba:b3:ce:
8e:5f:45:05:a4:53:81:3c:25:de:f8:3d:e7:08:4c:e9:f6:e0:
65:34:e4:0f:92:24:8e:bd:b0:9a:41:5c:55:0d:f8:b7:63:29:
d1:d8:ab:1c:5b:78:21:62:40:df:32:21:e0:2e:fb:4d:55:ef:
d7:41:40:dc:cd:7d:15:94:e7:8d:0f:9c:e2:66:f8:14:41:ca:
56:fb:b4:ac:2b:76:20:34:f6:62:a5:a8:54:f2:e7:f1:cc:ab:
82:2c:bc:fe:bb:04:ac:0d:f5:a0:a3:b9:8d:4a:e4:3d:26:fb:
32:ff:51:96:01:ea:20:94:4e:38:e4:0a:1e:0e:ea:61:a2:a7:
88:98:16:43:de:58:76:ba:bd:1a:0d:ad:13:6c:da:fb:bf:c8:
54:4c:81:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:29 2025 by rpki-client