Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/9AAEFEC2DE4711EBBE4D926EC4F9AE02.roa
File: 9AAEFEC2DE4711EBBE4D926EC4F9AE02.roa (raw, json)
Hash identifier: b681trfv+UJ5tncG++XqbLKgcw52JPu5SvJMhNiDsBs=
Subject key identifier: 5A:00:96:27:5D:E9:34:92:61:B7:21:93:AC:F1:30:17:58:71:ED:12
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 068D
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/9AAEFEC2DE4711EBBE4D926EC4F9AE02.roa
Signing time: Wed 01 Jun 2022 11:27:08 +0000
ROA not before: Wed 01 Jun 2022 11:27:07 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 54600
IP address blocks: 139.190.112.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1677 (0x68d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Jun 1 11:27:07 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62974d0b-5f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cf:9d:bc:29:e5:9e:e3:41:3a:4d:01:b2:5f:
6c:0d:d9:ef:40:0e:98:77:38:e0:b7:dc:70:18:1b:
50:d1:ed:07:10:4d:9c:b0:68:7b:8d:a6:7c:cc:fe:
6d:55:34:0d:ad:7a:5f:e2:bd:c5:d2:60:0f:7f:59:
fb:dc:f8:a3:8d:df:1d:9c:33:fa:c9:a2:fa:bc:fa:
2b:e3:59:b8:1a:00:c1:dd:ab:72:21:93:96:16:29:
61:0e:cf:f0:da:55:91:99:d0:fc:05:3d:04:34:ce:
ad:74:f5:82:69:44:cf:fb:16:68:15:bb:9a:1d:3e:
65:6c:c7:eb:13:5d:21:b6:a6:4b:54:44:fa:25:be:
a3:1a:9b:1d:3f:6b:d1:0d:66:3b:e0:86:c9:14:77:
d0:f6:98:30:8b:c0:85:81:ad:11:ae:ed:9a:42:48:
77:90:b8:d2:2b:06:c7:ca:d0:5f:9e:97:21:99:30:
72:7d:18:2f:ac:11:ba:24:40:3a:2d:ff:ed:9d:4a:
16:aa:1b:cc:d4:8f:62:36:49:c4:01:74:2b:e0:34:
0d:00:ba:17:a9:3a:3b:bf:b8:3f:25:0b:d4:6b:8a:
43:d2:ab:88:12:d0:82:a0:be:09:f0:b3:2a:6d:96:
70:3a:45:3d:6a:a3:ce:4b:71:07:66:b5:c5:7d:6e:
50:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:00:96:27:5D:E9:34:92:61:B7:21:93:AC:F1:30:17:58:71:ED:12
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/9AAEFEC2DE4711EBBE4D926EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.112.0/20
Signature Algorithm: sha256WithRSAEncryption
14:4c:80:a8:4d:a6:10:cc:42:9a:bd:94:08:73:88:2a:13:3f:
ef:b4:34:5a:5e:d7:44:90:85:1e:c3:19:9d:fb:30:39:d1:62:
eb:4e:36:3a:2f:ab:89:e1:79:64:f5:a7:7b:ec:96:90:37:53:
2c:fe:66:e1:22:f4:04:0a:d6:d9:21:4d:a4:8a:b7:45:5a:81:
2c:d7:e5:5b:27:6c:ac:8a:02:55:47:21:d2:dc:56:8c:bb:55:
35:d2:39:e2:30:a2:72:89:62:31:32:67:63:bc:18:33:a2:5e:
a4:cf:54:15:ab:29:4b:76:a1:a5:47:4d:88:e8:78:7f:09:27:
cb:a8:55:a2:04:21:bd:f4:b7:4d:35:26:2b:b2:e6:eb:bd:10:
20:79:78:6b:a0:1d:02:24:77:59:79:d4:d3:2b:3c:8a:31:ac:
f9:aa:8e:02:1c:1f:1a:66:6a:18:e3:28:bb:59:c0:22:61:c0:
f4:17:08:b6:de:76:38:f5:8c:fc:f7:06:35:81:b9:2e:b1:a4:
46:d3:de:04:42:98:b6:57:94:bd:39:b6:59:91:a2:fc:46:8a:
9f:88:b4:ec:8b:e8:8d:05:33:d5:76:5e:75:91:5c:aa:93:bb:
3b:90:e4:1a:3a:48:6e:f3:08:52:1d:29:bb:93:d7:bd:a0:19:
30:2c:9a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org