Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/DBE57B2AED0011EFA508B447C4F9AE02.roa
File: DBE57B2AED0011EFA508B447C4F9AE02.roa (raw, json)
Hash identifier: QxKXLAzpavUDpaFPm4WZ/wtIHLNpik/BI4ommWRFVu8=
Subject key identifier: A8:7F:72:E0:68:34:EB:9F:1C:A0:64:BD:2C:B0:3C:80:73:35:39:1C
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0EBF
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/DBE57B2AED0011EFA508B447C4F9AE02.roa
Signing time: Mon 17 Feb 2025 07:37:55 +0000
ROA not before: Mon 17 Feb 2025 07:37:55 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 36352
IP address blocks: 139.190.19.0/24 maxlen: 24
139.190.21.0/24 maxlen: 24
139.190.22.0/24 maxlen: 24
139.190.23.0/24 maxlen: 24
139.190.29.0/24 maxlen: 24
139.190.235.0/24 maxlen: 24
139.190.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 07:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3775 (0xebf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Feb 17 07:37:55 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67b2e752-dc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:6e:bb:c6:7f:d1:4d:21:ca:12:04:29:0d:
90:7c:f9:88:61:35:ac:42:c0:e4:1a:43:14:ce:d7:
9c:14:da:06:e6:bd:f0:6d:8b:53:df:5a:c5:d4:8c:
3b:4c:87:0f:ea:b1:7d:b7:d4:47:14:c6:2a:68:93:
c6:99:5c:fb:8f:29:b6:c7:63:2e:bb:18:3e:f5:90:
75:7f:8c:8b:1a:51:33:a7:3a:3c:7d:2a:7d:38:b3:
90:24:be:67:c4:20:84:4b:fe:97:64:c7:73:a2:96:
ae:65:a9:a7:76:53:77:5d:c6:27:c2:81:b4:89:51:
4f:6e:a5:99:e3:74:30:a4:9a:6f:cc:95:f5:e9:50:
42:23:2d:e0:00:2f:ff:9c:35:d9:30:c4:a7:44:a2:
40:d6:d3:4c:ee:41:af:a7:76:f6:89:fd:eb:8b:9c:
5b:7d:0e:37:7e:0b:f4:2f:1d:23:1e:c7:be:3c:a9:
c6:14:84:72:ab:b3:aa:0f:e1:05:4b:a5:d8:52:90:
39:12:09:05:9e:05:b3:cc:f7:46:1f:9c:2e:9e:cd:
95:f3:5a:ea:64:d0:6b:05:4e:38:c9:29:ad:4c:66:
34:0c:7f:c4:67:18:28:31:d5:5a:cc:81:6f:32:9f:
b7:7e:a2:4f:cd:0f:f4:6c:14:b6:0c:fb:fd:1e:3d:
26:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7F:72:E0:68:34:EB:9F:1C:A0:64:BD:2C:B0:3C:80:73:35:39:1C
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/DBE57B2AED0011EFA508B447C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.19.0/24
139.190.21.0-139.190.23.255
139.190.29.0/24
139.190.235.0/24
139.190.238.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c1:9a:94:a8:b1:85:26:ec:88:4e:96:88:0f:c7:85:d8:83:
bc:dc:0e:6f:f3:79:c9:c6:a0:fa:11:a4:46:b6:ce:07:a7:9c:
f8:30:e4:76:a8:b4:aa:bb:07:20:16:e2:54:4f:29:7c:c0:1e:
14:fa:07:4c:d5:2f:3b:72:74:2b:be:84:98:f7:a8:e7:83:9d:
b7:1a:10:f8:8e:9c:28:6e:00:78:10:76:8f:af:02:c0:ed:ec:
8a:11:f0:03:60:48:f5:0f:ca:b5:64:25:30:d3:61:38:56:35:
05:eb:ae:6f:b2:53:e9:4b:97:49:57:cc:24:23:f4:c8:23:2b:
d2:8f:a8:e2:5f:7b:10:14:52:83:12:c8:47:91:a4:4d:58:5b:
7b:fb:ae:c8:85:3b:9a:be:b7:cb:42:ae:76:22:42:4d:54:eb:
55:64:84:24:dc:56:18:72:90:d8:72:ab:1a:ea:ca:d9:09:17:
7c:3e:e4:18:e9:20:d1:ca:cc:52:39:e4:09:9a:03:86:fb:2f:
46:b6:7d:26:62:e8:ce:e4:7f:42:dd:8a:0f:e4:c3:90:0d:03:
c0:23:26:31:a5:18:bc:9c:17:ad:95:e0:55:96:5a:4e:a9:7a:
34:04:31:a7:ec:0d:85:4f:37:a0:02:b7:b4:0b:55:c0:29:37:
4b:7d:f1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:48:09 2025 by rpki-client