Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/D7832D285E1911EFAF14F043C4F9AE02.roa
File: D7832D285E1911EFAF14F043C4F9AE02.roa (raw, json)
Hash identifier: 0Y5EEHSCfc6WqZjyBYTi+TrNnPIkoSnd3Pd4e2yDCF4=
Subject key identifier: 95:FD:8F:9D:4B:F1:7D:11:6A:D3:64:5D:36:FB:F0:9A:26:53:09:2D
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0B03
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/D7832D285E1911EFAF14F043C4F9AE02.roa
Signing time: Mon 19 Aug 2024 10:57:35 +0000
ROA not before: Mon 19 Aug 2024 10:57:35 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 139.190.32.0/22 maxlen: 24
139.190.240.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 05 Nov 2024 13:23:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2819 (0xb03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Aug 19 10:57:35 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66c3251f-e908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:e8:83:71:46:67:9e:6b:6d:0c:40:a7:ef:
79:5b:e5:52:48:9b:ee:14:8f:ff:b1:dd:6d:82:f3:
83:10:35:4a:0a:90:97:7a:2a:df:34:2f:65:bc:c3:
50:66:d5:5e:b4:d8:c5:c8:0e:c1:26:da:e1:14:94:
54:d1:73:bb:7a:fc:43:a7:be:2f:d1:fd:86:b5:02:
3c:f4:ea:d4:d4:fa:75:ef:31:c7:7d:03:a2:ef:29:
e7:89:f9:9e:e2:c7:e3:34:4b:49:56:55:b3:d9:3a:
6c:bc:60:54:08:58:54:9a:58:ca:40:b7:06:a4:42:
3b:7a:ab:4b:2a:d0:ee:5b:ce:e9:d6:3d:14:89:1c:
8a:cc:8c:7b:a7:40:41:8e:e7:3f:3d:d6:06:9a:6f:
8b:21:79:e8:8b:fa:dc:af:05:c4:5c:e1:5b:42:74:
13:1a:b1:2a:74:0c:aa:ff:a1:03:f5:32:4d:6b:e1:
97:95:d1:d1:78:10:35:7f:d2:f3:d0:93:c5:12:54:
14:51:f2:78:74:4c:51:d1:52:29:b0:40:c8:26:2b:
d6:a5:58:5c:29:ca:ac:ee:db:15:ec:d0:38:5f:2e:
44:fc:c0:71:1a:6f:0f:a9:9a:8c:70:86:b7:ba:49:
c1:06:53:98:aa:69:7f:be:c6:e9:08:e2:d7:ad:86:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FD:8F:9D:4B:F1:7D:11:6A:D3:64:5D:36:FB:F0:9A:26:53:09:2D
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/D7832D285E1911EFAF14F043C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.32.0/22
139.190.240.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:fa:15:62:6d:b4:28:ea:d2:5f:b4:72:b3:5e:35:1c:b4:7c:
cb:f2:1f:86:d9:fd:14:cf:37:fb:2c:f3:12:0f:a0:d9:17:d3:
b1:f2:c0:fd:02:95:3a:ce:c7:3d:ad:49:8e:5d:97:84:29:c7:
28:1c:fb:9c:67:d9:41:5b:90:45:af:83:92:f8:33:0f:5c:09:
32:5b:f9:52:09:dc:0b:7e:cf:1a:f0:b8:ff:fc:6c:6a:a4:25:
07:47:36:62:7b:fa:90:94:0a:14:37:5a:57:eb:0d:43:f6:90:
b4:70:4c:a1:76:05:c9:8f:0f:50:74:3c:c6:f4:f6:a8:17:8b:
8e:b0:fb:4b:8b:38:03:57:8b:81:fe:bd:89:ba:fd:2b:68:4c:
a8:8c:42:be:96:b8:53:8b:39:9b:b0:c6:a5:51:f7:23:e5:f1:
2a:e3:be:de:97:b0:d3:d7:84:82:7f:a8:03:40:88:7f:de:92:
c9:7b:eb:a7:6a:8e:11:da:7b:61:57:e4:e8:1f:8d:1e:2b:32:
5f:ab:5b:5d:d4:99:89:9f:17:91:3d:27:94:ad:94:32:78:b6:
a9:3e:87:35:be:e5:8d:44:2c:c5:b4:0d:92:46:09:86:20:9a:
4f:e6:8b:23:9c:8f:23:75:79:ad:11:4d:32:d1:5e:37:73:e9:
0f:cd:20:a7
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1
Rjg4Mjc2RDMwHhcNMjQwODE5MTA1NzM1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmMzMjUxZi1lOTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvLrog3FGZ55rbQxAp+95W+VSSJvuFI//sd1tgvODEDVKCpCXeirfNC9lvMNQ
ZtVetNjFyA7BJtrhFJRU0XO7evxDp74v0f2GtQI89OrU1Pp17zHHfQOi7ynnifme
4sfjNEtJVlWz2TpsvGBUCFhUmljKQLcGpEI7eqtLKtDuW87p1j0UiRyKzIx7p0BB
juc/PdYGmm+LIXnoi/rcrwXEXOFbQnQTGrEqdAyq/6ED9TJNa+GXldHReBA1f9Lz
0JPFElQUUfJ4dExR0VIpsEDIJivWpVhcKcqs7tsV7NA4Xy5E/MBxGm8PqZqMcIa3
uknBBlOYqml/vsbpCOLXrYaCLwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJX9j51L
8X0RatNkXTb78JomUwktMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRDc4MzJEMjg1
RTE5MTFFRkFGMTRGMDQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAKLviADBASLvvAwDQYJKoZIhvcNAQELBQADggEBABv6FWJt
tCjq0l+0crNeNRy0fMvyH4bZ/RTPN/ss8xIPoNkX07HywP0ClTrOxz2tSY5dl4Qp
xygc+5xn2UFbkEWvg5L4Mw9cCTJb+VIJ3At+zxrwuP/8bGqkJQdHNmJ7+pCUChQ3
WlfrDUP2kLRwTKF2BcmPD1B0PMb09qgXi46w+0uLOANXi4H+vYm6/StoTKiMQr6W
uFOLOZuwxqVR9yPl8Srjvt6XsNPXhIJ/qANAiH/eksl766dqjhHae2FX5OgfjR4r
Ml+rW13UmYmfF5E9J5StlDJ4tqk+hzW+5Y1ELMW0DZJGCYYgmk/miyOcjyN1ea0R
TTLRXjdz6Q/NIKc=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:22 2025 by rpki-client