Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/EA191294F37011EF9BE3BD6CC4F9AE02.roa
File: EA191294F37011EF9BE3BD6CC4F9AE02.roa (raw, json)
Hash identifier: HXL9FUwIPWkWfexEM2B06Oa0mpWjY/Q03CzNPM39bvQ=
Subject key identifier: 58:95:0C:34:81:73:F8:33:13:68:4B:C3:A5:3C:69:2A:AC:7B:75:E5
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0F29
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/EA191294F37011EF9BE3BD6CC4F9AE02.roa
Signing time: Tue 25 Feb 2025 12:22:28 +0000
ROA not before: Tue 25 Feb 2025 12:22:28 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 139.190.8.0/24 maxlen: 24
139.190.13.0/24 maxlen: 24
139.190.15.0/24 maxlen: 24
139.190.17.0/24 maxlen: 24
139.190.20.0/24 maxlen: 24
139.190.24.0/22 maxlen: 22
139.190.30.0/24 maxlen: 24
139.190.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 11:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3881 (0xf29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Feb 25 12:22:28 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67bdb604-c435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:a8:4c:20:60:d5:b8:91:8c:45:a1:01:d9:
82:80:08:97:09:64:27:ff:a1:4c:3b:65:eb:bb:31:
92:52:e4:eb:c9:26:c0:80:94:de:0d:d2:86:a4:4a:
bb:f4:c2:9e:cd:77:c1:31:1c:b2:b7:75:1f:b7:61:
04:69:2b:b8:b2:20:3f:47:ac:e6:1f:ff:f5:5e:d3:
ef:ca:45:34:1f:3b:40:7e:79:e2:a0:c8:e8:ce:d4:
d0:15:38:37:03:fe:42:9a:76:a9:e4:c4:5f:5e:63:
ec:da:6b:5f:f1:92:1d:35:e9:f0:11:dc:49:ad:7d:
cb:ad:d2:c4:e2:b0:90:7d:99:73:7c:75:5b:43:fd:
d2:cc:3e:10:86:a7:ad:19:88:d3:3a:b6:e9:38:26:
9a:6c:e1:56:6a:62:2d:1a:aa:df:07:22:b2:66:10:
48:b6:8f:c3:a4:dc:0d:9d:65:27:55:5e:d0:64:59:
76:6f:07:15:75:46:59:0b:e9:5a:dd:7f:0c:4c:a0:
8f:52:25:26:55:79:88:3c:12:72:91:a5:a6:65:e0:
c3:9f:bc:0e:cc:ca:e0:ae:6b:04:be:d1:12:a5:14:
15:d7:aa:5f:ca:97:da:6c:95:78:26:d9:ed:c3:7e:
fb:df:76:02:8d:08:58:49:5f:79:83:f4:c0:67:d7:
3b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:95:0C:34:81:73:F8:33:13:68:4B:C3:A5:3C:69:2A:AC:7B:75:E5
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/EA191294F37011EF9BE3BD6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.8.0/24
139.190.13.0/24
139.190.15.0/24
139.190.17.0/24
139.190.20.0/24
139.190.24.0/22
139.190.30.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:f3:91:9a:f6:b1:dc:97:85:12:48:8d:3e:66:78:dc:a4:39:
c8:74:b2:65:a6:81:a1:33:aa:bb:51:f2:53:ef:8c:ef:17:d2:
ed:3a:2b:10:a0:2e:96:67:11:ab:f2:50:2e:39:5c:56:28:33:
cd:c3:3a:34:b5:c0:53:d9:3d:92:f2:eb:6f:37:bc:7a:f7:b5:
b4:e7:36:fd:3f:f0:12:b6:70:4f:14:ba:5a:57:47:fd:61:2d:
80:1a:90:ca:62:6c:48:5c:1a:83:ec:b8:3e:44:ba:9a:0a:34:
b8:d0:f1:02:b4:4b:6d:2d:ec:d0:05:7e:dc:ea:2c:1e:01:83:
8c:32:e9:af:63:fe:63:5c:39:be:f3:4c:b7:e5:15:e6:23:41:
14:cd:43:de:87:24:aa:33:ee:11:f2:99:25:50:c1:6e:6a:cc:
67:e5:3a:a9:e6:70:54:7a:b5:b8:40:e4:8f:c7:82:b6:17:62:
94:db:8b:1c:37:9b:8f:f9:13:84:31:c2:d8:4e:9b:37:d9:58:
d2:de:c0:d4:a8:4f:bb:6b:e5:52:d2:dc:fe:66:1e:34:10:1d:
fb:a1:b6:27:ab:29:38:06:82:4c:28:78:00:62:e6:60:22:dd:
09:51:8e:e0:9e:62:99:3b:bd:d6:d1:d9:86:aa:36:c4:bf:be:
21:cf:64:dc
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgICDykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1
Rjg4Mjc2RDMwHhcNMjUwMjI1MTIyMjI4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2JkYjYwNC1jNDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuOmoTCBg1biRjEWhAdmCgAiXCWQn/6FMO2XruzGSUuTrySbAgJTeDdKGpEq7
9MKezXfBMRyyt3Uft2EEaSu4siA/R6zmH//1XtPvykU0HztAfnnioMjoztTQFTg3
A/5Cmnap5MRfXmPs2mtf8ZIdNenwEdxJrX3LrdLE4rCQfZlzfHVbQ/3SzD4Qhqet
GYjTOrbpOCaabOFWamItGqrfByKyZhBIto/DpNwNnWUnVV7QZFl2bwcVdUZZC+la
3X8MTKCPUiUmVXmIPBJykaWmZeDDn7wOzMrgrmsEvtESpRQV16pfypfabJV4Jtnt
w37733YCjQhYSV95g/TAZ9c76wIDAQABo4ICuTCCArUwHQYDVR0OBBYEFFiVDDSB
c/gzE2hLw6U8aSqse3XlMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRUExOTEyOTRG
MzcwMTFFRjlCRTNCRDZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E
NDAyMDAEAgABMCoDBACLvggDBACLvg0DBACLvg8DBACLvhEDBACLvhQDBAKLvhgD
BAGLvh4wDQYJKoZIhvcNAQELBQADggEBAMDzkZr2sdyXhRJIjT5meNykOch0smWm
gaEzqrtR8lPvjO8X0u06KxCgLpZnEavyUC45XFYoM83DOjS1wFPZPZLy6283vHr3
tbTnNv0/8BK2cE8UulpXR/1hLYAakMpibEhcGoPsuD5EupoKNLjQ8QK0S20t7NAF
ftzqLB4Bg4wy6a9j/mNcOb7zTLflFeYjQRTNQ96HJKoz7hHymSVQwW5qzGflOqnm
cFR6tbhA5I/HgrYXYpTbixw3m4/5E4QxwthOmzfZWNLewNSoT7tr5VLS3P5mHjQQ
HfuhtierKTgGgkwoeABi5mAi3QlRjuCeYpk7vdbR2YaqNsS/viHPZNw=
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:43:43 2025 by rpki-client