Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/1E5A92D2E3EF11ED93D82717C4F9AE02.roa
File: 1E5A92D2E3EF11ED93D82717C4F9AE02.roa (raw, json)
Hash identifier: t9F0WE6KtOHE71onMlixhzqMNOoo7Kcff2J9h5Lyf8I=
Subject key identifier: 6F:C8:45:8E:8D:D7:62:B5:6E:41:DD:43:88:C5:52:37:05:CE:1F:06
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0886
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/1E5A92D2E3EF11ED93D82717C4F9AE02.roa
Signing time: Wed 24 May 2023 23:24:54 +0000
ROA not before: Wed 24 May 2023 23:24:54 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.100.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2182 (0x886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: May 24 23:24:54 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646e9cc6-3071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:d5:f2:c1:f1:b5:31:c4:22:ac:e3:fd:3a:
84:d3:a2:89:48:02:fd:ca:1c:22:06:2d:75:18:cc:
f1:83:c5:cf:9a:df:31:35:e7:e0:ee:9e:52:d7:f3:
fe:fb:3d:4f:02:f0:79:e6:ef:e8:86:29:09:a3:c2:
75:1d:cc:66:50:92:0c:2c:60:e5:67:e3:c8:cd:44:
d5:1d:56:fd:8c:c5:df:d1:a0:12:07:8b:8a:b9:f5:
74:6e:28:1d:0d:6b:c4:97:d7:d6:bb:2c:ab:64:94:
1b:d7:23:1e:00:27:e8:cc:38:ec:e2:77:87:18:6b:
d0:91:53:e0:a2:af:a1:4c:52:7c:2b:b6:57:ee:3a:
8b:d1:e4:74:6e:d1:9e:5f:ff:f9:35:52:58:14:35:
05:3d:ad:4e:f4:b8:43:5a:50:79:58:46:ef:4f:f3:
63:76:ba:34:ff:6a:40:17:2e:0a:e4:f1:8b:44:67:
f9:5a:39:27:b7:74:ba:7e:d5:d1:52:c5:e3:5e:5e:
e5:cc:ca:be:0c:a6:e5:f7:b9:42:5d:89:f5:99:85:
a7:5a:55:17:43:fc:83:57:02:b4:3b:ce:8d:bf:0f:
c2:3b:a6:3c:68:0d:92:d9:39:82:47:73:fb:cf:2e:
97:5a:5a:d1:70:bf:dc:0d:c7:00:e8:d2:5a:f8:0d:
2f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C8:45:8E:8D:D7:62:B5:6E:41:DD:43:88:C5:52:37:05:CE:1F:06
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/1E5A92D2E3EF11ED93D82717C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.100.0/22
Signature Algorithm: sha256WithRSAEncryption
37:72:1b:31:7c:2d:ba:11:a2:b8:d5:a1:dc:ce:aa:c6:52:57:
b7:6c:dc:89:86:a0:c5:30:0c:24:00:16:8d:13:f1:9b:41:c8:
a7:a9:b8:84:92:e6:a3:71:79:27:d2:05:c4:4e:78:c3:b3:f3:
9d:9c:3d:fc:77:05:ff:c5:c2:d9:7d:37:ad:18:d8:de:cf:5b:
aa:68:72:9d:c2:1a:a5:4a:3b:f7:ea:cf:30:6e:f5:78:e4:d6:
75:18:52:f6:6e:b6:16:51:03:74:3f:b3:28:e2:4a:25:5c:17:
fe:dd:f3:0e:a8:dc:eb:bf:af:d0:1d:3b:6b:41:0e:a4:d9:eb:
a9:46:4f:86:d6:75:a9:e7:79:02:38:16:90:e0:5d:40:d3:2e:
01:e0:60:f9:7f:2f:5b:27:ef:12:e3:ab:da:06:52:e8:68:c3:
38:86:be:aa:fc:2f:56:d7:7f:ef:87:f1:0c:a3:39:c4:17:bd:
19:2f:e3:de:80:9b:c5:f4:43:87:57:3e:70:60:f5:8c:cf:3c:
6d:52:8f:9e:42:a1:9e:16:e1:05:c3:65:7a:e0:12:b5:aa:5e:
3e:68:a1:7c:30:6f:60:d2:46:f1:05:b7:03:6a:9d:d2:a8:5f:
a5:12:3a:9a:a1:60:c7:bc:a9:70:21:dc:9d:25:da:3c:1d:13:
23:ad:6b:6b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1
Rjg4Mjc2RDMwHhcNMjMwNTI0MjMyNDU0WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDZlOWNjNi0zMDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAotTV8sHxtTHEIqzj/TqE06KJSAL9yhwiBi11GMzxg8XPmt8xNefg7p5S1/P+
+z1PAvB55u/ohikJo8J1HcxmUJIMLGDlZ+PIzUTVHVb9jMXf0aASB4uKufV0bigd
DWvEl9fWuyyrZJQb1yMeACfozDjs4neHGGvQkVPgoq+hTFJ8K7ZX7jqL0eR0btGe
X//5NVJYFDUFPa1O9LhDWlB5WEbvT/Njdro0/2pAFy4K5PGLRGf5Wjknt3S6ftXR
UsXjXl7lzMq+DKbl97lCXYn1mYWnWlUXQ/yDVwK0O86Nvw/CO6Y8aA2S2TmCR3P7
zy6XWlrRcL/cDccA6NJa+A0vTwIDAQABo4IClTCCApEwHQYDVR0OBBYEFG/IRY6N
12K1bkHdQ4jFUjcFzh8GMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMUU1QTkyRDJF
M0VGMTFFRDkzRDgyNzE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKLvmQwDQYJKoZIhvcNAQELBQADggEBADdyGzF8LboRorjV
odzOqsZSV7ds3ImGoMUwDCQAFo0T8ZtByKepuISS5qNxeSfSBcROeMOz852cPfx3
Bf/Fwtl9N60Y2N7PW6pocp3CGqVKO/fqzzBu9Xjk1nUYUvZuthZRA3Q/syjiSiVc
F/7d8w6o3Ou/r9AdO2tBDqTZ66lGT4bWdanneQI4FpDgXUDTLgHgYPl/L1sn7xLj
q9oGUuhowziGvqr8L1bXf++H8QyjOcQXvRkv496Am8X0Q4dXPnBg9YzPPG1Sj55C
oZ4W4QXDZXrgErWqXj5ooXwwb2DSRvEFtwNqndKoX6USOpqhYMe8qXAh3J0l2jwd
EyOta2s=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:38 2023 by rpki-client on console.sobornost.net