Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/B01BF8CA386511EFAF9EB41FC4F9AE02.roa
File: B01BF8CA386511EFAF9EB41FC4F9AE02.roa (raw, json)
Hash identifier: RR8UZZPnlr3jPJAjINnJ6+MCXmtA5VLBqMrISnRqNmA=
Subject key identifier: 23:4D:E4:81:73:6D:E4:90:42:DE:FC:E8:52:DB:4A:16:DB:A1:5D:51
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0AD5
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/B01BF8CA386511EFAF9EB41FC4F9AE02.roa
Signing time: Tue 02 Jul 2024 11:24:47 +0000
ROA not before: Tue 02 Jul 2024 11:24:47 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 10753
IP address blocks: 139.190.6.0/24 maxlen: 24
139.190.7.0/24 maxlen: 24
139.190.36.0/22 maxlen: 24
139.190.40.0/22 maxlen: 24
139.190.48.0/22 maxlen: 24
139.190.96.0/22 maxlen: 24
139.190.104.0/22 maxlen: 24
139.190.108.0/22 maxlen: 24
139.190.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 10:40:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2773 (0xad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jul 2 11:24:47 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6683e37f-6cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:59:05:f9:c2:9f:84:93:4b:88:6f:a3:e8:
7e:05:2d:01:f3:9f:1b:3e:13:c4:7f:76:28:51:e4:
55:e6:27:ff:b4:5e:04:34:ee:80:d9:4d:3a:49:93:
f4:18:64:cd:b6:88:54:14:72:7d:e6:10:e6:55:b6:
08:df:fe:d6:8e:b6:7d:49:6b:4b:bf:f5:8d:7f:60:
31:71:6f:1b:1d:05:59:d8:61:24:54:2d:a6:10:77:
70:a8:dc:68:3f:aa:08:8a:6c:62:ed:08:45:0c:b0:
da:e0:b0:09:06:0a:bc:8f:05:78:ac:38:7d:b2:08:
19:f9:c6:22:77:58:75:6c:b5:19:80:81:b3:c8:2a:
ab:8a:c4:20:04:d9:f6:73:53:06:c1:fd:77:91:10:
61:7b:7d:d2:a5:b8:c7:64:08:10:ea:07:ac:3d:a5:
94:39:97:0d:e9:c7:5e:8c:45:29:34:ba:d1:49:10:
31:70:36:2d:1c:a0:93:64:fb:50:a4:48:21:08:46:
91:cd:83:6a:34:19:97:17:9e:d5:6a:32:0e:96:7a:
69:3d:c3:ce:f6:11:ab:94:14:e6:cf:53:73:36:34:
1b:17:cb:64:c6:45:81:9f:26:cf:56:22:ca:59:d2:
46:27:76:3f:6e:2c:2a:6f:18:9d:9d:48:67:b1:fc:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4D:E4:81:73:6D:E4:90:42:DE:FC:E8:52:DB:4A:16:DB:A1:5D:51
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/B01BF8CA386511EFAF9EB41FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.6.0/23
139.190.36.0-139.190.43.255
139.190.48.0/22
139.190.96.0/22
139.190.104.0/21
139.190.120.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:9c:e2:c6:4b:39:ef:80:b4:e5:8e:bf:7c:c2:d0:4b:06:79:
83:06:d4:51:62:f6:69:d1:82:5a:d6:db:01:8b:6f:2e:56:1e:
d1:d4:63:9f:4c:b9:83:80:fe:ec:df:ef:0d:30:13:d9:f7:61:
87:b5:92:42:c4:0e:d3:63:aa:5c:61:1e:25:73:8c:69:21:fb:
dd:53:0f:a8:fd:57:b7:73:19:48:81:82:70:4b:02:03:52:20:
36:16:f5:a3:72:0e:f2:c8:b9:58:b4:54:21:d4:a4:22:86:07:
df:a5:1a:64:69:1e:53:7e:f8:d8:2c:84:7e:d9:97:3f:ff:c4:
ee:b7:ab:17:13:27:0f:05:25:e8:30:28:dd:19:5d:07:b5:7b:
ce:69:f7:2a:d5:8d:e2:fd:a6:23:b0:86:4a:fc:b8:09:ed:fb:
a9:3a:a3:23:47:72:9d:24:15:06:58:e5:91:1c:2a:52:b0:e9:
30:36:b0:b3:b6:9d:01:1c:dc:e9:45:2c:08:12:e9:73:d9:72:
52:3b:37:20:10:59:55:ef:04:e8:37:7d:d6:4f:15:34:6e:e5:
65:7b:5f:aa:e9:de:b1:ee:22:e5:3d:84:5e:51:fc:2c:8d:72:
9a:82:b8:e8:12:27:69:91:50:40:69:34:0e:e2:16:30:ab:2d:
ba:f7:93:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:22 2025 by rpki-client