Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/A6B06B10A0EA11EB81AC5B57C4F9AE02.roa
File: A6B06B10A0EA11EB81AC5B57C4F9AE02.roa (raw, json)
Hash identifier: +6osx//mpi+3Nbnc/4TeQgxm0tpoOERlEAy6rm8VNxA=
Subject key identifier: 65:E2:5F:CE:E9:51:FA:C6:DF:88:97:0D:AC:19:47:3E:D0:B6:54:65
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0AA6
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/A6B06B10A0EA11EB81AC5B57C4F9AE02.roa
Signing time: Fri 24 May 2024 22:32:09 +0000
ROA not before: Fri 24 May 2024 22:32:09 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 35554
IP address blocks: 139.190.64.0/19 maxlen: 24
139.190.192.0/19 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 06:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2726 (0xaa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: May 24 22:32:09 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66511569-cf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:10:04:4c:43:21:53:7d:a7:e5:b6:40:99:
b1:1f:16:45:c4:c1:c0:97:2c:4e:ae:86:a4:71:82:
01:35:dd:ad:8a:b2:4e:46:b8:6a:0e:aa:6d:c5:8f:
0f:45:c1:c7:c8:bd:2a:ca:bd:c5:a7:16:b0:85:92:
76:a1:f8:c1:3c:98:2c:f6:03:f1:5d:d3:4b:be:1d:
0e:0f:07:35:95:b3:ad:4f:d9:06:47:e6:a7:e9:4a:
ce:5f:7c:51:fb:4e:a6:64:6a:74:33:0e:28:ee:8e:
39:04:71:40:00:ca:eb:2c:39:02:99:72:8f:8e:45:
61:96:14:fb:94:75:9d:0f:82:ac:32:4f:99:a8:85:
8e:e2:8f:ae:bb:f4:b7:86:03:c0:ec:30:65:54:47:
63:0b:af:b7:ba:94:f1:53:eb:4a:59:77:78:6a:2b:
47:f2:35:fb:b0:2b:66:6b:19:38:30:5f:78:01:9d:
19:ae:66:95:bc:9e:ad:ef:88:e9:d0:e4:73:38:a7:
3d:d4:a1:db:2e:79:28:0a:39:94:d8:bf:af:9b:c5:
6f:83:e8:67:15:84:6f:03:12:2b:f4:ef:f4:89:d9:
ef:df:6c:56:c3:25:14:bb:89:ec:66:e5:35:e1:b9:
d0:a2:c5:bf:17:95:f6:10:f8:46:b0:3b:81:c3:d5:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E2:5F:CE:E9:51:FA:C6:DF:88:97:0D:AC:19:47:3E:D0:B6:54:65
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/A6B06B10A0EA11EB81AC5B57C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.64.0/19
139.190.192.0/19
Signature Algorithm: sha256WithRSAEncryption
00:1a:8c:04:e7:13:31:59:f2:bd:23:67:90:55:e2:4e:f8:2d:
ac:7b:ef:2e:64:04:96:c1:00:90:34:5f:11:e5:88:07:0c:9e:
24:32:44:c8:ff:33:b9:b9:ca:01:da:f8:99:e6:2d:00:70:46:
ab:50:99:1c:f9:f7:96:e1:e9:46:df:f2:70:9d:3b:8c:b4:c7:
ad:0d:1f:8c:05:ab:e6:d8:b3:be:c2:f1:a3:6c:76:6f:18:1e:
5e:79:e6:0e:d2:49:5b:f0:e2:96:a8:e1:ea:75:21:cd:4c:55:
ab:8c:35:09:71:af:6f:c4:8a:65:ff:f9:d6:20:f7:aa:a8:55:
a8:04:c7:e7:0f:e5:55:a2:4c:4a:b7:a8:fe:30:76:c2:96:de:
18:14:70:30:d3:4f:7a:e7:17:b2:fc:a5:00:06:24:5a:a5:bc:
ec:3c:9c:cb:33:3b:d7:6b:4f:26:ee:3e:9b:1d:ac:4b:c3:70:
22:f9:3b:53:13:64:61:f6:7f:1f:14:6c:a1:33:db:56:1f:bb:
27:2c:f4:f4:c2:58:c0:b1:99:f9:b5:0e:be:73:02:b9:02:95:
88:cf:e3:c9:2b:b7:30:cb:fa:cd:4e:38:0d:97:7b:8e:22:a3:
a2:8e:0a:64:e4:2f:af:22:29:d5:3b:1a:52:f1:a6:0f:a3:36:
ee:dd:cc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:37 2025 by rpki-client