Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/645B22EAA80311EF9970567AC4F9AE02.roa
File: 645B22EAA80311EF9970567AC4F9AE02.roa (raw, json)
Hash identifier: FqRMFOH34RDxy26rfkLQXire2oBj6WBE2C+PgjNf2yg=
Subject key identifier: A0:7B:65:EE:64:50:BE:8E:44:0E:14:E7:B8:EE:AA:03:14:1A:01:CA
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0C30
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/645B22EAA80311EF9970567AC4F9AE02.roa
Signing time: Mon 25 Nov 2024 06:41:16 +0000
ROA not before: Mon 25 Nov 2024 06:41:16 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.0.0/21 maxlen: 24
139.190.56.0/22 maxlen: 22
139.190.124.0/24 maxlen: 24
139.190.125.0/24 maxlen: 24
139.190.126.0/24 maxlen: 24
139.190.127.0/24 maxlen: 24
139.190.235.0/24 maxlen: 24
139.190.238.0/24 maxlen: 24
139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Nov 2024 12:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3120 (0xc30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Nov 25 06:41:16 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67441c0c-5291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:f7:d2:cd:b2:04:9d:98:ae:6f:bb:43:5b:
4d:8d:35:72:7f:3f:6f:f1:e1:65:ef:29:96:b5:8b:
79:16:43:8b:c7:72:44:64:5c:ff:e3:94:0d:b7:62:
22:d2:e2:44:40:8e:d8:86:23:81:05:6b:fe:e1:e8:
52:35:79:5e:ab:4e:3a:ad:61:b2:d7:4e:a0:fd:bc:
2d:70:36:9c:0b:da:e1:15:83:e9:47:01:0e:32:6a:
f6:11:3c:4e:1a:4a:95:32:18:85:9e:87:2b:f2:00:
f1:dc:f8:76:cf:3c:c0:73:a0:55:ce:84:9f:2c:5a:
96:ed:9d:31:90:9c:cd:de:c3:a6:ef:0b:a9:a0:0c:
fd:04:f1:3b:31:80:70:b1:c6:7f:41:ca:be:52:0d:
65:b0:37:6e:eb:c9:94:3c:a1:ff:93:15:20:4b:cc:
30:0f:83:cd:64:92:c5:99:60:2c:56:54:3c:eb:d5:
9a:78:dc:eb:50:8f:fa:29:ca:f0:24:46:aa:4c:c0:
d9:59:c1:ac:c3:b3:e6:48:32:ca:7a:b2:ee:e2:6a:
b4:24:fc:55:88:bc:ee:20:a4:bd:9c:e5:56:b9:f0:
fb:a3:53:5b:f9:14:62:13:cf:7b:0a:5d:80:37:76:
cc:ca:a2:74:f7:81:c0:35:2c:62:a9:57:8f:df:75:
21:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7B:65:EE:64:50:BE:8E:44:0E:14:E7:B8:EE:AA:03:14:1A:01:CA
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/645B22EAA80311EF9970567AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0/21
139.190.56.0/22
139.190.124.0/22
139.190.235.0/24
139.190.238.0/23
Signature Algorithm: sha256WithRSAEncryption
45:f5:76:bd:a7:17:70:9c:5f:fe:8c:84:3f:5f:c0:dd:46:0e:
31:2a:e3:94:a1:dd:65:67:c5:57:e3:08:9b:c5:56:b0:d7:a8:
ef:06:11:f4:70:bc:01:53:26:03:99:62:a2:d3:14:55:28:9b:
6b:54:7f:22:54:47:69:03:d1:aa:12:49:7b:51:73:44:9b:c8:
79:2d:cc:9a:ae:30:4f:59:e1:df:4e:cd:e8:ba:f9:7d:67:5b:
42:d3:39:30:6b:c4:66:08:5c:99:1c:71:b3:01:dc:37:ac:62:
8e:e4:17:fb:06:2d:f4:8f:1c:3f:0e:2d:cc:3b:e2:4b:27:87:
c7:b9:cf:25:a8:f0:cd:3f:86:fc:63:4d:84:4b:64:e8:f4:d8:
65:e9:5a:7d:96:a0:5a:bf:92:4c:d0:9e:0d:26:e6:37:3f:5d:
be:dc:58:db:c9:f9:37:6e:61:f3:8a:db:eb:44:59:41:af:38:
74:74:09:23:bd:7e:8d:26:b1:06:83:d3:36:5c:5f:b0:b7:a2:
52:11:c1:fc:5c:29:6b:93:63:b1:c6:11:e8:c5:10:50:58:cd:
52:e9:ad:a4:1b:a3:08:1c:8d:f6:7c:2e:de:41:1d:0e:15:3d:
3e:cb:5b:8b:88:18:2b:6c:34:81:f3:6c:fe:be:f3:40:a7:c7:
a0:3d:82:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 15:20:17 2024 by rpki-client on console.sobornost.net