Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C604CCE2BD3111EFB429CA4BC4F9AE02.roa
File: C604CCE2BD3111EFB429CA4BC4F9AE02.roa (raw, json)
Hash identifier: ENqZcfiBIUi3Qd1DrK07Kt+HmEtJJ4bl9E/uQPSfP9M=
Subject key identifier: B0:A5:CA:1B:AF:6E:F0:8B:91:CF:DA:D2:E7:09:CF:BE:22:DE:CD:75
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0C86
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C604CCE2BD3111EFB429CA4BC4F9AE02.roa
Signing time: Wed 18 Dec 2024 11:18:14 +0000
ROA not before: Wed 18 Dec 2024 11:18:14 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 139.190.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Dec 2024 07:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3206 (0xc86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Dec 18 11:18:14 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6762af76-2841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:c5:bb:68:e0:fe:f9:86:99:dc:f1:99:60:
a2:22:c9:a9:22:2e:ed:b3:d1:20:af:bf:ae:a4:8f:
f4:27:5e:b4:c9:78:be:5e:c1:27:03:a0:01:54:1d:
27:04:0f:64:54:d0:25:05:5d:72:14:ef:b8:f0:0e:
4b:19:d5:3d:bb:d9:2d:ef:61:af:06:6a:9e:5e:9a:
2d:93:87:83:c9:cd:3b:89:bf:ef:3f:cc:7b:e8:6c:
d4:6e:26:20:88:5e:6b:47:77:eb:e3:6e:02:6a:8c:
f3:36:c6:a5:45:83:d2:ea:2d:01:47:f2:75:1d:43:
d7:d2:6a:1a:dd:7d:13:72:fd:3c:35:3b:9b:c3:c6:
05:e3:70:ad:7c:3a:65:41:b4:46:b0:0c:3a:55:d3:
a6:de:6c:b7:b3:64:e6:2f:e6:34:e8:04:ae:56:0b:
9e:5d:dd:cb:48:f6:68:f5:ae:b7:22:07:94:11:8e:
29:98:57:78:9d:cb:5e:c6:bd:46:1e:49:c7:32:55:
36:6f:c6:55:00:00:bd:64:d3:a3:1d:c4:c8:43:13:
4d:99:98:cd:64:9f:35:ff:82:f6:22:16:9b:3f:ff:
0a:04:44:58:0a:ee:0f:af:a5:09:ca:5b:87:8c:3c:
2c:2d:24:ec:31:89:36:fd:a0:19:68:26:59:64:eb:
50:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A5:CA:1B:AF:6E:F0:8B:91:CF:DA:D2:E7:09:CF:BE:22:DE:CD:75
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C604CCE2BD3111EFB429CA4BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.40.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:97:37:fb:ea:d7:2a:e1:4b:40:f2:b4:f3:fd:8c:d3:f7:7c:
7c:f5:db:38:6f:f6:5a:04:2c:70:ab:37:d7:bd:f6:7c:31:d0:
a6:da:a2:f1:a9:49:1c:8a:a4:2a:bb:62:e6:e9:7e:cf:aa:53:
43:fb:3e:c6:03:db:d6:30:b4:c4:c2:6c:7b:40:5f:fc:c9:8c:
b5:e8:16:e9:a2:c7:8a:58:4e:a0:6f:23:d9:9e:0c:86:1b:70:
ba:2b:d3:7b:c6:78:82:a5:fa:ab:6b:2a:59:8b:d4:f2:25:90:
8c:66:30:92:9f:f5:a9:28:48:13:2f:58:b2:4b:63:48:68:15:
cb:6e:e9:9c:53:53:2a:8e:cd:57:34:14:54:b9:87:4c:a1:83:
50:77:68:51:5d:7c:db:f2:0a:30:e7:5a:f2:fc:98:de:fb:31:
a3:12:10:9a:51:38:70:22:fd:41:b2:a4:ba:24:0e:79:45:d2:
ca:37:13:af:a9:ce:4b:0e:f2:b2:c1:af:03:86:a8:ac:47:68:
81:df:f6:13:84:48:46:c8:3d:61:3a:14:35:6d:eb:b6:da:ed:
49:8d:b7:00:74:bb:c0:81:b7:d9:da:15:13:19:ff:0d:1d:ca:
c5:69:e6:d7:45:43:85:2f:e4:bc:b8:43:ad:71:8d:8d:75:e6:
e6:50:06:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:33 2025 by rpki-client