Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/E7D1ED3CB0A711EFBCADE47FC4F9AE02.roa
File: E7D1ED3CB0A711EFBCADE47FC4F9AE02.roa (raw, json)
Hash identifier: WBjNPL8Obd3xYZAvKZPGhqIYjITw0ucPM3iB9Ild8Rs=
Subject key identifier: 70:60:08:DD:83:71:13:B0:3C:66:3A:57:B3:B4:49:19:18:02:DE:2A
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0C61
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/E7D1ED3CB0A711EFBCADE47FC4F9AE02.roa
Signing time: Fri 06 Dec 2024 06:16:11 +0000
ROA not before: Fri 06 Dec 2024 06:16:11 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.0.0/21 maxlen: 24
139.190.32.0/19 maxlen: 19
139.190.56.0/22 maxlen: 22
139.190.68.0/22 maxlen: 24
139.190.80.0/21 maxlen: 24
139.190.88.0/21 maxlen: 24
139.190.124.0/24 maxlen: 24
139.190.125.0/24 maxlen: 24
139.190.126.0/24 maxlen: 24
139.190.127.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Dec 2024 12:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3169 (0xc61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Dec 6 06:16:11 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=675296aa-880d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:76:47:d2:c4:2f:3e:e7:27:23:3b:d1:04:
97:a9:b9:fd:4e:ff:db:c2:de:a5:99:5a:75:3f:0c:
35:71:c3:88:38:9b:eb:6e:ae:5b:4f:ba:e3:d8:63:
9e:d9:73:8f:81:da:ab:67:15:b7:c8:c1:e6:ac:5f:
1c:76:e6:5e:3c:c3:e9:1e:12:fe:ec:8d:7a:0f:e9:
6e:1a:20:b1:3e:fc:a9:ea:99:0e:3e:a6:16:06:32:
7e:d0:2d:fd:db:be:2b:51:8d:a5:ae:ef:24:60:8f:
b8:4b:1c:b7:e3:47:54:b0:7c:a6:28:f3:ae:96:87:
20:f8:13:cc:ff:ca:0e:04:50:1f:b4:a0:c4:7d:0a:
32:93:d1:d3:06:ca:d7:ab:61:b5:19:ff:fd:83:d9:
34:af:3b:0a:6f:23:6c:39:b0:14:da:af:7d:dd:01:
ad:9f:35:de:e4:39:98:5c:00:a2:4c:31:92:66:ad:
59:3e:21:be:10:d1:2c:7a:97:b1:ec:93:75:17:fd:
dd:77:a0:c6:19:cc:25:bb:bf:1d:ee:bb:a8:3c:2b:
96:38:be:62:fe:86:54:71:ae:26:84:fc:6d:7f:c6:
52:72:da:3c:b2:2e:36:d6:74:dc:6e:64:2b:6f:a1:
be:c2:38:7f:9a:42:73:7f:20:63:b7:bd:d7:d4:ee:
a8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:60:08:DD:83:71:13:B0:3C:66:3A:57:B3:B4:49:19:18:02:DE:2A
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/E7D1ED3CB0A711EFBCADE47FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/21
139.190.32.0/19
139.190.68.0/22
139.190.80.0/20
139.190.124.0/22
139.190.239.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:55:53:fa:e1:df:46:0b:aa:ad:3c:87:48:d7:d1:1e:46:d5:
39:1d:c4:f9:ae:01:02:bc:1c:44:1d:03:b0:f6:00:20:5c:4d:
00:9b:ca:38:21:f2:f4:c2:fb:0a:c0:7d:ae:ff:05:e2:c2:90:
10:1d:bb:df:8c:e8:64:02:c8:34:76:6c:b9:10:e9:d1:dc:28:
e5:90:15:62:e2:36:5b:55:1a:25:1b:ec:26:a3:c6:59:0e:a8:
67:e5:b5:ed:4f:9d:91:f6:61:1d:5a:53:c7:ea:68:ab:8c:d0:
ab:90:5b:ec:e0:8f:47:0e:95:a1:f9:46:86:eb:1f:d8:b9:82:
d1:a5:57:d9:10:c6:75:45:02:2f:df:37:de:4b:60:3b:8a:15:
1e:ad:17:3f:24:90:9d:da:fc:f4:2f:a1:f6:21:87:93:e4:b8:
a3:26:a9:95:76:28:ea:b0:75:4b:af:8c:9f:f9:83:e3:ff:3a:
e5:8b:ea:76:15:9d:f1:46:03:d7:11:14:08:82:16:23:1f:ca:
c7:f8:f3:fd:38:a8:26:ff:cf:25:69:1d:71:4b:94:dd:f4:60:
30:2d:27:19:4d:4e:c6:e4:4f:97:9b:0c:f4:cc:95:b8:eb:79:
a2:db:cc:f7:0c:12:94:16:32:3b:d5:e6:0c:d0:5c:56:a0:95:
86:b9:87:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:40 2025 by rpki-client