Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/E63DA008AE4D11EFB0C4E435C4F9AE02.roa
File: E63DA008AE4D11EFB0C4E435C4F9AE02.roa (raw, json)
Hash identifier: jES+5nXZHQgowt6CC2x+P6cqrK9zTGq47KSQXtinx0Q=
Subject key identifier: FE:53:34:01:AF:60:70:4A:1E:B2:25:79:84:4F:43:B0:75:E5:B4:E9
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0C3B
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/E63DA008AE4D11EFB0C4E435C4F9AE02.roa
Signing time: Fri 29 Nov 2024 12:37:37 +0000
ROA not before: Fri 29 Nov 2024 12:37:37 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 139.190.235.0/24 maxlen: 24
139.190.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Dec 2024 10:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3131 (0xc3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Nov 29 12:37:37 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6749b590-5315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:01:77:df:ed:91:0c:08:1b:12:95:ee:00:98:
5d:cb:b1:c3:cb:f3:54:a9:ad:80:5c:f0:c8:2d:9a:
1d:81:f5:bb:8e:a3:21:d8:88:4a:71:62:e8:7c:93:
3c:74:f1:c5:6a:06:bf:27:95:6d:4c:0a:af:d2:88:
42:ff:bc:fb:1b:65:16:c3:dc:7c:d5:94:10:9f:0d:
25:b9:92:12:05:5c:58:2d:70:cb:bf:ee:51:36:83:
05:03:a7:93:fe:24:71:f5:08:95:d0:32:1a:17:77:
af:4f:f7:46:7f:18:c0:ce:43:03:c6:45:f4:e5:8b:
79:75:47:df:45:f9:80:43:33:e4:b4:54:93:68:59:
ca:69:26:32:e2:63:a8:ff:e9:e1:03:2e:55:d8:58:
c1:a6:61:8a:b5:5b:d6:a7:95:b7:31:06:71:5c:9e:
02:d6:50:23:05:9c:91:dd:42:47:2c:3b:35:26:57:
f1:8a:8a:4a:75:ee:0c:6d:97:1a:08:75:d7:ca:fd:
6b:62:81:6e:ea:2b:55:af:79:b4:cf:e2:60:2b:33:
c1:45:37:5e:ca:26:0a:24:d5:00:09:df:bd:e8:36:
e8:9b:ca:ab:ac:41:81:ad:77:b7:83:e7:d3:df:84:
bf:ca:aa:7b:2d:e5:96:a5:01:a3:09:1a:4e:e1:73:
87:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:53:34:01:AF:60:70:4A:1E:B2:25:79:84:4F:43:B0:75:E5:B4:E9
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/E63DA008AE4D11EFB0C4E435C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.235.0/24
139.190.238.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:da:62:fd:03:4e:58:28:fa:2a:40:e0:9a:f2:a1:a1:15:14:
ad:5b:33:16:08:75:a5:2f:f4:9c:1e:b1:56:17:7a:de:45:d8:
07:9d:50:a6:54:e5:5b:b5:34:f5:c1:42:a6:1a:f0:1b:f9:e7:
89:03:40:bf:a3:59:4f:e1:a7:1a:e5:00:20:fa:b4:bc:37:19:
ab:83:86:72:c4:5e:31:28:6e:54:7a:28:4c:97:a8:29:98:08:
db:c6:e4:37:b5:15:de:c1:11:5e:5f:b7:a0:a3:e8:d1:17:53:
ca:2a:81:9b:88:e7:41:43:8d:f0:82:55:3e:d4:4b:65:3d:48:
80:65:ff:d7:02:1c:82:76:68:c1:96:f2:43:b3:fb:e5:29:97:
76:c5:5a:80:50:8a:c8:e6:e8:42:6e:d0:2e:1e:c5:25:5d:89:
ce:6b:c2:86:b3:35:b4:ca:4f:ba:0e:c9:2b:4a:43:5c:59:f0:
02:8c:61:34:f9:e0:d3:f9:74:12:12:61:a1:f3:d0:3e:71:f8:
50:9d:85:c3:00:35:03:55:70:40:2b:3e:c2:c3:80:94:29:90:
53:be:34:8c:6e:7a:88:ea:a1:c5:ef:92:ff:ee:5e:d4:12:94:
10:d4:68:09:bf:e0:dd:f1:2c:3a:c6:dd:d1:0f:94:be:fd:f6:
58:52:3d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:47 2025 by rpki-client